detection.wiki

Microsoft-Windows-Hyper-V-SynthNic

EventTitleChannelSampleRule
1[VMID VmId]OperationalNN
1[VMID VmId] TraceData.Microsoft-Windows-Hyper-V-Worker-AnalyticNN
2[VMID VmId]OperationalNN
2[VMID VmId] TraceData.Microsoft-Windows-Hyper-V-Worker-AnalyticNN
3[VMID VmId]OperationalNN
3[VMID VmId] TraceData.Microsoft-Windows-Hyper-V-Worker-AnalyticNN
4[VMID VmId]OperationalNN
4[VMID VmId] TraceData.Microsoft-Windows-Hyper-V-Worker-AnalyticNN
12560'VmName' Static MAC address MacAddress for "NicName" (NicGuid) is invalidOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12562'VmName' Static MAC address MacAddress for "NicName" (NicGuid) conflicts with …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12564'VmName' No available MAC address for "NicName"Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12572'VmName' Dynamic MAC address for "NicName" (NicGuid) was not assignedOperationalNN
12572'.Microsoft-Windows-Hyper-V-Worker-AdminNN
12580'VmName' Dynamic MAC address MacAddress for NicName (NicGuid) is invalidOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12581Dynamic MAC address MacAddress for NicName (NicGuid) is invalidOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12582'VmName' NicName (NicGuid) started successfullyOperationalNN
12582'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName …Microsoft-Windows-Hyper-V-Worker-AdminYN
12583'VmName' NicName (NicGuid) started successfullyOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12584'VmName' NicName (NicGuid) allocated a virtual functionOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12585'VmName' NicName (NicGuid) failed to allocate a virtual function: …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12586'VmName' NicName (NicGuid) freed a virtual functionOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12587'VmName' NicName (NicGuid) failed to free a virtual function: ErrorCodeString …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12588'VmName' NicName (NicGuid) assigned a virtual functionOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12589'VmName' NicName (NicGuid) failed to assign a virtual function: ErrorCodeString …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12590'VmName' NicName (NicGuid) unassigned a virtual functionOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12597'VmName' NicName (NicGuid) Connected to virtual networkOperationalNN
12597'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName …Microsoft-Windows-Hyper-V-Worker-AdminYN
12598'VmName' NicName (NicGuid) Disconnected from virtual networkOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12603'VmName' NicName (NicGuid) Smart Paging now inactiveOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12604'VmName' NicName (NicGuid) Smart Paging now activeOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12605'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12606'VmName' NicName (NicGuid) is configured to use SR-IOV but this system does not …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12607'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12608'VmName' NicName (NicGuid) failed to allocate a virtual function because the …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12609'VmName' NicName (NicGuid) failed to allocate a virtual function because the …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12612'VmName' NicName (NicGuid) unassigning a virtual function because of an invalid …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12613'VmName' NicName (NicGuid) The number of queue pairs allocated to the virtual …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12614'VmName' NicName (NicGuid) The number of queue pairs to be allocated (VfId) were …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12615The device naming setting only applies to synthetic network adapters on …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12670'VmName' failed to allocate resources while connecting to a virtual network: …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12671Failed to allocate resources while connecting to a virtual networkOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12680'VmName' The VirtualSystemIdentifier VmId for "NicName" (NicGuid) conflicts with …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12692Bytes sent or received by 'VmName' is larger than what can fit inside of a …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12693Bytes send or received is larger than what can fit inside of an unsigned 64-bit …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12694'VmName' NicName (NicGuid) Pause failedOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12695'VmName' NicName (NicGuid) ShutDown failedOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12696'VmName' NicName (NicGuid) VMPhu Zero start sequence failedOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12697'VmName' NicName (NicGuid) VMPhu Zero start sequence succeededOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12698'VmName' NicName (NicGuid) Save failedOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12699'VmName' NicName (NicGuid) PowerOn failedOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12700'VmName' NicName (NicGuid) Restore failedOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12701'VmName' NicName (NicGuid) Resume failedOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12702'VmName' NicName (NicGuid) VMPhu Zero complete sequence failedOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12703'VmName' NicName (NicGuid) VMPhu Zero complete sequence succeededOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12704'VmName' NicName (NicGuid) successfully saved the keep alive virtual functionOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12705'VmName' NicName (NicGuid) successfully assigned the keep alive virtual functionOperational, Microsoft-Windows-Hyper-V-Worker-AdminNN
12706'VmName' NicName (NicGuid) failed to assign the keep alive virtual function: …Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN
25400Started Allocating VF on Nic (Name: Parameter0)Operational, Microsoft-Windows-Hyper-V-Worker-AnalyticNN
25401Finished Allocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time sOperational, Microsoft-Windows-Hyper-V-Worker-AnalyticNN
25402Started Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0)Operational, Microsoft-Windows-Hyper-V-Worker-AnalyticNN
25403Finished Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time …Operational, Microsoft-Windows-Hyper-V-Worker-AnalyticNN
25410Started Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0)Operational, Microsoft-Windows-Hyper-V-Worker-AnalyticNN
25411Finished Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time sOperational, Microsoft-Windows-Hyper-V-Worker-AnalyticNN
25412Started Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0)Operational, Microsoft-Windows-Hyper-V-Worker-AnalyticNN
25413Finished Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time …Operational, Microsoft-Windows-Hyper-V-Worker-AnalyticNN
33010Could not find an Ethernet connection resource pool with ID 'Parameter0'Operational, Microsoft-Windows-Hyper-V-Worker-AdminNN

Event ID 1: [VMID VmId]

#
Channel
Operational

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 1: [VMID VmId] TraceData.

#
Channel
Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 2: [VMID VmId]

#
Channel
Operational

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 2: [VMID VmId] TraceData.

#
Channel
Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 3: [VMID VmId]

#
Channel
Operational

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 3: [VMID VmId] TraceData.

#
Channel
Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 4: [VMID VmId]

#
Channel
Operational

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 4: [VMID VmId] TraceData.

#
Channel
Microsoft-Windows-Hyper-V-Worker-Analytic

Message #

[VMID %3] %1

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 12560: 'VmName' Static MAC address MacAddress for "NicName" (NicGuid) is invalid

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
MacAddress UnicodeString

Event ID 12562: 'VmName' Static MAC address MacAddress for "NicName" (NicGuid) conflicts with another adapter

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
MacAddress UnicodeString

Event ID 12564: 'VmName' No available MAC address for "NicName"

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12572: 'VmName' Dynamic MAC address for "NicName" (NicGuid) was not assigned

#
Channel
Operational

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
MacAddress UnicodeString

Event ID 12572: '.

#
Channel
Microsoft-Windows-Hyper-V-Worker-Admin

Message #

'%1' Dynamic MAC address for "%4" (%3) was not assigned.  The virtual machine will not have network connectivity until this problem is resolved. To assign a new MAC address, restart the virtual machine.

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
MacAddress UnicodeString

Event ID 12580: 'VmName' Dynamic MAC address MacAddress for NicName (NicGuid) is invalid

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
MacAddress UnicodeString

Event ID 12581: Dynamic MAC address MacAddress for NicName (NicGuid) is invalid

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

Dynamic MAC address for () is invalid.

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
MacAddress UnicodeString

Event ID 12582: 'VmName' NicName (NicGuid) started successfully

#
Channel
Operational

Description

'VmName' NicName (NicGuid) started successfully. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12582: 'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName (VmNicNoAvailableMac.NicGuid) started successfully.

#
Channel
Microsoft-Windows-Hyper-V-Worker-Admin
Level
Informational

Description

'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName (VmNicNoAvailableMac.NicGuid) started successfully. (Virtual Machine ID VmNicNoAvailableMac.VmId).

Message #

'%1' %4 (%3) started successfully. (Virtual Machine ID %2)

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-SynthNic",
    "guid": "C29C4FB7-B60E-4FFF-9AF9-CF21F9B09A34",
    "event_source_name": "",
    "event_id": 12582,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:32:02.482486+00:00",
    "event_record_id": 12,
    "correlation": {
      "ActivityID": "F0567312-CB60-43FE-9013-B91DE669B588"
    },
    "execution": {
      "process_id": 9436,
      "thread_id": 10020
    },
    "channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
    }
  },
  "user_data": {
    "VmNicNoAvailableMac": {
      "VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
      "VmId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
      "NicGuid": "AD2366C4-0BE2-4636-8124-F3BDDFD27E15",
      "NicName": null
    }
  },
  "message": ""
}

Event ID 12583: 'VmName' NicName (NicGuid) started successfully

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) started successfully. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12584: 'VmName' NicName (NicGuid) allocated a virtual function

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) allocated a virtual function. (Virtual Function ID VfId LUID PfLuid Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString

Event ID 12585: 'VmName' NicName (NicGuid) failed to allocate a virtual function: ErrorCodeString (ErrorCode): IOV networking might be incompatible with other configured networking features

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) failed to allocate a virtual function: ErrorCodeString (ErrorCode): IOV networking might be incompatible with other configured networking features. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString
ErrorCodeString UnicodeString
ErrorCode UnicodeString

Event ID 12586: 'VmName' NicName (NicGuid) freed a virtual function

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) freed a virtual function. (Virtual Function ID VfId Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString

Event ID 12587: 'VmName' NicName (NicGuid) failed to free a virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId Virtual Machine ID VmId)

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString
ErrorCodeString UnicodeString
ErrorCode UnicodeString

Event ID 12588: 'VmName' NicName (NicGuid) assigned a virtual function

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) assigned a virtual function. (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString

Event ID 12589: 'VmName' NicName (NicGuid) failed to assign a virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId)

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString
ErrorCodeString UnicodeString
ErrorCode UnicodeString

Event ID 12590: 'VmName' NicName (NicGuid) unassigned a virtual function

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) unassigned a virtual function. (Virtual Function ID VfId Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString

Event ID 12597: 'VmName' NicName (NicGuid) Connected to virtual network

#
Channel
Operational

Description

'VmName' NicName (NicGuid) Connected to virtual network. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12597: 'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName (VmNicNoAvailableMac.NicGuid) Connected to virtual network.

#
Channel
Microsoft-Windows-Hyper-V-Worker-Admin
Level
Informational

Description

'VmNicNoAvailableMac.VmName' VmNicNoAvailableMac.NicName (VmNicNoAvailableMac.NicGuid) Connected to virtual network. (Virtual Machine ID VmNicNoAvailableMac.VmId).

Message #

'%1' %4 (%3) Connected to virtual network. (Virtual Machine ID %2)

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-SynthNic",
    "guid": "C29C4FB7-B60E-4FFF-9AF9-CF21F9B09A34",
    "event_source_name": "",
    "event_id": 12597,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:32:02.482454+00:00",
    "event_record_id": 11,
    "correlation": {
      "ActivityID": "F0567312-CB60-43FE-9013-B91DE669B588"
    },
    "execution": {
      "process_id": 9436,
      "thread_id": 10020
    },
    "channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
    }
  },
  "user_data": {
    "VmNicNoAvailableMac": {
      "VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
      "VmId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
      "NicGuid": "29A7892D-8743-4A3F-85E3-06FE9D7977B4--AD2366C4-0BE2-4636-8124-F3BDDFD27E15",
      "NicName": null
    }
  },
  "message": ""
}

Event ID 12598: 'VmName' NicName (NicGuid) Disconnected from virtual network

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Disconnected from virtual network. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12603: 'VmName' NicName (NicGuid) Smart Paging now inactive

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Smart Paging now inactive. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12604: 'VmName' NicName (NicGuid) Smart Paging now active

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Smart Paging now active. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12605: 'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is not supported on this version of Windows

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is not supported on this version of Windows. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12606: 'VmName' NicName (NicGuid) is configured to use SR-IOV but this system does not have an IOMMU or the IOMMU is currently disabled

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) is configured to use SR-IOV but this system does not have an IOMMU or the IOMMU is currently disabled. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12607: 'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is disabled by policy on this machine

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) is configured to use SR-IOV but that capability is disabled by policy on this machine. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12608: 'VmName' NicName (NicGuid) failed to allocate a virtual function because the switch to which the virtual NIC is connected to is not in SR-IOV mode

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) failed to allocate a virtual function because the switch to which the virtual NIC is connected to is not in SR-IOV mode. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12609: 'VmName' NicName (NicGuid) failed to allocate a virtual function because the physical NIC does not support SR-IOV

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) failed to allocate a virtual function because the physical NIC does not support SR-IOV. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12612: 'VmName' NicName (NicGuid) unassigning a virtual function because of an invalid DMA operation by the guest operating system

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) unassigning a virtual function because of an invalid DMA operation by the guest operating system. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12613: 'VmName' NicName (NicGuid) The number of queue pairs allocated to the virtual function (VfId) were less than requested (PfLuid)

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) The number of queue pairs allocated to the virtual function (VfId) were less than requested (PfLuid). (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString

Event ID 12614: 'VmName' NicName (NicGuid) The number of queue pairs to be allocated (VfId) were limited because of the number of virtual processors (PfLuid) for the VM

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) The number of queue pairs to be allocated (VfId) were limited because of the number of virtual processors (PfLuid) for the VM. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString

Event ID 12615: The device naming setting only applies to synthetic network adapters on Generation 2 virtual machines with configuration version 6

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

The device naming setting only applies to synthetic network adapters on Generation 2 virtual machines with configuration version 6.2 or above. (Virtual machine ID ).

Fields #

NameDescription
VmId UnicodeString

Event ID 12670: 'VmName' failed to allocate resources while connecting to a virtual network: ErrorCodeString (ErrorCode) (Virtual Machine ID VmId)

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' failed to allocate resources while connecting to a virtual network: ErrorCodeString (ErrorCode) (Virtual Machine ID VmId). The Ethernet switch may not exist.

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
String UnicodeString
ErrorCodeString UnicodeString
ErrorCode UnicodeString
Param1 UnicodeString
Param2 UnicodeString

Event ID 12671: Failed to allocate resources while connecting to a virtual network

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

Failed to allocate resources while connecting to a virtual network. The Ethernet switch may not exist.

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
String UnicodeString
ErrorCodeString UnicodeString
ErrorCode UnicodeString
Param1 UnicodeString
Param2 UnicodeString

Event ID 12680: 'VmName' The VirtualSystemIdentifier VmId for "NicName" (NicGuid) conflicts with another adapter

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12692: Bytes sent or received by 'VmName' is larger than what can fit inside of a 64-bit integer

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
String UnicodeString
ErrorCodeString UnicodeString
ErrorCode UnicodeString
Param1 UnicodeString
Param2 UnicodeString

Event ID 12693: Bytes send or received is larger than what can fit inside of an unsigned 64-bit integer

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
String UnicodeString
ErrorCodeString UnicodeString
ErrorCode UnicodeString
Param1 UnicodeString
Param2 UnicodeString

Event ID 12694: 'VmName' NicName (NicGuid) Pause failed

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Pause failed. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12695: 'VmName' NicName (NicGuid) ShutDown failed

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) ShutDown failed. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12696: 'VmName' NicName (NicGuid) VMPhu Zero start sequence failed

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) VMPhu Zero start sequence failed. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12697: 'VmName' NicName (NicGuid) VMPhu Zero start sequence succeeded

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) VMPhu Zero start sequence succeeded. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12698: 'VmName' NicName (NicGuid) Save failed

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Save failed. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12699: 'VmName' NicName (NicGuid) PowerOn failed

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) PowerOn failed. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12700: 'VmName' NicName (NicGuid) Restore failed

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Restore failed. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12701: 'VmName' NicName (NicGuid) Resume failed

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) Resume failed. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12702: 'VmName' NicName (NicGuid) VMPhu Zero complete sequence failed

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) VMPhu Zero complete sequence failed. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12703: 'VmName' NicName (NicGuid) VMPhu Zero complete sequence succeeded

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) VMPhu Zero complete sequence succeeded. (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString

Event ID 12704: 'VmName' NicName (NicGuid) successfully saved the keep alive virtual function

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) successfully saved the keep alive virtual function. (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString

Event ID 12705: 'VmName' NicName (NicGuid) successfully assigned the keep alive virtual function

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Description

'VmName' NicName (NicGuid) successfully assigned the keep alive virtual function. (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId).

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString

Event ID 12706: 'VmName' NicName (NicGuid) failed to assign the keep alive virtual function: ErrorCodeString (ErrorCode) (Virtual Function ID VfId LUID PfLuid) (Virtual Machine ID VmId)

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
VmName UnicodeString
VmId UnicodeString
NicGuid UnicodeString
NicName UnicodeString
VfId UnicodeString
PfLuid UnicodeString
ErrorCodeString UnicodeString
ErrorCode UnicodeString

Event ID 25400: Started Allocating VF on Nic (Name: Parameter0)

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Analytic
Task
VirtualFunction_Allocate
Opcode
Start

Description

Started Allocating VF on Nic (Name: ). (Virtual machine ID ).

Fields #

NameDescription
VmId UnicodeString
Parameter0 UnicodeString

Event ID 25401: Finished Allocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Analytic
Task
VirtualFunction_Allocate
Opcode
Stop

Description

Finished Allocating VF (VFID: ) on Nic (Name: ), time s. (Virtual machine ID ).

Fields #

NameDescription
VmId UnicodeString
Time UnicodeString
Parameter0 UnicodeString
Parameter1 UInt32

Event ID 25402: Started Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0)

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Analytic
Task
VirtualFunction_Free
Opcode
Start

Description

Started Deallocating VF (VFID: ) on Nic (Name: ). (Virtual machine ID ).

Fields #

NameDescription
VmId UnicodeString
Parameter0 UnicodeString
Parameter1 UInt32

Event ID 25403: Finished Deallocating VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Analytic
Task
VirtualFunction_Free
Opcode
Stop

Description

Finished Deallocating VF (VFID: ) on Nic (Name: ), time s. (Virtual machine ID ).

Fields #

NameDescription
VmId UnicodeString
Time UnicodeString
Parameter0 UnicodeString
Parameter1 UInt32

Event ID 25410: Started Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0)

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Analytic
Task
VirtualFunction_Assign
Opcode
Start

Description

Started Assigning VF (VFID: ) on Nic (Name: ). (Virtual machine ID ).

Fields #

NameDescription
VmId UnicodeString
Parameter0 UnicodeString
Parameter1 UInt32

Event ID 25411: Finished Assigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Analytic
Task
VirtualFunction_Assign
Opcode
Stop

Description

Finished Assigning VF (VFID: ) on Nic (Name: ), time s. (Virtual machine ID ).

Fields #

NameDescription
VmId UnicodeString
Time UnicodeString
Parameter0 UnicodeString
Parameter1 UInt32

Event ID 25412: Started Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0)

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Analytic
Task
VirtualFunction_Unassign
Opcode
Start

Description

Started Unassigning VF (VFID: ) on Nic (Name: ). (Virtual machine ID ).

Fields #

NameDescription
VmId UnicodeString
Parameter0 UnicodeString
Parameter1 UInt32

Event ID 25413: Finished Unassigning VF (VFID: Parameter1) on Nic (Name: Parameter0), time Time s

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Analytic
Task
VirtualFunction_Unassign
Opcode
Stop

Description

Finished Unassigning VF (VFID: ) on Nic (Name: ), time s. (Virtual machine ID ).

Fields #

NameDescription
VmId UnicodeString
Time UnicodeString
Parameter0 UnicodeString
Parameter1 UInt32

Event ID 33010: Could not find an Ethernet connection resource pool with ID 'Parameter0'

#
Channel
Operational, Microsoft-Windows-Hyper-V-Worker-Admin

Fields #

NameDescription
Parameter0 UnicodeString

Provenance

ETW provider GUID c29c4fb7-b60e-4fff-9af9-cf21f9b09a34

Defined in VmSynthNic.dll, which carries the event manifest.

  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB