Microsoft-Windows-GatewayService

68 events across 3 channels

Event	Title	Channel	Sample
1	ErrorString failed for Tunnel TunnelName RoutingId RoutingDomainName with error …	GatewayServiceOperationalChannel	N
1	Event ID 1	Operational	N
2	ErrorString failed with error ErrorCode.	GatewayServiceOperationalChannel	N
2	Event ID 2	Operational	N
3	Create Tunnel Called for Tunnel TunnelName RoutingId RoutingDomainName LocalIp …	GatewayServiceOperationalChannel	N
3	Event ID 3	Operational	N
4	Delete Tunnel Called for Tunnel TunnelName RoutingId RoutingDomainName returned …	GatewayServiceOperationalChannel	N
4	Event ID 4	Operational	N
5	Connection Initiated for Tunnel TunnelName RoutingId RoutingDomainName.	GatewayServiceOperationalChannel	N
5	Event ID 5	Operational	N
6	Disconnect Tunnel Called for Tunnel TunnelName RoutingId RoutingDomainName …	GatewayServiceOperationalChannel	N
6	Event ID 6	Operational	N
7	InfoString for Tunnel TunnelName RoutingId RoutingDomainName.	GatewayServiceOperationalChannel	N
7	Event ID 7	Operational	N
8	task_08	GatewayServiceOperationalChannel	N
8	Event ID 8	Operational	N
9	Connect completed for Tunnel TunnelName Routing ID RoutingDomainName with status …	GatewayServiceOperationalChannel	N
9	Event ID 9	Operational	N
10	Disconnect is Indicated from protocol for Tunnel TunnelName RoutingId …	GatewayServiceOperationalChannel	N
10	Event ID 10	Operational	N
11	InfoString for Tunnel TunnelName RoutingId RoutingDomainName tunnelId State.	GatewayServiceOperationalChannel	N
11	Event ID 11	Operational	N
12	Ikev2Policy: EncryptionType: EncryptionType Encryption: IPSecEncryption …	GatewayServiceOperationalChannel	N
12	Event ID 12	Operational	N
13	FunctionName : Enter.	GatewayServiceOperationalChannel	N
13	Event ID 13	Operational	N
14	FunctionName : Exit - Status.	GatewayServiceOperationalChannel	N
14	Event ID 14	Operational	N
15	TunctionName : for tunnel name TunnelName routing domain name RoutingDomainName …	GatewayServiceOperationalChannel	N
15	Event ID 15	Operational	N
16	FunctionName : for tunnel name TunnelName routing domain name RoutingDomainName …	GatewayServiceOperationalChannel	N
16	Event ID 16	Operational	N
17	IkeCreateTunnel called for tunnel name TunnelName routing domain name …	GatewayServiceOperationalChannel	N
17	Event ID 17	Operational	N
18	IkeCreateTunnel called for tunnel Id TunnelId returned Status.	GatewayServiceOperationalChannel	N
18	Event ID 18	Operational	N
19	IkeCloseTunnel called for tunnel name TunnelName routing domain name …	GatewayServiceOperationalChannel	N
19	Event ID 19	Operational	N
20	IkeCloseTunnel called for tunnel Id TunnelId returned Status.	GatewayServiceOperationalChannel	N
20	Event ID 20	Operational	N
21	IkeHandleIncomingConnection called for tunnel name TunnelName routing domain …	GatewayServiceOperationalChannel	N
21	Event ID 21	Operational	N
22	IkeHandleIncomingConnection called for tunnel Id TunnelId returned Status.	GatewayServiceOperationalChannel	N
22	Event ID 22	Operational	N
23	ErrorString failed for Tunnel TunnelName RoutingId RoutingDomainName with error …	GatewayServiceOperationalChannel	N
23	Event ID 23	Operational	N
24	ErrorString failed with error ErrorCode.	GatewayServiceOperationalChannel	N
24	Event ID 24	Operational	N
25	Alloc FunctionName FunctionName Ptr Memory.	GatewayServiceMemoryChannel	N
25	Event ID 25	Operational	N
26	Free FunctionName FunctionName Ptr Memory.	GatewayServiceMemoryChannel	N
26	Event ID 26	Operational	N
27	TrafficSelectors (FunctionName) for tunnel name TunnelName, routing domain name …	GatewayServiceOperationalChannel	N
27	Event ID 27	Operational	N
28	TrafficSelector (TraceString) for tunnel name TunnelName and routing domain name …	GatewayServiceOperationalChannel	N
28	Event ID 28	Operational	N
29	Removed TrafficSelector for tunnel name TunnelName, routing domain name …	GatewayServiceOperationalChannel	N
29	Event ID 29	Operational	N
30	Message - Tunnel Name TunnelName, Routing domain name RoutingDomainName.	GatewayServiceOperationalChannel	N
30	Event ID 30	Operational	N
31	task_031	GatewayServiceOperationalChannel	N
31	Event ID 31	Operational	N
32	ErrorString failed for Routing Domain RoutingDomainName with error (ErrorCode) …	GatewayServiceOperationalChannel	N
32	Event ID 32	Operational	N
33	ErrorString failed for Routing Domain RoutingDomainName with error (ErrorCode) …	GatewayServiceOperationalChannel	N
33	Event ID 33	Operational	N
34	InfoString for Tunnel TunnelName RoutingId RoutingDomainName TxBandwidthKbps …	GatewayServiceOperationalChannel	N
34	Event ID 34	Operational	N

Event ID 1: ErrorString failed for Tunnel TunnelName RoutingId RoutingDomainName with error (ErrorCode) WinErrorCode.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

ErrorString failed for Tunnel TunnelName RoutingId RoutingDomainName with error (ErrorCode) WinErrorCode.

Message #

%3 failed for Tunnel %1 RoutingId %2 with error (%4) %5

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 1

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

failed for Tunnel RoutingId with error ().

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 2: ErrorString failed with error ErrorCode.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

ErrorString failed with error ErrorCode.

Message #

%1 failed with error %2

Fields #

Name	Description
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 2

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

failed with error.

Fields #

Name	Description
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 3: Create Tunnel Called for Tunnel TunnelName RoutingId RoutingDomainName LocalIp LocalIp RemoteIp RemoteIp returned (ErrorCode) WinErrorCode.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

Create Tunnel Called for Tunnel TunnelName RoutingId RoutingDomainName LocalIp LocalIp RemoteIp RemoteIp returned (ErrorCode) WinErrorCode.

Message #

Create Tunnel Called for Tunnel %1 RoutingId %2 LocalIp %3 RemoteIp %4 returned (%5) %6

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`LocalIp` UnicodeString
`RemoteIp` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 3

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

Create Tunnel Called for Tunnel RoutingId LocalIp RemoteIp returned ().

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`LocalIp` UnicodeString
`RemoteIp` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 4: Delete Tunnel Called for Tunnel TunnelName RoutingId RoutingDomainName returned (ErrorCode) WinErrorCode.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

Delete Tunnel Called for Tunnel TunnelName RoutingId RoutingDomainName returned (ErrorCode) WinErrorCode.

Message #

Delete Tunnel Called for Tunnel %1 RoutingId %2 returned (%3) %4

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 4

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

Delete Tunnel Called for Tunnel RoutingId returned ().

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 5: Connection Initiated for Tunnel TunnelName RoutingId RoutingDomainName.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

Connection Initiated for Tunnel TunnelName RoutingId RoutingDomainName.

Message #

Connection Initiated for Tunnel %1 RoutingId %2

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString

Event ID 5

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

Connection Initiated for Tunnel RoutingId.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString

Event ID 6: Disconnect Tunnel Called for Tunnel TunnelName RoutingId RoutingDomainName returned (ErrorCode) WinErrorCode.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

Disconnect Tunnel Called for Tunnel TunnelName RoutingId RoutingDomainName returned (ErrorCode) WinErrorCode.

Message #

Disconnect Tunnel Called for Tunnel %1 RoutingId %2 returned (%3) %4

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 6

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

Disconnect Tunnel Called for Tunnel RoutingId returned ().

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 7: InfoString for Tunnel TunnelName RoutingId RoutingDomainName.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

InfoString for Tunnel TunnelName RoutingId RoutingDomainName.

Message #

%3 for Tunnel %1 RoutingId %2

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`InfoString` UnicodeString

Event ID 7

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

for Tunnel RoutingId.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`InfoString` UnicodeString

Event ID 8: task_08

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Message #

%1

Fields #

Name	Description
`InfoString` UnicodeString

Event ID 8

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Fields #

Name	Description
`InfoString` UnicodeString

Event ID 9: Connect completed for Tunnel TunnelName Routing ID RoutingDomainName with status (ErrorCode) WinErrorCode.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

Connect completed for Tunnel TunnelName Routing ID RoutingDomainName with status (ErrorCode) WinErrorCode.

Message #

Connect completed for Tunnel %1 Routing ID %2 with status (%3) %4

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 9

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

Connect completed for Tunnel Routing ID with status ().

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 10: Disconnect is Indicated from protocol for Tunnel TunnelName RoutingId RoutingDomainName is invoked due (ErrorCode) WinErrorCode with state State.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

Disconnect is Indicated from protocol for Tunnel TunnelName RoutingId RoutingDomainName is invoked due (ErrorCode) WinErrorCode with state State.

Message #

Disconnect is Indicated from protocol for Tunnel %1 RoutingId %2 is invoked due (%4) %5 with state %3

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`State` UInt32
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 10

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

Disconnect is Indicated from protocol for Tunnel RoutingId is invoked due () with state.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`State` UInt32
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 11: InfoString for Tunnel TunnelName RoutingId RoutingDomainName tunnelId State.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

InfoString for Tunnel TunnelName RoutingId RoutingDomainName tunnelId State.

Message #

%3 for Tunnel %1 RoutingId %2 tunnelId %4

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`InfoString` UnicodeString
`State` UInt64

Event ID 11

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

for Tunnel RoutingId tunnelId.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`InfoString` UnicodeString
`State` UInt64

Event ID 12: Ikev2Policy: EncryptionType: EncryptionType Encryption: IPSecEncryption IpsecIntegrity: IPSecIntegrity AhIntegrity: PfsGroup Pfsgroup: IkeEncryption IkeIntegrity: IkeIntegrity Dhgroup: DhGroup DpdT...

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

Ikev2Policy: EncryptionType: Encryption: IpsecIntegrity: AhIntegrity: Pfsgroup: IkeIntegrity: Dhgroup: DpdTimeout: SALifeTime: SALifeKb: UseNarrowTrafficSelectors.

Message #

Ikev2Policy: EncryptionType: %1 Encryption: %2 IpsecIntegrity: %3 AhIntegrity: %4 Pfsgroup: %5 IkeIntegrity: %6 Dhgroup: %7 DpdTimeout: %8 SALifeTime: %9 SALifeKb: %10 UseNarrowTrafficSelectors: %11

Fields #

Name	Description
`EncryptionType` UnicodeString
`IPSecEncryption` UnicodeString
`IPSecIntegrity` UnicodeString
`PfsGroup` UnicodeString
`IkeEncryption` UnicodeString
`IkeIntegrity` UnicodeString
`DhGroup` UnicodeString
`DpdTimeout` UInt32
`SALifeTimeSeconds` UInt32
`SALifeKb` UInt32
`UseNarrowTrafficSelectors` Boolean

Event ID 12

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

Ikev2Policy: EncryptionType: Encryption: IpsecIntegrity: AhIntegrity: Pfsgroup: IkeIntegrity: Dhgroup: DpdTimeout: SALifeTime: SALifeKb: UseNarrowTrafficSelectors.

Fields #

Name	Description
`EncryptionType` UnicodeString
`IPSecEncryption` UnicodeString
`IPSecIntegrity` UnicodeString
`PfsGroup` UnicodeString
`IkeEncryption` UnicodeString
`IkeIntegrity` UnicodeString
`DhGroup` UnicodeString
`DpdTimeout` UInt32
`SALifeTimeSeconds` UInt32
`SALifeKb` UInt32
`UseNarrowTrafficSelectors` Boolean

Event ID 13: FunctionName : Enter.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Message #

%1 : Enter

Fields #

Name	Description
`FunctionName` UnicodeString

Event ID 13

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Fields #

Name	Description
`FunctionName` UnicodeString

Event ID 14: FunctionName : Exit - Status.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Message #

%1 : Exit  - %2

Fields #

Name	Description
`FunctionName` UnicodeString
`Status` UInt32	NTSTATUS reference

Event ID 14

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Fields #

Name	Description
`FunctionName` UnicodeString
`Status` UInt32	NTSTATUS reference

Event ID 15: TunctionName : for tunnel name TunnelName routing domain name RoutingDomainName Enter.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

TunctionName : for tunnel name TunnelName routing domain name RoutingDomainName Enter.

Message #

%3 : for tunnel name %1 routing domain name %2 Enter

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TunctionName` UnicodeString

Event ID 15

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

: for tunnel name routing domain name Enter.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TunctionName` UnicodeString

Event ID 16: FunctionName : for tunnel name TunnelName routing domain name RoutingDomainName Exit - Status.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

FunctionName : for tunnel name TunnelName routing domain name RoutingDomainName Exit - Status.

Message #

%3 : for tunnel name %1 routing domain name %2 Exit - %4

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`FunctionName` UnicodeString
`Status` UInt32	NTSTATUS reference

Event ID 16

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

: for tunnel name routing domain name Exit -.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`FunctionName` UnicodeString
`Status` UInt32	NTSTATUS reference

Event ID 17: IkeCreateTunnel called for tunnel name TunnelName routing domain name RoutingDomainName tunnel Id TunnelId with DpdTimeout DpdTimeout Status Status.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

IkeCreateTunnel called for tunnel name TunnelName routing domain name RoutingDomainName tunnel Id TunnelId with DpdTimeout DpdTimeout Status Status.

Message #

IkeCreateTunnel called for tunnel name %1 routing domain name %2 tunnel Id %3 with DpdTimeout %4 Status %5

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TunnelId` UInt64
`DpdTimeout` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 17

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

IkeCreateTunnel called for tunnel name routing domain name tunnel Id with DpdTimeout Status.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TunnelId` UInt64
`DpdTimeout` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 18: IkeCreateTunnel called for tunnel Id TunnelId returned Status.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

IkeCreateTunnel called for tunnel Id TunnelId returned Status.

Message #

IkeCreateTunnel called for tunnel Id %1 returned %2

Fields #

Name	Description
`TunnelId` UInt64
`Status` UInt32	NTSTATUS reference

Event ID 18

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

IkeCreateTunnel called for tunnel Id returned.

Fields #

Name	Description
`TunnelId` UInt64
`Status` UInt32	NTSTATUS reference

Event ID 19: IkeCloseTunnel called for tunnel name TunnelName routing domain name RoutingDomainName tunnel Id TunnelId - Status.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

IkeCloseTunnel called for tunnel name TunnelName routing domain name RoutingDomainName tunnel Id TunnelId - Status.

Message #

IkeCloseTunnel called for tunnel name %1 routing domain name %2 tunnel Id %3 - %4

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TunnelId` UInt64
`Status` UInt32	NTSTATUS reference

Event ID 19

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

IkeCloseTunnel called for tunnel name routing domain name tunnel Id -.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TunnelId` UInt64
`Status` UInt32	NTSTATUS reference

Event ID 20: IkeCloseTunnel called for tunnel Id TunnelId returned Status.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

IkeCloseTunnel called for tunnel Id TunnelId returned Status.

Message #

IkeCloseTunnel called for tunnel Id %1 returned %2

Fields #

Name	Description
`TunnelId` UInt64
`Status` UInt32	NTSTATUS reference

Event ID 20

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

IkeCloseTunnel called for tunnel Id returned.

Fields #

Name	Description
`TunnelId` UInt64
`Status` UInt32	NTSTATUS reference

Event ID 21: IkeHandleIncomingConnection called for tunnel name TunnelName routing domain name RoutingDomainName tunnel Id TunnelId.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

IkeHandleIncomingConnection called for tunnel name TunnelName routing domain name RoutingDomainName tunnel Id TunnelId.

Message #

IkeHandleIncomingConnection called for tunnel name %1 routing domain name %2 tunnel Id %3

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TunnelId` UInt64

Event ID 21

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

IkeHandleIncomingConnection called for tunnel name routing domain name tunnel Id.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TunnelId` UInt64

Event ID 22: IkeHandleIncomingConnection called for tunnel Id TunnelId returned Status.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

IkeHandleIncomingConnection called for tunnel Id TunnelId returned Status.

Message #

IkeHandleIncomingConnection called for tunnel Id %1 returned %2

Fields #

Name	Description
`TunnelId` UInt64
`Status` UInt32	NTSTATUS reference

Event ID 22

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

IkeHandleIncomingConnection called for tunnel Id returned.

Fields #

Name	Description
`TunnelId` UInt64
`Status` UInt32	NTSTATUS reference

Event ID 23: ErrorString failed for Tunnel TunnelName RoutingId RoutingDomainName with error (ErrorCode) WinErrorCode.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

ErrorString failed for Tunnel TunnelName RoutingId RoutingDomainName with error (ErrorCode) WinErrorCode.

Message #

%3 failed for Tunnel %1 RoutingId %2 with error (%4) %5

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 23

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

failed for Tunnel RoutingId with error ().

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 24: ErrorString failed with error ErrorCode.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

ErrorString failed with error ErrorCode.

Message #

%1 failed with error %2

Fields #

Name	Description
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 24

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

failed with error.

Fields #

Name	Description
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 25: Alloc FunctionName FunctionName Ptr Memory.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceMemoryChannel

Description

Alloc FunctionName FunctionName Ptr Memory.

Message #

Alloc FunctionName %1 Ptr %2

Fields #

Name	Description
`FunctionName` AnsiString
`Memory` UInt64

Event ID 25

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

Alloc FunctionName Ptr.

Fields #

Name	Description
`FunctionName` AnsiString
`Memory` UInt64

Event ID 26: Free FunctionName FunctionName Ptr Memory.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceMemoryChannel

Description

Free FunctionName FunctionName Ptr Memory.

Message #

Free FunctionName %1 Ptr %2

Fields #

Name	Description
`FunctionName` AnsiString
`Memory` UInt64

Event ID 26

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

Free FunctionName Ptr.

Fields #

Name	Description
`FunctionName` AnsiString
`Memory` UInt64

Event ID 27: TrafficSelectors (FunctionName) for tunnel name TunnelName, routing domain name RoutingDomainName and TsId TsId has Tsis: NumTsis and Tsrs: NumTsrs.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

TrafficSelectors (FunctionName) for tunnel name TunnelName, routing domain name RoutingDomainName and TsId TsId has Tsis: NumTsis and Tsrs: NumTsrs.

Message #

TrafficSelectors (%1) for tunnel name %2, routing domain name %3 and TsId %4 has Tsis: %5  and Tsrs: %6

Fields #

Name	Description
`FunctionName` AnsiString
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TsId` UInt64
`NumTsis` UInt32
`NumTsrs` UInt32

Event ID 27

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

TrafficSelectors () for tunnel name , routing domain name and TsId has Tsis: and Tsrs.

Fields #

Name	Description
`FunctionName` AnsiString
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TsId` UInt64
`NumTsis` UInt32
`NumTsrs` UInt32

Event ID 28: TrafficSelector (TraceString) for tunnel name TunnelName and routing domain name RoutingDomainName at index Index is - start address: StartAddress end address: EndAddress port start: PortStart port...

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

TrafficSelector (TraceString) for tunnel name TunnelName and routing domain name RoutingDomainName at index Index is - start address: StartAddress end address: EndAddress port start: PortStart port end: PortEnd protocol id: ProtocolId.

Message #

TrafficSelector (%3) for tunnel name %1 and routing domain name %2 at index %4 is - start address: %5 end address: %6 port start: %7 port end: %8 protocol id: %9

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TraceString` UnicodeString
`Index` UInt32
`StartAddress` UnicodeString
`EndAddress` UnicodeString
`PortStart` UInt16
`PortEnd` UInt16
`ProtocolId` UInt8

Event ID 28

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

TrafficSelector () for tunnel name and routing domain name at index is - start address: end address: port start: port end: protocol id.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TraceString` UnicodeString
`Index` UInt32
`StartAddress` UnicodeString
`EndAddress` UnicodeString
`PortStart` UInt16
`PortEnd` UInt16
`ProtocolId` UInt8

Event ID 29: Removed TrafficSelector for tunnel name TunnelName, routing domain name RoutingDomainName and TsId TsId.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

Removed TrafficSelector for tunnel name TunnelName, routing domain name RoutingDomainName and TsId TsId.

Message #

Removed TrafficSelector for tunnel name %1, routing domain name %2 and TsId %3

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TsId` UInt64

Event ID 29

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

Removed TrafficSelector for tunnel name , routing domain name and TsId.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`TsId` UInt64

Event ID 30: Message - Tunnel Name TunnelName, Routing domain name RoutingDomainName.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

Message - Tunnel Name TunnelName, Routing domain name RoutingDomainName.

Message #

%3 - Tunnel Name %1, Routing domain name %2

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`Message` UnicodeString

Event ID 30

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

- Tunnel Name , Routing domain name.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`Message` UnicodeString

Event ID 31: task_031

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Message #

%1

Fields #

Name	Description
`Message` UnicodeString

Event ID 31

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Fields #

Name	Description
`Message` UnicodeString

Event ID 32: ErrorString failed for Routing Domain RoutingDomainName with error (ErrorCode) WinErrorCode.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

ErrorString failed for Routing Domain RoutingDomainName with error (ErrorCode) WinErrorCode.

Message #

%2 failed for Routing Domain %1 with error (%3) %4

Fields #

Name	Description
`RoutingDomainName` UnicodeString
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 32

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

failed for Routing Domain with error ().

Fields #

Name	Description
`RoutingDomainName` UnicodeString
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 33: ErrorString failed for Routing Domain RoutingDomainName with error (ErrorCode) WinErrorCode.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

ErrorString failed for Routing Domain RoutingDomainName with error (ErrorCode) WinErrorCode.

Message #

%2 failed for Routing Domain %1 with error (%3) %4

Fields #

Name	Description
`RoutingDomainName` UnicodeString
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 33

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

failed for Routing Domain with error ().

Fields #

Name	Description
`RoutingDomainName` UnicodeString
`ErrorString` UnicodeString
`ErrorCode` UInt32
`WinErrorCode` UInt32

Event ID 34: InfoString for Tunnel TunnelName RoutingId RoutingDomainName TxBandwidthKbps TxBandwidthKbps RxBandwidthKbps RxBandwidthKbps.

Provider: Microsoft-Windows-GatewayService
Channel: GatewayServiceOperationalChannel

Description

InfoString for Tunnel TunnelName RoutingId RoutingDomainName TxBandwidthKbps TxBandwidthKbps RxBandwidthKbps RxBandwidthKbps.

Message #

%3 for Tunnel %1 RoutingId %2 TxBandwidthKbps %4 RxBandwidthKbps %5

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`InfoString` UnicodeString
`TxBandwidthKbps` UInt64
`RxBandwidthKbps` UInt64

Event ID 34

Provider: Microsoft-Windows-GatewayService
Channel: Operational

Description

for Tunnel RoutingId TxBandwidthKbps RxBandwidthKbps.

Fields #

Name	Description
`TunnelName` UnicodeString
`RoutingDomainName` UnicodeString
`InfoString` UnicodeString
`TxBandwidthKbps` UInt64
`RxBandwidthKbps` UInt64

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID 58ac8283-c536-5244-63c2-eb41247e4a10

Defined in gtservice.dll, which carries the event manifest.

Observed on:

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02

Downloads

Microsoft-Windows-GatewayService registered manifest XML (in the WS2022-20348.4893 manifest pack, 1.9 MB) manifest-xml

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`risk_score`	Numeric comparison on the Elastic risk score (0 to 100): `risk_score>50`, `risk_score<=20`, `risk_score=99` (alias `risk`; Elastic rules only)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)