Microsoft-Windows-Hyper-V-ComputeCExec
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 100 | TraceData. | Microsoft-Windows-Hyper-V-Compute-Analytic | N | N |
| 100 | Event ID 100 | Operational | N | N |
| 101 | TraceData. | Microsoft-Windows-Hyper-V-Compute-Analytic | N | N |
| 101 | Event ID 101 | Operational | N | N |
| 102 | TraceData. | Microsoft-Windows-Hyper-V-Compute-Analytic | N | N |
| 102 | Event ID 102 | Operational | N | N |
| 103 | TraceData. | Microsoft-Windows-Hyper-V-Compute-Analytic | N | N |
| 103 | Event ID 103 | Operational | N | N |
| 1000 | The Container Execution Agent failed to start: ErrorMessage (ErrorCode). | Microsoft-Windows-Hyper-V-Compute-Admin | N | N |
| 1000 | Event ID 1000 | Operational | N | N |
| 1001 | The Container Execution Agent exited unexpectedly: ErrorMessage (ErrorCode). | Microsoft-Windows-Hyper-V-Compute-Admin | N | N |
| 1001 | Event ID 1001 | Operational | N | N |
| 1002 | Failed to handle request: ErrorMessage (ErrorCode). | Microsoft-Windows-Hyper-V-Compute-Admin | N | N |
| 1002 | Event ID 1002 | Operational | N | N |
| 1003 | The request to execute a command failed: ErrorMessage (ErrorCode). | Microsoft-Windows-Hyper-V-Compute-Admin | N | N |
| 1003 | Event ID 1003 | Operational | N | N |
| 1004 | The request to shutdown the container failed: ErrorMessage (ErrorCode). | Microsoft-Windows-Hyper-V-Compute-Admin | N | N |
| 1004 | Event ID 1004 | Operational | N | N |
| 1005 | The request to resize a console failed: ErrorMessage (ErrorCode). | Microsoft-Windows-Hyper-V-Compute-Admin | N | N |
| 1005 | Event ID 1005 | Operational | N | N |
| 10000 | The Container Execution Agent started successfully. | Microsoft-Windows-Hyper-V-Compute-Operational | N | N |
| 10000 | Event ID 10000 | Operational | N | N |
| 10001 | The Container Execution Agent stopped. | Microsoft-Windows-Hyper-V-Compute-Operational | N | N |
| 10001 | Event ID 10001 | Operational | N | N |
| 10002 | Listening on pipe 'Parameter0'. | Microsoft-Windows-Hyper-V-Compute-Operational | N | N |
| 10002 | Event ID 10002 | Operational | N | N |
| 10003 | Received request to execute a command. | Microsoft-Windows-Hyper-V-Compute-Operational | N | N |
| 10003 | Event ID 10003 | Operational | N | N |
| 10004 | Starting process, command line 'Parameter0', stdin 'Parameter1', stdout … | Microsoft-Windows-Hyper-V-Compute-Operational | N | N |
| 10004 | Event ID 10004 | Operational | N | N |
| 10005 | Received request to find a process (process ID Parameter0). | Microsoft-Windows-Hyper-V-Compute-Operational | N | N |
| 10005 | Event ID 10005 | Operational | N | N |
| 10007 | Received request to shutdown the container. | Microsoft-Windows-Hyper-V-Compute-Operational | N | N |
| 10007 | Event ID 10007 | Operational | N | N |
| 10008 | Received request to resize a console (process ID Parameter0). | Microsoft-Windows-Hyper-V-Compute-Operational | N | N |
| 10008 | Event ID 10008 | Operational | N | N |
Event ID 100: TraceData.
#Event ID 100
#Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 101: TraceData.
#Event ID 101
#Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 102: TraceData.
#Event ID 102
#Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 103: TraceData.
#Event ID 103
#Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1000: The Container Execution Agent failed to start: ErrorMessage (ErrorCode).
#Event ID 1001: The Container Execution Agent exited unexpectedly: ErrorMessage (ErrorCode).
#Event ID 1002: Failed to handle request: ErrorMessage (ErrorCode).
#Event ID 1003: The request to execute a command failed: ErrorMessage (ErrorCode).
#Event ID 1004: The request to shutdown the container failed: ErrorMessage (ErrorCode).
#Event ID 1005: The request to resize a console failed: ErrorMessage (ErrorCode).
#Event ID 10000: The Container Execution Agent started successfully.
#Event ID 10000
#Event ID 10001: The Container Execution Agent stopped.
#Event ID 10001
#Event ID 10002: Listening on pipe 'Parameter0'.
#Event ID 10003: Received request to execute a command.
#Event ID 10003
#Event ID 10004: Starting process, command line 'Parameter0', stdin 'Parameter1', stdout 'Parameter2', stderr 'Parameter3'.
#Event ID 10004
#Fields #
| Name | Description |
|---|---|
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString | |
Parameter3 UnicodeString |