Microsoft-Windows-DiagCpl

Event	Title	Channel	Sample	Rule
1001	task_0	Debug	N	N
1002	task_01002	Debug	N	N
1003	task_01003	Debug	N	N
2001	task_02001	Debug	N	N
2002	task_02002	Debug	N	N
4000	Begin search.	Debug	N	N
4001	End search.	Debug	N	N

Event ID 1001: task_0

Channel: Debug

Fields #

Name	Description
`Message` UnicodeString
`FileName` AnsiString
`Function` AnsiString
`Line` UInt32
`Result` UInt32

Event ID 1002: task_01002

Channel: Debug

Fields #

Name	Description
`Message` UnicodeString
`FileName` AnsiString
`Function` AnsiString
`Line` UInt32
`Result` UInt32

Event ID 1003: task_01003

Channel: Debug

Fields #

Name	Description
`Message` UnicodeString
`FileName` AnsiString
`Function` AnsiString
`Line` UInt32
`Result` UInt32

Event ID 2001: task_02001

Channel: Debug

Fields #

Name	Description
`FileName` AnsiString
`Line` UInt32
`Address` Pointer
`Size` UInt32

Event ID 2002: task_02002

Channel: Debug

Fields #

Name	Description
`FileName` AnsiString
`Line` UInt32
`Address` Pointer

Event ID 4000: Begin search.

Channel: Debug
Task: PerfTrack_DIAGCPL_Search
Opcode: Start

Fields #

Name	Description
`SearchOnline` UInt32
`SearchType` UInt32
`ExitCode` UInt32

Event ID 4001: End search.

Channel: Debug
Task: PerfTrack_DIAGCPL_Search
Opcode: Stop

Fields #

Name	Description
`SearchOnline` UInt32
`SearchType` UInt32
`ExitCode` UInt32

Provenance

ETW provider GUID 1a396961-5f3c-4c71-8310-44c653c0bf8a

Defined in DiagCpl.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB