Microsoft-Windows-Connected-Search

Event	Title	Channel	Sample	Rule
1	Starting query with query term {QueryTerm}{QueryTerm} for type {Type}{Type}.	Debug	N	N
2	Completed query with query term {QueryTerm}{QueryTerm} for type {Type}{Type}.	Debug	N	N
3	Impression Id {ImpressionId}{ImpressionId} : Ref Id {RefId}{RefId} : Query …	Operational	N	N
4	Using Cached RSS instead of querying service.	Analytic	N	N
100	Fetching url {Url}{Url} with headers {Headers}{Headers} and user-agent string …	Debug	N	N
101	Finished fetching url {Url}{Url} with result {Result}{Result}.	Debug	N	N
102	Opening HTTP connection to host {HostName}{HostName} on port {Port}{Port}.	Debug	N	N
103	HTTP request failed with status code {StatusCode}{StatusCode}.	Debug	N	N
104	X-Search-GetAuthStatus Http header added: {HTTPHeaderValue}{HTTPHeaderValue}.	Analytic	N	N
105	X-Search-AuthStatus Http header returned: {HTTPHeaderValue}{HTTPHeaderValue}.	Analytic	N	N
106	X-Search-AuthStatus Http header not found	Analytic	N	N
107	Error returned when reading HTTP Request response {AsyncError}{AsyncError}.	Debug	N	N
108	Read {Bytes}{Bytes} bytes from HTTP response with error {Result}{Result}.	Analytic	N	N
109	Wrote {Bytes}{Bytes} bytes from HTTP response with error {Result}{Result}.	Analytic	N	N
110	HTTP Status {InternetStatus}{InternetStatus}.	Analytic	N	N
111	X-Search-Location Http header added: {HTTPHeaderName}{HTTPHeaderName}: …	Analytic	N	N
112	Wrote {Bytes}{Bytes} pending bytes from HTTP response with error …	Analytic	N	N
113	Failed to open request to URL: {Url}{Url} with error {Result}{Result}.	Debug	N	N
114	Failed to send request to URL: {Url}{Url} with error {Result}{Result}.	Debug	N	N
115	X-PreferDomain Http header returned: {HTTPHeaderValue}{HTTPHeaderValue}.	Analytic	N	N
116	X-PreferDomain Http header not found	Analytic	N	N
117	X-Charm-Privacy Http header added: {HTTPHeaderValue}{HTTPHeaderValue}.	Analytic	N	N
118	X-SQM Http header added: {HTTPHeaderName}{HTTPHeaderName}: …	Analytic	N	N
119	Referer Http header added: {HTTPHeaderName}{HTTPHeaderName}: …	Analytic	N	N
200	Starting to parse XML response of type: {Type}{Type}.	Debug	N	N
201	Finished parsing XML response of type: {Type}{Type} with result …	Debug	N	N
202	Result set Impression Id {ImpressionId}{ImpressionId}.	Debug	N	N
203	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
204	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
205	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
206	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
207	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
208	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
209	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
210	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
211	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
212	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
213	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
214	Impression Id: {ImpressionId}{ImpressionId}.	Debug	N	N
215	Failed parsing XML response of type: {Type}{Type} with result {Result}{Result}.	Debug	N	N
216	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
217	Impression Id: {ImpressionId}{ImpressionId}.	Analytic	N	N
300	Query Suggestions throttling minimum query length set to length …	Analytic	N	N
301	Query Suggestions throttling timeout value set to value {Timeout}{Timeout}.	Analytic	N	N
302	Query Suggestions throttling being applied for timeout {Timeout}{Timeout}.	Analytic	N	N
303	Suggestions query term {QueryTerm}{QueryTerm} does not meet minimum query length …	Analytic	N	N
400	Executing connected search query of type {Type}{Type}.	Analytic	N	N
401	Completed connected search query of type {Type}{Type} with result …	Analytic	N	N
402	Connected search query of type {Type}{Type} failed with result {Result}{Result}.	Debug	N	N

Event ID 1: Starting query with query term {QueryTerm}{QueryTerm} for type {Type}{Type}.

Channel: Debug

Fields #

Name	Description
`QueryTerm`
`Type`

Event ID 2: Completed query with query term {QueryTerm}{QueryTerm} for type {Type}{Type}.

Channel: Debug

Description

Completed query with query term {QueryTerm}{QueryTerm} for type {Type}{Type}. Result {Result}{Result}.

Message #

Completed query with query term {QueryTerm}{QueryTerm} for type {Type}{Type}.  Result {Result}{Result}

Fields #

Name	Description
`QueryTerm`
`Type`
`Result`

Event ID 3: Impression Id {ImpressionId}{ImpressionId} : Ref Id {RefId}{RefId} : Query {Query}{Query}.

Channel: Operational

Fields #

Name	Description
`ImpressionId`
`RefId`
`Query`

Event ID 4: Using Cached RSS instead of querying service.

Channel: Analytic

Event ID 100: Fetching url {Url}{Url} with headers {Headers}{Headers} and user-agent string {User-Agent}{User-Agent}.

Channel: Debug

Fields #

Name	Description
`Url`
`Headers`

Event ID 101: Finished fetching url {Url}{Url} with result {Result}{Result}.

Channel: Debug

Fields #

Name	Description
`Url`
`Result`

Event ID 102: Opening HTTP connection to host {HostName}{HostName} on port {Port}{Port}.

Channel: Debug

Fields #

Name	Description
`HostName`
`Port`

Event ID 103: HTTP request failed with status code {StatusCode}{StatusCode}.

Channel: Debug

Fields #

Name	Description
`StatusCode`	NTSTATUS reference

Event ID 104: X-Search-GetAuthStatus Http header added: {HTTPHeaderValue}{HTTPHeaderValue}.

Channel: Analytic

Fields #

Name	Description
`HTTPHeaderValue`

Event ID 105: X-Search-AuthStatus Http header returned: {HTTPHeaderValue}{HTTPHeaderValue}.

Channel: Analytic

Fields #

Name	Description
`HTTPHeaderValue`

Event ID 106: X-Search-AuthStatus Http header not found

Channel: Analytic

Event ID 107: Error returned when reading HTTP Request response {AsyncError}{AsyncError}.

Channel: Debug

Fields #

Name	Description
`AsyncError`

Event ID 108: Read {Bytes}{Bytes} bytes from HTTP response with error {Result}{Result}.

Channel: Analytic

Fields #

Name	Description
`Bytes`
`Result`

Event ID 109: Wrote {Bytes}{Bytes} bytes from HTTP response with error {Result}{Result}.

Channel: Analytic

Fields #

Name	Description
`Bytes`
`Result`

Event ID 110: HTTP Status {InternetStatus}{InternetStatus}.

Channel: Analytic

Fields #

Name	Description
`InternetStatus`

Event ID 111: X-Search-Location Http header added: {HTTPHeaderName}{HTTPHeaderName}: {HTTPheaderValue}{HTTPheaderValue}.

Channel: Analytic

Fields #

Name	Description
`HTTPHeaderName`
`HTTPheaderValue`

Event ID 112: Wrote {Bytes}{Bytes} pending bytes from HTTP response with error {Result}{Result}.

Channel: Analytic

Fields #

Name	Description
`Bytes`
`Result`

Event ID 113: Failed to open request to URL: {Url}{Url} with error {Result}{Result}.

Channel: Debug

Fields #

Name	Description
`Url`
`Result`

Event ID 114: Failed to send request to URL: {Url}{Url} with error {Result}{Result}.

Channel: Debug

Fields #

Name	Description
`Url`
`Result`

Event ID 115: X-PreferDomain Http header returned: {HTTPHeaderValue}{HTTPHeaderValue}.

Channel: Analytic

Fields #

Name	Description
`HTTPHeaderValue`

Event ID 116: X-PreferDomain Http header not found

Channel: Analytic

Event ID 117: X-Charm-Privacy Http header added: {HTTPHeaderValue}{HTTPHeaderValue}.

Channel: Analytic

Fields #

Name	Description
`HTTPHeaderValue`

Event ID 118: X-SQM Http header added: {HTTPHeaderName}{HTTPHeaderName}: {HTTPheaderValue}{HTTPheaderValue}.

Channel: Analytic

Fields #

Name	Description
`HTTPHeaderName`
`HTTPheaderValue`

Event ID 119: Referer Http header added: {HTTPHeaderName}{HTTPHeaderName}: {HTTPheaderValue}{HTTPheaderValue}.

Channel: Analytic

Fields #

Name	Description
`HTTPHeaderName`
`HTTPheaderValue`

Event ID 200: Starting to parse XML response of type: {Type}{Type}.

Channel: Debug

Fields #

Name	Description
`Type`

Event ID 201: Finished parsing XML response of type: {Type}{Type} with result {Result}{Result}.

Channel: Debug

Fields #

Name	Description
`Type`
`Result`

Event ID 202: Result set Impression Id {ImpressionId}{ImpressionId}.

Channel: Debug

Fields #

Name	Description
`ImpressionId`

Event ID 203: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Description

Impression Id: {ImpressionId}{ImpressionId}. item node encountered with object id: {ParserObjectId}{ParserObjectId} and sub-element id: {ParserSubElementId}{ParserSubElementId}.

Message #

Impression Id: {ImpressionId}{ImpressionId}. item node encountered with object id: {ParserObjectId}{ParserObjectId} and sub-element id: {ParserSubElementId}{ParserSubElementId}

Fields #

Name	Description
`ImpressionId`
`ParserObjectId`
`ParserSubElementId`

Event ID 204: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Message #

Impression Id: {ImpressionId}{ImpressionId}. {AttributeName}{AttributeName} attribute in namespace {Namespace}{Namespace} with value {Value}{Value} encountered with object id: {ParserObjectId}{ParserObjectId}

Fields #

Name	Description
`ImpressionId`
`AttributeName`
`Namespace`
`Value`
`ParserObjectId`

Event ID 205: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Description

Impression Id: {ImpressionId}{ImpressionId}. Expando property {Property}{Property} set to value {Value}{Value} for object id: {ParserObjectId}{ParserObjectId}.

Message #

Impression Id: {ImpressionId}{ImpressionId}. Expando property {Property}{Property} set to value {Value}{Value} for object id: {ParserObjectId}{ParserObjectId}

Fields #

Name	Description
`ImpressionId`
`Property`
`Value`
`ParserObjectId`

Event ID 206: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Description

Impression Id: {ImpressionId}{ImpressionId}. Mapped property {Property}{Property} set to value {Value}{Value} for object id: {ParserObjectId}{ParserObjectId}.

Message #

Impression Id: {ImpressionId}{ImpressionId}. Mapped property {Property}{Property} set to value {Value}{Value} for object id: {ParserObjectId}{ParserObjectId}

Fields #

Name	Description
`ImpressionId`
`Property`
`Value`
`ParserObjectId`

Event ID 207: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Message #

Impression Id: {ImpressionId}{ImpressionId}. extension node encountered with name {ElementName}{ElementName} with object id: {ParserObjectId}{ParserObjectId}; expando properties id {ExpandoPropertiesObjectId}{ExpandoPropertiesObjectId} and parent id: {ParentParserObjectId}{ParentParserObjectId}

Fields #

Name	Description
`ImpressionId`
`ElementName`
`ParserObjectId`
`ExpandoPropertiesObjectId`
`ParentParserObjectId`

Event ID 208: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Message #

Impression Id: {ImpressionId}{ImpressionId}. extension text node encountered with name {ElementName}{ElementName} with value {ElementValue}{ElementValue} for object id: {ParserObjectId}{ParserObjectId}

Fields #

Name	Description
`ImpressionId`
`ElementName`
`ElementValue`
`ParserObjectId`

Event ID 209: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Description

Impression Id: {ImpressionId}{ImpressionId}. Channel extension node encountered with element name {ElementName}{ElementName}.

Message #

Impression Id: {ImpressionId}{ImpressionId}. Channel extension node encountered with element name {ElementName}{ElementName}

Fields #

Name	Description
`ImpressionId`
`ElementName`

Event ID 210: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Description

Impression Id: {ImpressionId}{ImpressionId}. Channel extension text node encountered with element name {ElementName}{ElementName} and value {Value}{Value}.

Message #

Impression Id: {ImpressionId}{ImpressionId}. Channel extension text node encountered with element name {ElementName}{ElementName} and value {Value}{Value}

Fields #

Name	Description
`ImpressionId`
`ElementName`
`Value`

Event ID 211: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Description

Impression Id: {ImpressionId}{ImpressionId}. XAML template {TemplateId}{TemplateId} referenced in results.

Message #

Impression Id: {ImpressionId}{ImpressionId}. XAML template {TemplateId}{TemplateId} referenced in results.

Fields #

Name	Description
`ImpressionId`
`TemplateId`

Event ID 212: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Description

Impression Id: {ImpressionId}{ImpressionId}. XAML template {TemplateId}{TemplateId} referenced in results for prefetch.

Message #

Impression Id: {ImpressionId}{ImpressionId}. XAML template {TemplateId}{TemplateId} referenced in results for prefetch.

Fields #

Name	Description
`ImpressionId`
`TemplateId`

Event ID 213: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Description

Impression Id: {ImpressionId}{ImpressionId}. XAML template {TemplateId}{TemplateId} referenced in results is an invalid identifier.

Message #

Impression Id: {ImpressionId}{ImpressionId}. XAML template {TemplateId}{TemplateId} referenced in results is an invalid identifier.

Fields #

Name	Description
`ImpressionId`
`TemplateId`

Event ID 214: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Debug

Description

Impression Id: {ImpressionId}{ImpressionId}. Query result is empty due to policy enforcement. {QueryBlocked}{QueryBlocked}. {Message}{Message}. {ShowSettings}{ShowSettings}.

Message #

Impression Id: {ImpressionId}{ImpressionId}. Query result is empty due to policy enforcement.  {QueryBlocked}{QueryBlocked}.  {Message}{Message}.  {ShowSettings}{ShowSettings}

Fields #

Name	Description
`ImpressionId`
`QueryBlocked`
`Message`
`ShowSettings`

Event ID 215: Failed parsing XML response of type: {Type}{Type} with result {Result}{Result}.

Channel: Debug

Fields #

Name	Description
`Type`
`Result`

Event ID 216: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Description

Impression Id: {ImpressionId}{ImpressionId}. Pre-fetch image {ImagePath}{ImagePath} referenced in results.

Message #

Impression Id: {ImpressionId}{ImpressionId}. Pre-fetch image {ImagePath}{ImagePath} referenced in results.

Fields #

Name	Description
`ImpressionId`
`ImagePath`

Event ID 217: Impression Id: {ImpressionId}{ImpressionId}.

Channel: Analytic

Description

Impression Id: {ImpressionId}{ImpressionId}. Deferred Pre-fetch image {ImagePath}{ImagePath} referenced in results.

Message #

Impression Id: {ImpressionId}{ImpressionId}. Deferred Pre-fetch image {ImagePath}{ImagePath} referenced in results.

Fields #

Name	Description
`ImpressionId`
`ImagePath`

Event ID 300: Query Suggestions throttling minimum query length set to length {Length}{Length}.

Channel: Analytic

Fields #

Name	Description
`Length`

Event ID 301: Query Suggestions throttling timeout value set to value {Timeout}{Timeout}.

Channel: Analytic

Fields #

Name	Description
`Timeout`

Event ID 302: Query Suggestions throttling being applied for timeout {Timeout}{Timeout}.

Channel: Analytic

Fields #

Name	Description
`Timeout`

Event ID 303: Suggestions query term {QueryTerm}{QueryTerm} does not meet minimum query length {QueryLength}{QueryLength}.

Channel: Analytic

Fields #

Name	Description
`QueryTerm`
`QueryLength`

Event ID 400: Executing connected search query of type {Type}{Type}.

Channel: Analytic

Fields #

Name	Description
`Type`

Event ID 401: Completed connected search query of type {Type}{Type} with result {Result}{Result}.

Channel: Analytic

Fields #

Name	Description
`Type`
`Result`

Event ID 402: Connected search query of type {Type}{Type} failed with result {Result}{Result}.

Channel: Debug

Fields #

Name	Description
`Type`
`Result`