Microsoft-Windows-Diagnosis-PerfHost

Event	Title	Channel	Sample	Rule
1	Function {Function} of the PerfHost service failed with error code {Error}.	Analytic	N	N
2	The PerfHost service failed to create provider {ProviderName} because of error …	Analytic	N	N
3	Function {Function} of the PerfHost service failed to revert impersonation error …	Analytic	N	N
4	The PerfHost service rejected an RPC request with error code {Error}.	Analytic	N	N
10	The call to function {Function} of provider {Provider} ({ProviderDll}) returned …	Analytic	N	N
11	The PerfHost service is about to call the open procedure ({Function}) of …	Analytic	N	N
12	The PerfHost service is about to call the collect procedure ({Function}) of …	Analytic	N	N
13	The PerfHost service is about to call the close procedure ({Function}) of …	Analytic	N	N

Event ID 1: Function {Function} of the PerfHost service failed with error code {Error}.

Channel: Analytic

Fields #

Name	Description
`Function`
`Error`

Event ID 2: The PerfHost service failed to create provider {ProviderName} because of error {Error}.

Channel: Analytic

Fields #

Name	Description
`ProviderName`
`Error`

Event ID 3: Function {Function} of the PerfHost service failed to revert impersonation error code {Error}.

Channel: Analytic

Fields #

Name	Description
`Function`
`Error`

Event ID 4: The PerfHost service rejected an RPC request with error code {Error}.

Channel: Analytic

Fields #

Name	Description
`Error`

Event ID 10: The call to function {Function} of provider {Provider} ({ProviderDll}) returned with error code {ReturnValue}.

Channel: Analytic

Fields #

Name	Description
`Function`
`Provider`
`ProviderDll`
`ReturnValue`

Event ID 11: The PerfHost service is about to call the open procedure ({Function}) of provider {Provider} ({ProviderDll}) with argument '{FirstArgument}'.

Channel: Analytic

Fields #

Name	Description
`Function`
`Provider`
`ProviderDll`
`FirstArgument`

Event ID 12: The PerfHost service is about to call the collect procedure ({Function}) of provider {Provider} ({ProviderDll}) with query '{Query}' and buffer siz...

Channel: Analytic

Description

The PerfHost service is about to call the collect procedure ({Function}) of provider {Provider} ({ProviderDll}) with query '{Query}' and buffer size {Size}.

Message #

The PerfHost service is about to call the collect procedure ({Function}) of provider {Provider} ({ProviderDll}) with query '{Query}' and buffer size {Size}.

Fields #

Name	Description
`Function`
`Provider`
`ProviderDll`
`Query`
`Size`

Event ID 13: The PerfHost service is about to call the close procedure ({Function}) of provider {Provider} ({ProviderDll}).

Channel: Analytic

Fields #

Name	Description
`Function`
`Provider`
`ProviderDll`