Microsoft-Windows-Hyper-V-SynthNic

118 events across 3 channels

Event	Title	Channel	Sample
1	[VMID VmId]	Operational	N
1	[VMID VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N
2	[VMID VmId]	Operational	N
2	[VMID VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N
3	[VMID VmId]	Operational	N
3	[VMID VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N
4	[VMID VmId]	Operational	N
4	[VMID VmId] TraceData.	Microsoft-Windows-Hyper-V-Worker-Analytic	N
12560	'VmName' Static MAC address MacAddress for "NicName" (NicGuid) is invalid	Operational	N
12560	'VmName' Static MAC address MacAddress for "NicName" (NicGuid) is invalid.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12562	'VmName' Static MAC address MacAddress for "NicName" (NicGuid) conflicts with …	Operational	N
12562	'VmName' Static MAC address MacAddress for "NicName" (NicGuid) conflicts with …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12564	'VmName' No available MAC address for "NicName"	Operational	N
12564	'VmName' No available MAC address for "NicName".	Microsoft-Windows-Hyper-V-Worker-Admin	N
12572	'VmName' Dynamic MAC address for "NicName" (NicGuid) was not assigned	Operational	N
12572	'.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12580	'VmName' Dynamic MAC address MacAddress for NicName (NicGuid) is invalid	Operational	N
12580	'VmName' Dynamic MAC address MacAddress for NicName (NicGuid) is invalid.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12581	Dynamic MAC address MacAddress for NicName (NicGuid) is invalid	Operational	N
12581	Dynamic MAC address MacAddress for NicName (NicGuid) is invalid.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12582	'VmName' NicName (NicGuid) started successfully	Operational	N
12582	'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName …	Microsoft-Windows-Hyper-V-Worker-Admin	Y
12583	'VmName' NicName (NicGuid) started successfully	Operational	N
12583	'VmName' NicName (NicGuid) started successfully.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12584	'VmName' NicName (NicGuid) allocated a virtual function	Operational	N
12584	'VmName' NicName (NicGuid) allocated a virtual function.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12585	'VmName' NicName (NicGuid) failed to allocate a virtual function: …	Operational	N
12585	'VmName' NicName (NicGuid) failed to allocate a virtual function: …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12586	'VmName' NicName (NicGuid) freed a virtual function	Operational	N
12586	'VmName' NicName (NicGuid) freed a virtual function.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12587	'VmName' NicName (NicGuid) failed to free a virtual function: ErrorCodeString …	Operational	N
12587	'VmName' NicName (NicGuid) failed to free a virtual function: ErrorCodeString …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12588	'VmName' NicName (NicGuid) assigned a virtual function	Operational	N
12588	'VmName' NicName (NicGuid) assigned a virtual function.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12589	'VmName' NicName (NicGuid) failed to assign a virtual function: ErrorCodeString …	Operational	N
12589	'VmName' NicName (NicGuid) failed to assign a virtual function: ErrorCodeString …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12590	'VmName' NicName (NicGuid) unassigned a virtual function	Operational	N
12590	'VmName' NicName (NicGuid) unassigned a virtual function.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12597	'VmName' NicName (NicGuid) Connected to virtual network	Operational	N
12597	'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName …	Microsoft-Windows-Hyper-V-Worker-Admin	Y
12598	'VmName' NicName (NicGuid) Disconnected from virtual network	Operational	N
12598	'VmName' NicName (NicGuid) Disconnected from virtual network.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12603	'VmName' NicName (NicGuid) Smart Paging now inactive	Operational	N
12603	'VmName' NicName (NicGuid) Smart Paging now inactive.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12604	'VmName' NicName (NicGuid) Smart Paging now active	Operational	N
12604	'VmName' NicName (NicGuid) Smart Paging now active.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12605	'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is …	Operational	N
12605	'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12606	'VmName' NicName (NicGuid) is configured to use SR-IOV but this system does not …	Operational	N
12606	'VmName' NicName (NicGuid) is configured to use SR-IOV but this system does not …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12607	'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is …	Operational	N
12607	'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12608	'VmName' NicName (NicGuid) failed to allocate a virtual function because the …	Operational	N
12608	'VmName' NicName (NicGuid) failed to allocate a virtual function because the …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12609	'VmName' NicName (NicGuid) failed to allocate a virtual function because the …	Operational	N
12609	'VmName' NicName (NicGuid) failed to allocate a virtual function because the …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12612	'VmName' NicName (NicGuid) unassigning a virtual function because of an invalid …	Operational	N
12612	'VmName' NicName (NicGuid) unassigning a virtual function because of an invalid …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12613	'VmName' NicName (NicGuid) The number of queue pairs allocated to the virtual …	Operational	N
12613	'VmName' NicName (NicGuid) The number of queue pairs allocated to the virtual …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12614	'VmName' NicName (NicGuid) The number of queue pairs to be allocated (VfId) were …	Operational	N
12614	'VmName' NicName (NicGuid) The number of queue pairs to be allocated (VfId) were …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12615	The device naming setting only applies to synthetic network adapters on …	Operational	N
12615	The device naming setting only applies to synthetic network adapters on …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12670	'VmName' failed to allocate resources while connecting to a virtual network: …	Operational	N
12670	'VmName' failed to allocate resources while connecting to a virtual network: …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12671	Failed to allocate resources while connecting to a virtual network	Operational	N
12671	Failed to allocate resources while connecting to a virtual network.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12680	'VmName' The VirtualSystemIdentifier VmId for "NicName" (NicGuid) conflicts with …	Operational	N
12680	'VmName' The VirtualSystemIdentifier VmId for "NicName" (NicGuid) conflicts with …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12692	Bytes sent or received by 'VmName' is larger than what can fit inside of a …	Operational	N
12692	Bytes sent or received by 'VmName' is larger than what can fit inside of a …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12693	Bytes send or received is larger than what can fit inside of an unsigned 64-bit …	Operational	N
12693	Bytes send or received is larger than what can fit inside of an unsigned 64-bit …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12694	'VmName' NicName (NicGuid) Pause failed	Operational	N
12694	'VmName' NicName (NicGuid) Pause failed.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12695	'VmName' NicName (NicGuid) ShutDown failed	Operational	N
12695	'VmName' NicName (NicGuid) ShutDown failed.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12696	'VmName' NicName (NicGuid) VMPhu Zero start sequence failed	Operational	N
12696	'VmName' NicName (NicGuid) VMPhu Zero start sequence failed.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12697	'VmName' NicName (NicGuid) VMPhu Zero start sequence succeeded	Operational	N
12697	'VmName' NicName (NicGuid) VMPhu Zero start sequence succeeded.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12698	'VmName' NicName (NicGuid) Save failed	Operational	N
12698	'VmName' NicName (NicGuid) Save failed.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12699	'VmName' NicName (NicGuid) PowerOn failed	Operational	N
12699	'VmName' NicName (NicGuid) PowerOn failed.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12700	'VmName' NicName (NicGuid) Restore failed	Operational	N
12700	'VmName' NicName (NicGuid) Restore failed.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12701	'VmName' NicName (NicGuid) Resume failed	Operational	N
12701	'VmName' NicName (NicGuid) Resume failed.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12702	'VmName' NicName (NicGuid) VMPhu Zero complete sequence failed	Operational	N
12702	'VmName' NicName (NicGuid) VMPhu Zero complete sequence failed.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12703	'VmName' NicName (NicGuid) VMPhu Zero complete sequence succeeded	Operational	N
12703	'VmName' NicName (NicGuid) VMPhu Zero complete sequence succeeded.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12704	'VmName' NicName (NicGuid) successfully saved the keep alive virtual function	Operational	N
12704	'VmName' NicName (NicGuid) successfully saved the keep alive virtual function.	Microsoft-Windows-Hyper-V-Worker-Admin	N
12705	'VmName' NicName (NicGuid) successfully assigned the keep alive virtual function	Operational	N
12705	'VmName' NicName (NicGuid) successfully assigned the keep alive virtual …	Microsoft-Windows-Hyper-V-Worker-Admin	N
12706	'VmName' NicName (NicGuid) failed to assign the keep alive virtual function: …	Operational	N
12706	'VmName' NicName (NicGuid) failed to assign the keep alive virtual function: …	Microsoft-Windows-Hyper-V-Worker-Admin	N
25400	Started Allocating VF on Nic (Name: Parameter0)	Operational	N
25400	Started Allocating VF on Nic (Name: Parameter0).	Microsoft-Windows-Hyper-V-Worker-Analytic	N
25401	Finished Allocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s	Operational	N
25401	Finished Allocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time …	Microsoft-Windows-Hyper-V-Worker-Analytic	N
25402	Started Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0)	Operational	N
25402	Started Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0).	Microsoft-Windows-Hyper-V-Worker-Analytic	N
25403	Finished Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time …	Operational	N
25403	Finished Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time …	Microsoft-Windows-Hyper-V-Worker-Analytic	N
25410	Started Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0)	Operational	N
25410	Started Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0).	Microsoft-Windows-Hyper-V-Worker-Analytic	N
25411	Finished Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s	Operational	N
25411	Finished Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s.	Microsoft-Windows-Hyper-V-Worker-Analytic	N
25412	Started Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0)	Operational	N
25412	Started Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0).	Microsoft-Windows-Hyper-V-Worker-Analytic	N
25413	Finished Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time …	Operational	N
25413	Finished Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time …	Microsoft-Windows-Hyper-V-Worker-Analytic	N
33010	Could not find an Ethernet connection resource pool with ID 'Parameter0'	Operational	N
33010	Could not find an Ethernet connection resource pool with ID 'Parameter0'.	Microsoft-Windows-Hyper-V-Worker-Admin	N

Event ID 1: [VMID VmId]

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 1: [VMID VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 2: [VMID VmId]

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 2: [VMID VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 3: [VMID VmId]

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 3: [VMID VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 4: [VMID VmId]

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 4: [VMID VmId] TraceData.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

Name	Description
`TraceData` UnicodeString
`VmName` UnicodeString
`VmId` UnicodeString
`StackFrameCount` UInt32
`StackFrame` Pointer
`ModuleCount` UInt32
`Module` Int32

Event ID 12560: 'VmName' Static MAC address MacAddress for "NicName" (NicGuid) is invalid

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' Static MAC address MacAddress for "NicName" (NicGuid) is invalid.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`MacAddress` UnicodeString

Event ID 12560: 'VmName' Static MAC address MacAddress for "NicName" (NicGuid) is invalid.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' Static MAC address MacAddress for "NicName" (NicGuid) is invalid.

Message #

'%1' Static MAC address %5 for "%4" (%3) is invalid.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`MacAddress` UnicodeString

Event ID 12562: 'VmName' Static MAC address MacAddress for "NicName" (NicGuid) conflicts with another adapter

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' Static MAC address MacAddress for "NicName" (NicGuid) conflicts with another adapter.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`MacAddress` UnicodeString

Event ID 12562: 'VmName' Static MAC address MacAddress for "NicName" (NicGuid) conflicts with another adapter.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' Static MAC address MacAddress for "NicName" (NicGuid) conflicts with another adapter.

Message #

'%1' Static MAC address %5 for "%4" (%3) conflicts with another adapter.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`MacAddress` UnicodeString

Event ID 12564: 'VmName' No available MAC address for "NicName"

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' No available MAC address for "NicName".

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12564: 'VmName' No available MAC address for "NicName".

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' No available MAC address for "NicName".

Message #

'%1' No available MAC address for "%4".

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12572: 'VmName' Dynamic MAC address for "NicName" (NicGuid) was not assigned

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`MacAddress` UnicodeString

Event ID 12572: '.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Message #

'%1' Dynamic MAC address for "%4" (%3) was not assigned.  The virtual machine will not have network connectivity until this problem is resolved. To assign a new MAC address, restart the virtual machine.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`MacAddress` UnicodeString

Event ID 12580: 'VmName' Dynamic MAC address MacAddress for NicName (NicGuid) is invalid

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' Dynamic MAC address MacAddress for NicName (NicGuid) is invalid.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`MacAddress` UnicodeString

Event ID 12580: 'VmName' Dynamic MAC address MacAddress for NicName (NicGuid) is invalid.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' Dynamic MAC address MacAddress for NicName (NicGuid) is invalid.

Message #

'%1' Dynamic MAC address %5 for %4 (%3) is invalid.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`MacAddress` UnicodeString

Event ID 12581: Dynamic MAC address MacAddress for NicName (NicGuid) is invalid

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

Dynamic MAC address for () is invalid.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`MacAddress` UnicodeString

Event ID 12581: Dynamic MAC address MacAddress for NicName (NicGuid) is invalid.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Dynamic MAC address MacAddress for NicName (NicGuid) is invalid.

Message #

Dynamic MAC address %5 for %4 (%3) is invalid.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`MacAddress` UnicodeString

Event ID 12582: 'VmName' NicName (NicGuid) started successfully

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) started successfully. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12582: 'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName (VmNicNoAvailableMac.NicGuid) started successfully.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin
Level: Informational

Description

'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName (VmNicNoAvailableMac.NicGuid) started successfully. (Virtual Machine ID VmNicNoAvailableMac.VmId).

Message #

'%1' %4 (%3) started successfully. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-SynthNic",
    "guid": "C29C4FB7-B60E-4FFF-9AF9-CF21F9B09A34",
    "event_source_name": "",
    "event_id": 12582,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:32:02.482486+00:00",
    "event_record_id": 12,
    "correlation": {
      "ActivityID": "F0567312-CB60-43FE-9013-B91DE669B588"
    },
    "execution": {
      "process_id": 9436,
      "thread_id": 10020
    },
    "channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
    }
  },
  "user_data": {
    "VmNicNoAvailableMac": {
      "VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
      "VmId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
      "NicGuid": "AD2366C4-0BE2-4636-8124-F3BDDFD27E15",
      "NicName": null
    }
  },
  "message": ""
}

Event ID 12583: 'VmName' NicName (NicGuid) started successfully

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) started successfully. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12583: 'VmName' NicName (NicGuid) started successfully.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) started successfully. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) started successfully. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12584: 'VmName' NicName (NicGuid) allocated a virtual function

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) allocated a virtual function. (Virtual Function ID VfId LUID PfLuid Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12584: 'VmName' NicName (NicGuid) allocated a virtual function.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) allocated a virtual function. (Virtual Function ID VfId LUID PfLuid Virtual Machine ID VmId).

Message #

'%1' %4 (%3) allocated a virtual function. (Virtual Function ID %5 LUID %6 Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12585: 'VmName' NicName (NicGuid) failed to allocate a virtual function: ErrorCodeString (ErrorCode): IOV networking might be incompatible with other configured networking features

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) failed to allocate a virtual function: ErrorCodeString (ErrorCode): IOV networking might be incompatible with other configured networking features. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12585: 'VmName' NicName (NicGuid) failed to allocate a virtual function: ErrorCodeString (ErrorCode): IOV networking might be incompatible with other configured networking features.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Message #

'%1' %4 (%3) failed to allocate a virtual function: %7 (%8): IOV networking might be incompatible with other configured networking features. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12586: 'VmName' NicName (NicGuid) freed a virtual function

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) freed a virtual function. (Virtual Function ID VfId Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12586: 'VmName' NicName (NicGuid) freed a virtual function.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) freed a virtual function. (Virtual Function ID VfId Virtual Machine ID VmId).

Message #

'%1' %4 (%3) freed a virtual function. (Virtual Function ID %5 Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12587: 'VmName' NicName (NicGuid) failed to free a virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId Virtual Machine ID VmId)

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) failed to free a virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12587: 'VmName' NicName (NicGuid) failed to free a virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId Virtual Machine ID VmId).

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) failed to free a virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId Virtual Machine ID VmId).

Message #

'%1' %4 (%3) failed to free a virtual function: %7 (%8) (Virtual Function ID %5 Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12588: 'VmName' NicName (NicGuid) assigned a virtual function

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) assigned a virtual function. (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12588: 'VmName' NicName (NicGuid) assigned a virtual function.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) assigned a virtual function. (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) assigned a virtual function. (Virtual Function ID %5 LUID %6) (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12589: 'VmName' NicName (NicGuid) failed to assign a virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId)

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) failed to assign a virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12589: 'VmName' NicName (NicGuid) failed to assign a virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) failed to assign a virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) failed to assign a virtual function: %7 (%8) (Virtual Function ID %5 LUID %6) (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12590: 'VmName' NicName (NicGuid) unassigned a virtual function

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) unassigned a virtual function. (Virtual Function ID VfId Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12590: 'VmName' NicName (NicGuid) unassigned a virtual function.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) unassigned a virtual function. (Virtual Function ID VfId Virtual Machine ID VmId).

Message #

'%1' %4 (%3) unassigned a virtual function. (Virtual Function ID %5 Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12597: 'VmName' NicName (NicGuid) Connected to virtual network

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) Connected to virtual network. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12597: 'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName (VmNicNoAvailableMac.NicGuid) Connected to virtual network.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin
Level: Informational

Description

'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName (VmNicNoAvailableMac.NicGuid) Connected to virtual network. (Virtual Machine ID VmNicNoAvailableMac.VmId).

Message #

'%1' %4 (%3) Connected to virtual network. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-SynthNic",
    "guid": "C29C4FB7-B60E-4FFF-9AF9-CF21F9B09A34",
    "event_source_name": "",
    "event_id": 12597,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:32:02.482454+00:00",
    "event_record_id": 11,
    "correlation": {
      "ActivityID": "F0567312-CB60-43FE-9013-B91DE669B588"
    },
    "execution": {
      "process_id": 9436,
      "thread_id": 10020
    },
    "channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
    }
  },
  "user_data": {
    "VmNicNoAvailableMac": {
      "VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
      "VmId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
      "NicGuid": "29A7892D-8743-4A3F-85E3-06FE9D7977B4--AD2366C4-0BE2-4636-8124-F3BDDFD27E15",
      "NicName": null
    }
  },
  "message": ""
}

Event ID 12598: 'VmName' NicName (NicGuid) Disconnected from virtual network

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) Disconnected from virtual network. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12598: 'VmName' NicName (NicGuid) Disconnected from virtual network.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Disconnected from virtual network. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) Disconnected from virtual network. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12603: 'VmName' NicName (NicGuid) Smart Paging now inactive

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) Smart Paging now inactive. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12603: 'VmName' NicName (NicGuid) Smart Paging now inactive.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Smart Paging now inactive. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) Smart Paging now inactive. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12604: 'VmName' NicName (NicGuid) Smart Paging now active

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) Smart Paging now active. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12604: 'VmName' NicName (NicGuid) Smart Paging now active.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Smart Paging now active. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) Smart Paging now active. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12605: 'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is not supported on this version of Windows

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is not supported on this version of Windows. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12605: 'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is not supported on this version of Windows.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is not supported on this version of Windows. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) is configured to use SR-IOV but that capability is not supported on this version of Windows. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12606: 'VmName' NicName (NicGuid) is configured to use SR-IOV but this system does not have an IOMMU or the IOMMU is currently disabled

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) is configured to use SR-IOV but this system does not have an IOMMU or the IOMMU is currently disabled. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12606: 'VmName' NicName (NicGuid) is configured to use SR-IOV but this system does not have an IOMMU or the IOMMU is currently disabled.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) is configured to use SR-IOV but this system does not have an IOMMU or the IOMMU is currently disabled. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) is configured to use SR-IOV but this system does not have an IOMMU or the IOMMU is currently disabled. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12607: 'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is disabled by policy on this machine

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is disabled by policy on this machine. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12607: 'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is disabled by policy on this machine.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is disabled by policy on this machine. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) is configured to use SR-IOV but that capability is disabled by policy on this machine. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12608: 'VmName' NicName (NicGuid) failed to allocate a virtual function because the switch to which the virtual NIC is connected to is not in SR-IOV mode

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) failed to allocate a virtual function because the switch to which the virtual NIC is connected to is not in SR-IOV mode. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12608: 'VmName' NicName (NicGuid) failed to allocate a virtual function because the switch to which the virtual NIC is connected to is not in SR-IOV mode.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) failed to allocate a virtual function because the switch to which the virtual NIC is connected to is not in SR-IOV mode. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) failed to allocate a virtual function because the switch to which the virtual NIC is connected to is not in SR-IOV mode. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12609: 'VmName' NicName (NicGuid) failed to allocate a virtual function because the physical NIC does not support SR-IOV

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) failed to allocate a virtual function because the physical NIC does not support SR-IOV. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12609: 'VmName' NicName (NicGuid) failed to allocate a virtual function because the physical NIC does not support SR-IOV.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) failed to allocate a virtual function because the physical NIC does not support SR-IOV. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) failed to allocate a virtual function because the physical NIC does not support SR-IOV. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12612: 'VmName' NicName (NicGuid) unassigning a virtual function because of an invalid DMA operation by the guest operating system

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) unassigning a virtual function because of an invalid DMA operation by the guest operating system. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12612: 'VmName' NicName (NicGuid) unassigning a virtual function because of an invalid DMA operation by the guest operating system.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) unassigning a virtual function because of an invalid DMA operation by the guest operating system. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) unassigning a virtual function because of an invalid DMA operation by the guest operating system. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12613: 'VmName' NicName (NicGuid) The number of queue pairs allocated to the virtual function (VfId) were less than requested (PfLuid)

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) The number of queue pairs allocated to the virtual function (VfId) were less than requested (PfLuid). (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12613: 'VmName' NicName (NicGuid) The number of queue pairs allocated to the virtual function (VfId) were less than requested (PfLuid).

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) The number of queue pairs allocated to the virtual function (VfId) were less than requested (PfLuid). (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) The number of queue pairs allocated to the virtual function (%5) were less than requested (%6). (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12614: 'VmName' NicName (NicGuid) The number of queue pairs to be allocated (VfId) were limited because of the number of virtual processors (PfLuid) for the VM

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) The number of queue pairs to be allocated (VfId) were limited because of the number of virtual processors (PfLuid) for the VM. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12614: 'VmName' NicName (NicGuid) The number of queue pairs to be allocated (VfId) were limited because of the number of virtual processors (PfLuid) for the VM.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) The number of queue pairs to be allocated (VfId) were limited because of the number of virtual processors (PfLuid) for the VM. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) The number of queue pairs to be allocated (%5) were limited because of the number of virtual processors (%6) for the VM. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12615: The device naming setting only applies to synthetic network adapters on Generation 2 virtual machines with configuration version 6

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

The device naming setting only applies to synthetic network adapters on Generation 2 virtual machines with configuration version 6.2 or above. (Virtual machine ID ).

Fields #

Name	Description
`VmId` UnicodeString

Event ID 12615: The device naming setting only applies to synthetic network adapters on Generation 2 virtual machines with configuration version 6.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

The device naming setting only applies to synthetic network adapters on Generation 2 virtual machines with configuration version 6.2 or above. (Virtual machine ID VmId).

Message #

The device naming setting only applies to synthetic network adapters on Generation 2 virtual machines with configuration version 6.2 or above. (Virtual machine ID %1)

Fields #

Name	Description
`VmId` UnicodeString

Event ID 12670: 'VmName' failed to allocate resources while connecting to a virtual network: ErrorCodeString (ErrorCode) (Virtual Machine ID VmId)

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' failed to allocate resources while connecting to a virtual network: ErrorCodeString (ErrorCode) (Virtual Machine ID VmId). The Ethernet switch may not exist.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12670: 'VmName' failed to allocate resources while connecting to a virtual network: ErrorCodeString (ErrorCode) (Virtual Machine ID VmId).

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' failed to allocate resources while connecting to a virtual network: ErrorCodeString (ErrorCode) (Virtual Machine ID VmId). The Ethernet switch may not exist.

Message #

'%1' failed to allocate resources while connecting to a virtual network: %4 (%5) (Virtual Machine ID %2). The Ethernet switch may not exist.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12671: Failed to allocate resources while connecting to a virtual network

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

Failed to allocate resources while connecting to a virtual network. The Ethernet switch may not exist.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12671: Failed to allocate resources while connecting to a virtual network.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Failed to allocate resources while connecting to a virtual network. The Ethernet switch may not exist.

Message #

Failed to allocate resources while connecting to a virtual network. The Ethernet switch may not exist.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12680: 'VmName' The VirtualSystemIdentifier VmId for "NicName" (NicGuid) conflicts with another adapter

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' The VirtualSystemIdentifier VmId for "NicName" (NicGuid) conflicts with another adapter.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12680: 'VmName' The VirtualSystemIdentifier VmId for "NicName" (NicGuid) conflicts with another adapter.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' The VirtualSystemIdentifier VmId for "NicName" (NicGuid) conflicts with another adapter.

Message #

'%1' The VirtualSystemIdentifier %2 for "%4" (%3) conflicts with another adapter.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12692: Bytes sent or received by 'VmName' is larger than what can fit inside of a 64-bit integer

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12692: Bytes sent or received by 'VmName' is larger than what can fit inside of a 64-bit integer.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Message #

Bytes sent or received by '%1' is larger than what can fit inside of a 64-bit integer. Record and then reset the metric value in order to continue measuring the number of bytes send or received. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12693: Bytes send or received is larger than what can fit inside of an unsigned 64-bit integer

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

Bytes send or received is larger than what can fit inside of an unsigned 64-bit integer.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12693: Bytes send or received is larger than what can fit inside of an unsigned 64-bit integer.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Bytes send or received is larger than what can fit inside of an unsigned 64-bit integer.

Message #

Bytes send or received is larger than what can fit inside of an unsigned 64-bit integer.

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`String` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString
`Param1` UnicodeString
`Param2` UnicodeString

Event ID 12694: 'VmName' NicName (NicGuid) Pause failed

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) Pause failed. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12694: 'VmName' NicName (NicGuid) Pause failed.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Pause failed. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) Pause failed. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12695: 'VmName' NicName (NicGuid) ShutDown failed

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) ShutDown failed. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12695: 'VmName' NicName (NicGuid) ShutDown failed.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) ShutDown failed. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) ShutDown failed. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12696: 'VmName' NicName (NicGuid) VMPhu Zero start sequence failed

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) VMPhu Zero start sequence failed. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12696: 'VmName' NicName (NicGuid) VMPhu Zero start sequence failed.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) VMPhu Zero start sequence failed. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) VMPhu Zero start sequence failed. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12697: 'VmName' NicName (NicGuid) VMPhu Zero start sequence succeeded

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) VMPhu Zero start sequence succeeded. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12697: 'VmName' NicName (NicGuid) VMPhu Zero start sequence succeeded.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) VMPhu Zero start sequence succeeded. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) VMPhu Zero start sequence succeeded. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12698: 'VmName' NicName (NicGuid) Save failed

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) Save failed. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12698: 'VmName' NicName (NicGuid) Save failed.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Save failed. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) Save failed. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12699: 'VmName' NicName (NicGuid) PowerOn failed

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) PowerOn failed. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12699: 'VmName' NicName (NicGuid) PowerOn failed.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) PowerOn failed. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) PowerOn failed. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12700: 'VmName' NicName (NicGuid) Restore failed

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) Restore failed. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12700: 'VmName' NicName (NicGuid) Restore failed.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Restore failed. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) Restore failed. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12701: 'VmName' NicName (NicGuid) Resume failed

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) Resume failed. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12701: 'VmName' NicName (NicGuid) Resume failed.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Resume failed. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) Resume failed. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12702: 'VmName' NicName (NicGuid) VMPhu Zero complete sequence failed

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) VMPhu Zero complete sequence failed. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12702: 'VmName' NicName (NicGuid) VMPhu Zero complete sequence failed.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) VMPhu Zero complete sequence failed. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) VMPhu Zero complete sequence failed. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12703: 'VmName' NicName (NicGuid) VMPhu Zero complete sequence succeeded

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) VMPhu Zero complete sequence succeeded. (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12703: 'VmName' NicName (NicGuid) VMPhu Zero complete sequence succeeded.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) VMPhu Zero complete sequence succeeded. (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) VMPhu Zero complete sequence succeeded. (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString

Event ID 12704: 'VmName' NicName (NicGuid) successfully saved the keep alive virtual function

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) successfully saved the keep alive virtual function. (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12704: 'VmName' NicName (NicGuid) successfully saved the keep alive virtual function.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) successfully saved the keep alive virtual function. (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) successfully saved the keep alive virtual function. (Virtual Function ID %5 LUID %6) (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12705: 'VmName' NicName (NicGuid) successfully assigned the keep alive virtual function

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) successfully assigned the keep alive virtual function. (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12705: 'VmName' NicName (NicGuid) successfully assigned the keep alive virtual function.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) successfully assigned the keep alive virtual function. (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) successfully assigned the keep alive virtual function. (Virtual Function ID %5 LUID %6) (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString

Event ID 12706: 'VmName' NicName (NicGuid) failed to assign the keep alive virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId)

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

'VmName' NicName (NicGuid) failed to assign the keep alive virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 12706: 'VmName' NicName (NicGuid) failed to assign the keep alive virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) failed to assign the keep alive virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Message #

'%1' %4 (%3) failed to assign the keep alive virtual function: %7 (%8) (Virtual Function ID %5 LUID %6) (Virtual Machine ID %2)

Fields #

Name	Description
`VmName` UnicodeString
`VmId` UnicodeString
`NicGuid` UnicodeString
`NicName` UnicodeString
`VfId` UnicodeString
`PfLuid` UnicodeString
`ErrorCodeString` UnicodeString
`ErrorCode` UnicodeString

Event ID 25400: Started Allocating VF on Nic (Name: Parameter0)

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational
Task: VirtualFunction_Allocate
Opcode: Start

Description

Started Allocating VF on Nic (Name: ). (Virtual machine ID ).

Fields #

Name	Description
`VmId` UnicodeString
`Parameter0` UnicodeString

Event ID 25400: Started Allocating VF on Nic (Name: Parameter0).

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic
Task: VirtualFunction_Allocate
Opcode: Start

Description

Started Allocating VF on Nic (Name: Parameter0). (Virtual machine ID VmId).

Message #

Started Allocating VF on Nic (Name: %2). (Virtual machine ID %1)

Fields #

Name	Description
`VmId` UnicodeString
`Parameter0` UnicodeString

Event ID 25401: Finished Allocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational
Task: VirtualFunction_Allocate
Opcode: Stop

Description

Finished Allocating VF (VFID: ) on Nic (Name: ), time s. (Virtual machine ID ).

Fields #

Name	Description
`VmId` UnicodeString
`Time` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25401: Finished Allocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic
Task: VirtualFunction_Allocate
Opcode: Stop

Description

Finished Allocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s. (Virtual machine ID VmId).

Message #

Finished Allocating VF (VFID: %4) on Nic (Name: %3), time %2 s. (Virtual machine ID %1)

Fields #

Name	Description
`VmId` UnicodeString
`Time` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25402: Started Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0)

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational
Task: VirtualFunction_Free
Opcode: Start

Description

Started Deallocating VF (VFID: ) on Nic (Name: ). (Virtual machine ID ).

Fields #

Name	Description
`VmId` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25402: Started Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0).

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic
Task: VirtualFunction_Free
Opcode: Start

Description

Started Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0). (Virtual machine ID VmId).

Message #

Started Deallocating VF (VFID: %3) on Nic (Name: %2). (Virtual machine ID %1)

Fields #

Name	Description
`VmId` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25403: Finished Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational
Task: VirtualFunction_Free
Opcode: Stop

Description

Finished Deallocating VF (VFID: ) on Nic (Name: ), time s. (Virtual machine ID ).

Fields #

Name	Description
`VmId` UnicodeString
`Time` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25403: Finished Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic
Task: VirtualFunction_Free
Opcode: Stop

Description

Finished Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s. (Virtual machine ID VmId).

Message #

Finished Deallocating VF (VFID: %4) on Nic (Name: %3), time %2 s. (Virtual machine ID %1)

Fields #

Name	Description
`VmId` UnicodeString
`Time` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25410: Started Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0)

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational
Task: VirtualFunction_Assign
Opcode: Start

Description

Started Assigning VF (VFID: ) on Nic (Name: ). (Virtual machine ID ).

Fields #

Name	Description
`VmId` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25410: Started Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0).

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic
Task: VirtualFunction_Assign
Opcode: Start

Description

Started Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0). (Virtual machine ID VmId).

Message #

Started Assigning VF (VFID: %3) on Nic (Name: %2). (Virtual machine ID %1)

Fields #

Name	Description
`VmId` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25411: Finished Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational
Task: VirtualFunction_Assign
Opcode: Stop

Description

Finished Assigning VF (VFID: ) on Nic (Name: ), time s. (Virtual machine ID ).

Fields #

Name	Description
`VmId` UnicodeString
`Time` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25411: Finished Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic
Task: VirtualFunction_Assign
Opcode: Stop

Description

Finished Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s. (Virtual machine ID VmId).

Message #

Finished Assigning VF (VFID: %4) on Nic (Name: %3), time %2 s. (Virtual machine ID %1)

Fields #

Name	Description
`VmId` UnicodeString
`Time` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25412: Started Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0)

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational
Task: VirtualFunction_Unassign
Opcode: Start

Description

Started Unassigning VF (VFID: ) on Nic (Name: ). (Virtual machine ID ).

Fields #

Name	Description
`VmId` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25412: Started Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0).

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic
Task: VirtualFunction_Unassign
Opcode: Start

Description

Started Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0). (Virtual machine ID VmId).

Message #

Started Unassigning VF (VFID: %3) on Nic (Name: %2). (Virtual machine ID %1)

Fields #

Name	Description
`VmId` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25413: Finished Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational
Task: VirtualFunction_Unassign
Opcode: Stop

Description

Finished Unassigning VF (VFID: ) on Nic (Name: ), time s. (Virtual machine ID ).

Fields #

Name	Description
`VmId` UnicodeString
`Time` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 25413: Finished Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Analytic
Task: VirtualFunction_Unassign
Opcode: Stop

Description

Finished Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s. (Virtual machine ID VmId).

Message #

Finished Unassigning VF (VFID: %4) on Nic (Name: %3), time %2 s. (Virtual machine ID %1)

Fields #

Name	Description
`VmId` UnicodeString
`Time` UnicodeString
`Parameter0` UnicodeString
`Parameter1` UInt32

Event ID 33010: Could not find an Ethernet connection resource pool with ID 'Parameter0'

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Operational

Description

Could not find an Ethernet connection resource pool with ID 'Parameter0'.

Fields #

Name	Description
`Parameter0` UnicodeString

Event ID 33010: Could not find an Ethernet connection resource pool with ID 'Parameter0'.

Provider: Microsoft-Windows-Hyper-V-SynthNic
Channel: Microsoft-Windows-Hyper-V-Worker-Admin

Description

Could not find an Ethernet connection resource pool with ID 'Parameter0'.

Message #

Could not find an Ethernet connection resource pool with ID '%1'.

Fields #

Name	Description
`Parameter0` UnicodeString

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID c29c4fb7-b60e-4fff-9af9-cf21f9b09a34

Defined in VmSynthNic.dll, which carries the event manifest.

Observed on:

Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02

Downloads

Microsoft-Windows-Hyper-V-SynthNic registered manifest XML (in the Win11-26200.6584 manifest pack, 2.0 MB) manifest-xml

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`risk_score`	Numeric comparison on the Elastic risk score (0 to 100): `risk_score>50`, `risk_score<=20`, `risk_score=99` (alias `risk`; Elastic rules only)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)