ASP.NET Events

Event	Title	Channel	Sample	Rule
1	Start	ETW Trace	N	N
2	End	ETW Trace	N	N
3	RequestQueued	ETW Trace	N	N
4	RequestDequeued	ETW Trace	N	N
5	GetAppDomainEnter	ETW Trace	N	N
6	GetAppDomainLeave	ETW Trace	N	N
7	AppDomainEnter	ETW Trace	N	N
8	StartHandler	ETW Trace	N	N
9	EndHandler	ETW Trace	N	N
10	PipelineModuleEnter	ETW Trace	N	N
11	PipelineModuleLeave	ETW Trace	N	N
12	MapHandlerEnter	ETW Trace	N	N
13	MapHandlerLeave	ETW Trace	N	N
14	ParseEnter	ETW Trace	N	N
15	ParseLeave	ETW Trace	N	N
16	CompileEnter	ETW Trace	N	N
17	CompileLeave	ETW Trace	N	N
18	HttpHandlerEnter	ETW Trace	N	N
19	HttpHandlerLeave	ETW Trace	N	N
20	SessionStatePartitionStart	ETW Trace	N	N
21	SessionStatePartitionEnd	ETW Trace	N	N
22	PagePreInitEnter	ETW Trace	N	N
23	PagePreInitLeave	ETW Trace	N	N
24	PageInitEnter	ETW Trace	N	N
25	PageInitLeave	ETW Trace	N	N
26	PageLoadViewstateEnter	ETW Trace	N	N
27	PageLoadViewstateLeave	ETW Trace	N	N
28	PageLoadPostDataEnter	ETW Trace	N	N
29	PageLoadPostDataLeave	ETW Trace	N	N
30	PageLoadEnter	ETW Trace	N	N
31	PageLoadLeave	ETW Trace	N	N
32	PagePostDataChangedEnter	ETW Trace	N	N
33	PagePostDataChangedLeave	ETW Trace	N	N
34	PageRaisePostbackEnter	ETW Trace	N	N
35	PageRaisePostbackLeave	ETW Trace	N	N
36	PagePreRenderEnter	ETW Trace	N	N
37	PagePreRenderLeave	ETW Trace	N	N
38	PageSaveViewstateEnter	ETW Trace	N	N
39	PageSaveViewstateLeave	ETW Trace	N	N
40	PageRenderEnter	ETW Trace	N	N
41	PageRenderLeave	ETW Trace	N	N
42	SessionDataBegin	ETW Trace	N	N
43	SessionDataEnd	ETW Trace	N	N
44	ProfileBegin	ETW Trace	N	N
45	ProfileEnd	ETW Trace	N	N
46	RoleManagerIsUserInRole	ETW Trace	N	N
47	RoleManagerGetUserRoles	ETW Trace	N	N
48	RoleManagerBegin	ETW Trace	N	N
49	RoleManagerEnd	ETW Trace	N	N
50	WebEventRaiseStart	ETW Trace	N	N
51	WebEventRaiseEnd	ETW Trace	N	N
52	WebEventDeliverStart	ETW Trace	N	N
53	WebEventDeliverEnd	ETW Trace	N	N
59	TraceContext Warning Trace	ETW Trace	N	N
60	TraceContext Write Trace	ETW Trace	N	N
61	Diagnostic Trace Critical	ETW Trace	N	N
62	Diagnostic Trace Error	ETW Trace	N	N
63	Diagnostic Trace Warning	ETW Trace	N	N
64	Diagnostic Trace Info	ETW Trace	N	N
65	Diagnostic Trace Verbose	ETW Trace	N	N
66	Diagnostic Trace Start	ETW Trace	N	N
67	Diagnostic Trace Stop	ETW Trace	N	N
68	Diagnostic Trace Suspend	ETW Trace	N	N
69	Diagnostic Trace Resume	ETW Trace	N	N
70	Diagnostic Trace Transfer	ETW Trace	N	N

Event ID 1: Start

Channel: ETW Trace
Opcode: Start
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`Method` mof:String
`Path` mof:String
`QueryString` mof:String

Event ID 2: End

Channel: ETW Trace
Opcode: End
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 3: RequestQueued

Channel: ETW Trace
Opcode: RequestQueued
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 4: RequestDequeued

Channel: ETW Trace
Opcode: RequestDequeued
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 5: GetAppDomainEnter

Channel: ETW Trace
Opcode: GetAppDomainEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 6: GetAppDomainLeave

Channel: ETW Trace
Opcode: GetAppDomainLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 7: AppDomainEnter

Channel: ETW Trace
Opcode: AppDomainEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`DomainId` mof:String

Event ID 8: StartHandler

Channel: ETW Trace
Opcode: StartHandler
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`HandlerName` mof:String
`EventName` mof:String

Event ID 9: EndHandler

Channel: ETW Trace
Opcode: EndHandler
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 10: PipelineModuleEnter

Channel: ETW Trace
Opcode: PipelineModuleEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`ModuleName` mof:String

Event ID 11: PipelineModuleLeave

Channel: ETW Trace
Opcode: PipelineModuleLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`ModuleName` mof:String

Event ID 12: MapHandlerEnter

Channel: ETW Trace
Opcode: MapHandlerEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 13: MapHandlerLeave

Channel: ETW Trace
Opcode: MapHandlerLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 14: ParseEnter

Channel: ETW Trace
Opcode: ParseEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 15: ParseLeave

Channel: ETW Trace
Opcode: ParseLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 16: CompileEnter

Channel: ETW Trace
Opcode: CompileEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 17: CompileLeave

Channel: ETW Trace
Opcode: CompileLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`Files` mof:String
`Status` mof:String	NTSTATUS reference

Event ID 18: HttpHandlerEnter

Channel: ETW Trace
Opcode: HttpHandlerEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 19: HttpHandlerLeave

Channel: ETW Trace
Opcode: HttpHandlerLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 20: SessionStatePartitionStart

Channel: ETW Trace
Opcode: SessionStatePartitionStart
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`ResolverType` mof:String
`SessionId` mof:String

Event ID 21: SessionStatePartitionEnd

Channel: ETW Trace
Opcode: SessionStatePartitionEnd
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`ResolverResult` mof:String

Event ID 22: PagePreInitEnter

Channel: ETW Trace
Opcode: PagePreInitEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 23: PagePreInitLeave

Channel: ETW Trace
Opcode: PagePreInitLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 24: PageInitEnter

Channel: ETW Trace
Opcode: PageInitEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 25: PageInitLeave

Channel: ETW Trace
Opcode: PageInitLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 26: PageLoadViewstateEnter

Channel: ETW Trace
Opcode: PageLoadViewstateEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 27: PageLoadViewstateLeave

Channel: ETW Trace
Opcode: PageLoadViewstateLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 28: PageLoadPostDataEnter

Channel: ETW Trace
Opcode: PageLoadPostDataEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 29: PageLoadPostDataLeave

Channel: ETW Trace
Opcode: PageLoadPostDataLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 30: PageLoadEnter

Channel: ETW Trace
Opcode: PageLoadEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 31: PageLoadLeave

Channel: ETW Trace
Opcode: PageLoadLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 32: PagePostDataChangedEnter

Channel: ETW Trace
Opcode: PagePostDataChangedEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 33: PagePostDataChangedLeave

Channel: ETW Trace
Opcode: PagePostDataChangedLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 34: PageRaisePostbackEnter

Channel: ETW Trace
Opcode: PageRaisePostbackEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 35: PageRaisePostbackLeave

Channel: ETW Trace
Opcode: PageRaisePostbackLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 36: PagePreRenderEnter

Channel: ETW Trace
Opcode: PagePreRenderEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 37: PagePreRenderLeave

Channel: ETW Trace
Opcode: PagePreRenderLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 38: PageSaveViewstateEnter

Channel: ETW Trace
Opcode: PageSaveViewstateEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 39: PageSaveViewstateLeave

Channel: ETW Trace
Opcode: PageSaveViewstateLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 40: PageRenderEnter

Channel: ETW Trace
Opcode: PageRenderEnter
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 41: PageRenderLeave

Channel: ETW Trace
Opcode: PageRenderLeave
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 42: SessionDataBegin

Channel: ETW Trace
Opcode: SessionDataBegin
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 43: SessionDataEnd

Channel: ETW Trace
Opcode: SessionDataEnd
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 44: ProfileBegin

Channel: ETW Trace
Opcode: ProfileBegin
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 45: ProfileEnd

Channel: ETW Trace
Opcode: ProfileEnd
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`User` mof:String

Event ID 46: RoleManagerIsUserInRole

Channel: ETW Trace
Opcode: RoleManagerIsUserInRole
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`provider` mof:String
`User` mof:String
`Role` mof:String
`Status` mof:String	NTSTATUS reference

Event ID 47: RoleManagerGetUserRoles

Channel: ETW Trace
Opcode: RoleManagerGetUserRoles
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`provider` mof:String
`User` mof:String
`Roles` mof:String

Event ID 48: RoleManagerBegin

Channel: ETW Trace
Opcode: RoleManagerBegin
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 49: RoleManagerEnd

Channel: ETW Trace
Opcode: RoleManagerEnd
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`provider` mof:String
`User` mof:String

Event ID 50: WebEventRaiseStart

Channel: ETW Trace
Opcode: WebEventRaiseStart
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`EventClassName` mof:String
`EventCode` mof:String
`EventDetailCode` mof:String

Event ID 51: WebEventRaiseEnd

Channel: ETW Trace
Opcode: WebEventRaiseEnd
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 52: WebEventDeliverStart

Channel: ETW Trace
Opcode: WebEventDeliverStart
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object
`ProviderName` mof:String
`RuleName` mof:String
`EventGroupName` mof:String

Event ID 53: WebEventDeliverEnd

Channel: ETW Trace
Opcode: WebEventDeliverEnd
Source: Trace

Fields #

Name	Description
`ConnID` mof:UInt64
`ContextId` mof:Object

Event ID 59: TraceContext Warning Trace

Channel: ETW Trace
Opcode: TraceContextWarning
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWarningMsg` mof:String

Event ID 60: TraceContext Write Trace

Channel: ETW Trace
Opcode: TraceContextWrite
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Event ID 61: Diagnostic Trace Critical

Channel: ETW Trace
Opcode: DiagnosticTraceCritical
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Event ID 62: Diagnostic Trace Error

Channel: ETW Trace
Opcode: DiagnosticTraceError
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Event ID 63: Diagnostic Trace Warning

Channel: ETW Trace
Opcode: DiagnosticTraceWarning
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Event ID 64: Diagnostic Trace Info

Channel: ETW Trace
Opcode: DiagnosticTraceInfo
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Event ID 65: Diagnostic Trace Verbose

Channel: ETW Trace
Opcode: DiagnosticTraceVerbose
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Event ID 66: Diagnostic Trace Start

Channel: ETW Trace
Opcode: DiagnosticTraceStart
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Event ID 67: Diagnostic Trace Stop

Channel: ETW Trace
Opcode: DiagnosticTraceStop
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Event ID 68: Diagnostic Trace Suspend

Channel: ETW Trace
Opcode: DiagnosticTraceSuspend
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Event ID 69: Diagnostic Trace Resume

Channel: ETW Trace
Opcode: DiagnosticTraceResume
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Event ID 70: Diagnostic Trace Transfer

Channel: ETW Trace
Opcode: DiagnosticTraceTransfer
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Uri` mof:String
`TraceWriteMsg` mof:String

Provenance

ETW provider GUID {AFF081FE-0247-4275-9C4E-021F3DC1DA35}

WS2025-26100.0, schema read from the WMI MOF class, captured 2026-02-26
Taken from Windows installation media (build 26100.1), not a patched system, so the exact update level is unknown.
WS2022-20348.4893, schema read from the WMI MOF class, captured 2026-06-02
MOF class: AspNetTrace