Microsoft-Windows-Hyper-V-Worker
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1500 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1500 | [Virtual machine VmId] | Operational | N | N |
| 1510 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1510 | [Virtual machine VmId] | Operational | N | N |
| 1520 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1520 | [Virtual machine VmId] | Operational | N | N |
| 1530 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1530 | [Virtual machine VmId] | Operational | N | N |
| 1540 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1540 | [Virtual machine VmId] | Operational | N | N |
| 1550 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1550 | [Virtual machine VmId] | Operational | N | N |
| 1560 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1560 | [Virtual machine VmId] | Operational | N | N |
| 1570 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1570 | [Virtual machine VmId] | Operational | N | N |
| 1580 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1580 | [Virtual machine VmId] | Operational | N | N |
| 1590 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1590 | [Virtual machine VmId] | Operational | N | N |
| 1600 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1600 | [Virtual machine VmId] | Operational | N | N |
| 1610 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1610 | [Virtual machine VmId] | Operational | N | N |
| 1620 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1620 | [Virtual machine VmId] | Operational | N | N |
| 1630 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1630 | [Virtual machine VmId] | Operational | N | N |
| 1640 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1640 | [Virtual machine VmId] | Operational | N | N |
| 1650 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1650 | [Virtual machine VmId] | Operational | N | N |
| 1660 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1660 | [Virtual machine VmId] | Operational | N | N |
| 1670 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1670 | [Virtual machine VmId] | Operational | N | N |
| 1680 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1680 | [Virtual machine VmId] | Operational | N | N |
| 1690 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1690 | [Virtual machine VmId] | Operational | N | N |
| 1700 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1700 | [Virtual machine VmId] | Operational | N | N |
| 1710 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1710 | [Virtual machine VmId] | Operational | N | N |
| 1720 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1720 | [Virtual machine VmId] | Operational | N | N |
| 1730 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1730 | [Virtual machine VmId] | Operational | N | N |
| 1740 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1740 | [Virtual machine VmId] | Operational | N | N |
| 1750 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1750 | [Virtual machine VmId] | Operational | N | N |
| 1760 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1760 | [Virtual machine VmId] | Operational | N | N |
| 1770 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1770 | [Virtual machine VmId] | Operational | N | N |
| 1780 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1780 | [Virtual machine VmId] | Operational | N | N |
| 1790 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1790 | [Virtual machine VmId] | Operational | N | N |
| 1800 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1800 | [Virtual machine VmId] | Operational | N | N |
| 1810 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-Analytic | N | N |
| 1810 | [Virtual machine VmId] | Operational | N | N |
| 1820 | [Virtual machine VmId] TraceData. | Operational | N | N |
| 1830 | [Virtual machine VmId] TraceData. | Operational | N | N |
| 1840 | [Virtual machine VmId] TraceData. | Operational | N | N |
| 1850 | [Virtual machine VmId] TraceData. | Operational | N | N |
| 2080 | [Virtual machine VmId] TraceData. | Microsoft-Windows-Hyper-V-Worker-VDev-Analytic | N | N |
| 2080 | [Virtual machine VmId] | Operational | N | N |
| 3020 | 'VmName' failed a save operation: ErrorCode (HResult) | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3021 | 'VmName' failed a save operation: ErrorCode (HResult) | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3022 | A save operation was cancelled for the virtual machine 'VmName' | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3023 | A save operation was cancelled for the virtual machine 'VmName' | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3030 | 'VmName' is unable to allocate RamSizeInMb MB of RAM: ErrorCode (HResult) | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3031 | Unable to allocate RamSizeInMb MB of RAM: ErrorCode (HResult) | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3040 | 'VmName' could not initialize | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3041 | 'VmName' could not initialize | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3042 | 'VmName' could not reinitialize | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3043 | 'VmName' could not reinitialize | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3048 | 'VmName' Smart Paging was enabled | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3049 | 'VmName' Smart Paging was disabled | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3050 | 'VmName' could not initialize memory: ErrorCode (HResult) | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3051 | Could not initialize memory: ErrorCode (HResult) | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3052 | 'VmName' could not setup Smart Paging: ErrorCode (HResult) | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3053 | Failed to setup Smart Paging: ErrorCode (HResult) | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3054 | '. | Microsoft-Windows-Hyper-V-Worker-Admin | N | N |
| 3054 | 'VmName' successfully allocated memory, but a subset of the physical pages was … | Operational | N | N |
| 3055 | Successfully allocated memory, but a subset of the physical pages was allocated … | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3056 | '. | Microsoft-Windows-Hyper-V-Worker-Admin | N | N |
| 3056 | 'VmName' is configured to have a different non-uniform memory architecture … | Operational | N | N |
| 3058 | Virtual machine 'VmName' failed to recommit poisoned page: ErrorCode (HResult) | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3059 | Failed to recommit poisoned page: ErrorCode (HResult) | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3062 | Virtual Machine Worker Process initialization has timed out, and will terminate | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3063 | Virtual Machine Worker Process initialization has timed out, and will terminate | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3064 | The requested operation has failed | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3065 | The requested operation has failed | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3070 | 'VmName' could not read or update virtual machine configuration: ErrorCodeString … | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3071 | An attempt to read or update virtual machine configuration failed | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
| 3072 | 'VmName' could not read or update the virtual machine configuration because … | Microsoft-Windows-Hyper-V-Worker-Admin, Operational | N | N |
Event ID 1500: [Virtual machine VmId] TraceData.
#Event ID 1500: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1510: [Virtual machine VmId] TraceData.
#Event ID 1510: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1520: [Virtual machine VmId] TraceData.
#Event ID 1520: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1530: [Virtual machine VmId] TraceData.
#Event ID 1530: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1540: [Virtual machine VmId] TraceData.
#Event ID 1540: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1550: [Virtual machine VmId] TraceData.
#Event ID 1550: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1560: [Virtual machine VmId] TraceData.
#Event ID 1560: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1570: [Virtual machine VmId] TraceData.
#Event ID 1570: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1580: [Virtual machine VmId] TraceData.
#Event ID 1580: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1590: [Virtual machine VmId] TraceData.
#Event ID 1590: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1600: [Virtual machine VmId] TraceData.
#Event ID 1600: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1610: [Virtual machine VmId] TraceData.
#Event ID 1610: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1620: [Virtual machine VmId] TraceData.
#Event ID 1620: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1630: [Virtual machine VmId] TraceData.
#Event ID 1630: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1640: [Virtual machine VmId] TraceData.
#Event ID 1640: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1650: [Virtual machine VmId] TraceData.
#Event ID 1650: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1660: [Virtual machine VmId] TraceData.
#Event ID 1660: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1670: [Virtual machine VmId] TraceData.
#Event ID 1670: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1680: [Virtual machine VmId] TraceData.
#Event ID 1680: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1690: [Virtual machine VmId] TraceData.
#Event ID 1690: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1700: [Virtual machine VmId] TraceData.
#Event ID 1700: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1710: [Virtual machine VmId] TraceData.
#Event ID 1710: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1720: [Virtual machine VmId] TraceData.
#Event ID 1720: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1730: [Virtual machine VmId] TraceData.
#Event ID 1730: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1740: [Virtual machine VmId] TraceData.
#Event ID 1750: [Virtual machine VmId] TraceData.
#Event ID 1750: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1760: [Virtual machine VmId] TraceData.
#Event ID 1760: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1770: [Virtual machine VmId] TraceData.
#Event ID 1770: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1780: [Virtual machine VmId] TraceData.
#Event ID 1780: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1790: [Virtual machine VmId] TraceData.
#Event ID 1790: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1800: [Virtual machine VmId] TraceData.
#Event ID 1800: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1810: [Virtual machine VmId] TraceData.
#Event ID 1810: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 1820: [Virtual machine VmId] TraceData.
#Event ID 1830: [Virtual machine VmId] TraceData.
#Event ID 1840: [Virtual machine VmId] TraceData.
#Event ID 1850: [Virtual machine VmId] TraceData.
#Event ID 2080: [Virtual machine VmId] TraceData.
#Event ID 2080: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 3020: 'VmName' failed a save operation: ErrorCode (HResult)
#Event ID 3021: 'VmName' failed a save operation: ErrorCode (HResult)
#Event ID 3022: A save operation was cancelled for the virtual machine 'VmName'
#Event ID 3023: A save operation was cancelled for the virtual machine 'VmName'
#Event ID 3030: 'VmName' is unable to allocate RamSizeInMb MB of RAM: ErrorCode (HResult)
#Event ID 3031: Unable to allocate RamSizeInMb MB of RAM: ErrorCode (HResult)
#Event ID 3040: 'VmName' could not initialize
#Event ID 3041: 'VmName' could not initialize
#Event ID 3042: 'VmName' could not reinitialize
#Event ID 3043: 'VmName' could not reinitialize
#Event ID 3048: 'VmName' Smart Paging was enabled
#Event ID 3049: 'VmName' Smart Paging was disabled
#Event ID 3050: 'VmName' could not initialize memory: ErrorCode (HResult)
#Event ID 3051: Could not initialize memory: ErrorCode (HResult)
#Event ID 3052: 'VmName' could not setup Smart Paging: ErrorCode (HResult)
#Event ID 3053: Failed to setup Smart Paging: ErrorCode (HResult)
#Event ID 3054: 'VmName' successfully allocated memory, but a subset of the physical pages was allocated on a remote non-uniform memory architecture (NUMA) node
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 3055: Successfully allocated memory, but a subset of the physical pages was allocated on a remote non-uniform memory architecture (NUMA) node
#Event ID 3056: 'VmName' is configured to have a different non-uniform memory architecture (NUMA) topology to that of the physical machine
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 3058: Virtual machine 'VmName' failed to recommit poisoned page: ErrorCode (HResult)
#Event ID 3059: Failed to recommit poisoned page: ErrorCode (HResult)
#Event ID 3062: Virtual Machine Worker Process initialization has timed out, and will terminate
#Event ID 3063: Virtual Machine Worker Process initialization has timed out, and will terminate
#Event ID 3064: The requested operation has failed
#Event ID 3065: The requested operation has failed
#Event ID 3070: 'VmName' could not read or update virtual machine configuration: ErrorCodeString (ErrorCode)
#Event ID 3071: An attempt to read or update virtual machine configuration failed
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3072: 'VmName' could not read or update the virtual machine configuration because access was denied: ErrorCodeString (ErrorCode)
#Description
'' could not read or update the virtual machine configuration because access was denied: (). Check the security settings on the folder in which the virtual machine is stored. (Virtual machine ID ).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3073: An attempt to read or update the virtual machine configuration failed because access was denied
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3074: 'VmName' does not support this version of the configuration data
#Event ID 3075: The version of the configuration data is not supported
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3080: 'VmName' could not create or access saved state file MemoryFilePath.
#Event ID 3080: 'VmName' could not create or access saved state file
#Description
'VmName' could not create or access saved state file MemoryFilePath. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
MemoryFilePath UnicodeString |
Event ID 3081: An attempt to initialize VM saved state failed
#Event ID 3082: '.
#Event ID 3082: 'VmName' The version of the saved state is not compatible with this virtual machine version
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
MemoryFilePath UnicodeString |
Event ID 3083: The virtual machine saved state has compatibility issues, delete the saved state in order to start this VM
#Event ID 3084: 'VmName' The repository FileName async I/O OperationName has taken longer than WarningTimeMs ms to complete
#Description
'VmName' The repository FileName async I/O OperationName has taken longer than WarningTimeMs ms to complete. (AsyncIo ID AsyncIoId) (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
AsyncIoId GUID | |
FileName UnicodeString | |
OperationName UnicodeString | |
WarningTimeMs UInt32 |
Event ID 3085: 'VmName' The repository FileName async I/O OperationName took WarningTimeMs ms to complete
#Event ID 3086: 'VmlEventLog.VmName' The VmlEventLog.RepositoryName repository has logged performance summary (Virtual machine ID VmlEventLog.VmId) [VmlEventLog.Comments]: VmlEventLog.PerformanceSummary.
#Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
RepositoryName UnicodeString | |
Comments UnicodeString | |
PerformanceSummary UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 3086,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-11T06:31:57.937044+00:00",
"event_record_id": 8,
"correlation": {
"ActivityID": "164E10E5-B120-0006-8919-4E1620B1DC01"
},
"execution": {
"process_id": 9436,
"thread_id": 9460
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
"VmId": "00390032-0041-0037-3800-390032004400",
"RepositoryName": "-8743-4A3F-85E3-06FE9D7977B4",
"Comments": "runtime",
"PerformanceSummary": "Finished starting the VM's VMWP"
}
},
"message": ""
}
Event ID 3086: 'VmlEventLog.VmName' The VmlEventLog.RepositoryName repository has logged performance summary (Virtual machine ID VmlEventLog.VmId) [VmlEventLog.Comments]:
#Description
'VmName' The RepositoryName repository has logged performance summary (Virtual machine ID VmId) [Comments]: PerformanceSummary.
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId GUID | |
VmlEventLog.RepositoryName UnicodeString | |
VmlEventLog.Comments UnicodeString | |
VmlEventLog.PerformanceSummary UnicodeString | |
VmName UnicodeString | |
VmId GUID | |
RepositoryName UnicodeString | |
Comments UnicodeString | |
PerformanceSummary UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 3086,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-04-17T20:06:22.2458944+00:00",
"event_record_id": 184,
"correlation": {
"ActivityID": "{429AF999-FC42-4764-9A30-62C19016EA5D}"
},
"execution": {
"process_id": 8996,
"thread_id": 9020
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-2996802696-1180546525-2945929097-3904707920"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "b29f9488-b5dd-465d-894f-97af501dbde8",
"VmId": "{00320042-0039-0046-3900-340038003800}",
"RepositoryName": "-B5DD-465D-894F-97AF501DBDE8",
"Comments": "runtime",
"PerformanceSummary": "Finished saving the VM's VMWP"
}
},
"message": "'b29f9488-b5dd-465d-894f-97af501dbde8' The -B5DD-465D-894F-97AF501DBDE8 repository has logged performance summary (Virtual machine ID {00320042-0039-0046-3900-340038003800}) [runtime]: Finished saving the VM's VMWP"
}
Event ID 3100: The processor topology specified for the virtual machine cannot be supported by this host
#Message #
Event ID 3101: The processor settings for the virtual machine are incompatible with the host
#Event ID 3102: The configuration of virtual machine 'VmName' specifies an invalid number of virtual NUMA nodes
#Event ID 3103: The configuration of virtual machine 'VmName' specifies an invalid number of virtual NUMA nodes
#Event ID 3104: The invalid value 'Parameter0' was specified for the size of the low memory mapped IO gap in the configuration of the virtual machine 'VmName'
#Event ID 3105: The invalid value 'Parameter0' was specified for the size of the high memory mapped IO gap in the configuration of the virtual machine 'VmName'
#Event ID 3106: The configuration of virtual machine 'VmName' specifies an invalid value for startup memory: RamSizeInMb.
#Description
The configuration of virtual machine 'VmName' specifies an invalid value for startup memory: RamSizeInMb. Specify the value between MinimumSizeInMb and MaximumSizeInMb. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
RamSizeInMb UInt64 | |
MinimumSizeInMb UInt64 | |
MaximumSizeInMb UInt64 |
Event ID 3106: The configuration of virtual machine 'VmName' specifies an invalid value for startup memory:
#Description
The configuration of virtual machine 'VmName' specifies an invalid value for startup memory: RamSizeInMb. Specify the value between MinimumSizeInMb and MaximumSizeInMb. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
RamSizeInMb UInt64 | |
MinimumSizeInMb UInt64 | |
MaximumSizeInMb UInt64 |
Event ID 3107: The configuration of virtual machine 'VmName' specifies an invalid startup memory value
#Event ID 3108: The virtual machine could not be started because this platform does not support nested virtualization
#Description
The virtual machine could not be started because this platform does not support nested virtualization. Consider not exposing virtualization extensions to the virtual machine.
Message #
Event ID 3109: The virtual machine could not be started because this platform does not support nested virtualization
#Event ID 3110: Failed to create partition: ErrorCode (HResult)
#Event ID 3111: Failed to create partition: ErrorCode (HResult)
#Event ID 3112: The virtual machine could not be started because the hypervisor is not running
#Description
The virtual machine could not be started because the hypervisor is not running. The following actions may help you resolve the problem.
Message #
Event ID 3113: The virtual machine could not be started because the hypervisor is not running
#Event ID 3115: The virtual machine could not be started because of a configuration error
#Event ID 3116: The virtual machine could not be started because the host has a different CPU architecture
#Description
The virtual machine could not be started because the host has a different CPU architecture. The CPU architecture of the host and virtual machine must match.
Message #
Event ID 3117: The virtual machine could not be started because the host has a different CPU architecture
#Event ID 3118: The invalid value 'Parameter0' was specified for the base of the high memory mapped IO gap in the configuration of the virtual machine 'VmName'
#Event ID 3119: An invalid value was specified for the base of the high memory mapped IO gap in the configuration of the virtual machine
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Parameter0 UInt64 |
Event ID 3120: The virtual machine VmName could not be started because the specified NUMA node list contains invalid NUMA Nodes
#Event ID 3121: The virtual machine VmName could not be started because the specified NUMA node list contains invalid NUMA Nodes
#Event ID 3122: Not enough memory in the system to start the virtual machine VmName with ram size RamSizeInMb megabytes
#Event ID 3123: Not enough memory in the system to start the virtual machine VmName.
#Event ID 3123: Not enough memory in the system to start the virtual machine
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
RamSizeInMb UInt64 |
Event ID 3124: Virtual machine 'VmName' cannot be started on this server
#Event ID 3125: Virtual machine 'VmName' cannot be started on this server
#Event ID 3126: Virtual machine 'VmName' cannot be started
#Description
Virtual machine 'VmName' cannot be started. The upper MMIO region (Parameter0) is above the supported physical address range. Make sure that the upper MMIO region is below Parameter1. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 3127: The configuration of the virtual machine 'VmName' specifies an upper MMIO region that is above the supported physical address range
#Event ID 3128: Virtual machine 'VmName' cannot be started
#Event ID 3129: The configuration of the virtual machine 'VmName' specifies more memory than what the virtual machine can address
#Event ID 3130: 'VmName' failed to create or access memory contents file MemoryFilePath.
#Event ID 3130: 'VmName' failed to create or access memory contents file
#Description
'VmName' failed to create or access memory contents file MemoryFilePath. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
MemoryFilePath UnicodeString |
Event ID 3131: Failed to create or access memory contents file MemoryFilePath.
#Event ID 3131: Failed to create or access memory contents file
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
MemoryFilePath UnicodeString |
Event ID 3132: The invalid value 'Parameter0' was specified for the base of the VTL2 address space in the configuration of the virtual machine 'VmName'
#Event ID 3133: An invalid value was specified for the base of the VTL2 address space in the configuration of the virtual machine
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Parameter0 UInt64 |
Event ID 3134: The invalid value 'Parameter0' was specified for the size of the VTL2 address space in the configuration of the virtual machine 'VmName'
#Event ID 3135: An invalid value was specified for the size of the VTL2 address space in the configuration of the virtual machine
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Parameter0 UInt64 |
Event ID 3140: NUMA spanning is disabled on this server
#Event ID 3141: Enabling NUMA spanning may allow virtual machine 'VmName' to start
#Event ID 3142: Virtual machine 'VmName' cannot be started
#Event ID 3143: Virtual machine 'VmName' cannot be started
#Event ID 3144: Virtual machine 'VmName' cannot be started
#Event ID 3145: Virtual machine 'VmName' cannot be started
#Event ID 3146: The virtual machine could not be started because the platform does not support memory encryption
#Description
The virtual machine could not be started because the platform does not support memory encryption. Consider disabling memory encryption.
Message #
Event ID 3147: The virtual machine could not be started because the platform does not support memory encryption
#Event ID 3150: 'VmName' failed to save the virtual machine partition state: ErrorCode (HResult)
#Event ID 3151: Failed to save virtual machine partition state: ErrorCode (HResult)
#Event ID 3160: 'VmName' failed to restore the virtual machine state: ErrorCode (HResult)
#Event ID 3161: Failed to restore the virtual machine state: ErrorCode (HResult)
#Event ID 3184: 'VmName' failed to set the debug channel ID for the partition: ErrorCodeString 'ErrorCode'
#Event ID 3185: Failed to set the debug channel ID for the partition: ErrorCodeString 'ErrorCode'
#Event ID 3200: 'VmName' failed to save, but ignored the error to allow virtual machine to continue shutdown
#Event ID 3201: Failed to save, but ignored error to allow virtual machine to continue shutdown
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 3210: 'VmName' failed to save RAM contents during a checkpoint operation: ErrorCode (HResult)
#Event ID 3211: 'VmName' failed to save RAM contents during a checkpoint operation: ErrorCode (HResult)
#Event ID 3212: A checkpoint operation was cancelled for the virtual machine 'VmName'
#Event ID 3213: A checkpoint operation was cancelled for the virtual machine 'VmName'
#Event ID 3214: A timeout has occurred waiting for the new disk paths to be written to the configuration file for the virtual machine 'VmName'
#Event ID 3215: A timeout has occurred waiting for the new disk paths to be written to the configuration file 'VmName'
#Event ID 3216: 'VmName' failed to switch using the new differencing disks during a checkpoint operation: ErrorCode (HResult)
#Event ID 3217: 'VmName' failed to switch using the new differencing disks during a checkpoint operation: ErrorCode (HResult)
#Event ID 3220: 'VmName' is unable to save RAM contents at address RamBlockAddress: ErrorCode (HResult)
#Event ID 3221: Unable to save RAM contents at address RamBlockAddress.
#Event ID 3221: Unable to save RAM contents at address
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
RamBlockAddress UInt64 | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 3230: 'VmName' is unable to restore RAM contents at address RamBlockAddress: ErrorCode (HResult)
#Event ID 3231: Unable to restore RAM contents at address RamBlockAddress.
#Event ID 3231: Unable to restore RAM contents at address
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
RamBlockAddress UInt64 | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 3240: 'VmName' is unable to save RAM block RamBlockNumber: ErrorCode (HResult)
#Event ID 3241: Unable to save RAM block RamBlockNumber.
#Event ID 3241: Unable to save RAM block
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
RamBlockNumber UInt32 | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 3270: 'VmName' is unable to restore RAM because some RAM block data is corrupt
#Event ID 3271: Unable to restore RAM because some RAM block data is corrupt
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 3272: Failed to initialize 'VmName'
#Event ID 3273: 'VmName' is unable to allocate direct map space (page count Parameter0): ErrorCode (HResult)
#Event ID 3275: 'VmName' is unable to restore direct map allocation (virtual NUMA node Parameter0, start page Parameter1, page count Parameter2): ErrorCode (HResult)
#Description
'VmName' is unable to restore direct map allocation (virtual NUMA node Parameter0, start page Parameter1, page count Parameter2): ErrorCode (HResult). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString |
Event ID 3277: 'VmName' is unable to free direct map allocation (start page Parameter0): error ErrorCode (HResult)
#Event ID 3280: 'VmName' could not initiate a checkpoint operation: ErrorCode (HResult)
#Event ID 3281: 'VmName' could not initiate a checkpoint operation
#Event ID 3286: 'VmName' was paused as a hr of a failure to resume execution during a checkpoint operation
#Event ID 3287: 'VmName' was paused as a hr of a failure to resume execution during a checkpoint operation
#Event ID 3290: 'VmName' is unable to restore RAM and is unable to create a restore buffer
#Event ID 3291: Unable to restore RAM and is unable to create a restore buffer
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 3292: 'VmName' failed to restore because memory contents file is corrupt
#Event ID 3294: 'VmName' failed to copy the source file 'Parameter0' to the destination 'Parameter1' in the guest: ErrorCode (HResult)
#Description
'VmName' failed to copy the source file 'Parameter0' to the destination 'Parameter1' in the guest: ErrorCode (HResult). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 3295: Failed to copy the source file 'Parameter0' to the destination 'Parameter1' in the guest
#Event ID 3296: 'VmName' failed to copy the source file 'Parameter0' to the destination 'Parameter1' in the guest: ErrorCode (HResult)
#Description
'VmName' failed to copy the source file 'Parameter0' to the destination 'Parameter1' in the guest: ErrorCode (HResult). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 3297: Failed to copy the source file 'Parameter0' to the destination 'Parameter1' in the guest
#Event ID 3298: 'VmName' failed to complete copying the source file 'Parameter0' to the destination 'Parameter1' in the guest: ErrorCode (HResult)
#Description
'VmName' failed to complete copying the source file 'Parameter0' to the destination 'Parameter1' in the guest: ErrorCode (HResult). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 3299: Failed to copy the source file 'Parameter0' to the destination 'Parameter1' in the guest
#Event ID 3300: 'VmName' is unable to restore RAM and the operation canceled
#Event ID 3301: Unable to restore RAM and the operation canceled
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 3310: 'VmName' failed to initialize a restore operation: ErrorCode (HResult)
#Event ID 3311: Failed to initialize a restore operation: ErrorCode (HResult)
#Event ID 3320: 'VmName' failed to create memory contents file 'MemoryFilePath' of size FileSizeInMb MB: ErrorCode (HResult)
#Description
'VmName' failed to create memory contents file 'MemoryFilePath' of size FileSizeInMb MB: ErrorCode (HResult). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
MemoryFilePath UnicodeString | |
FileSizeInMb UInt32 | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 3321: Failed to create memory contents file 'MemoryFilePath' of size FileSizeInMb MB
#Event ID 3322: 'VmName': Cannot allocate more memory to the virtual machine because of failure to extend the memory contents file 'MemoryFilePath' to FileSizeInMb MB: ErrorCode (HResult)
#Description
'VmName': Cannot allocate more memory to the virtual machine because of failure to extend the memory contents file 'MemoryFilePath' to FileSizeInMb MB: ErrorCode (HResult). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
MemoryFilePath UnicodeString | |
FileSizeInMb UInt32 | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 3324: '.
#Event ID 3324: 'VmName': Cannot allocate more memory to the virtual machine because there is not enough free disk space to extend the memory contents file 'MemoryFilePath' to FileSizeInMb MB
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
MemoryFilePath UnicodeString | |
FileSizeInMb UInt32 |
Event ID 3326: The Virtual Machine 'VmName' failed to start because there is not enough disk space
#Event ID 3327: The Virtual Machine 'VmName' failed to start because there is not enough disk space
#Event ID 3330: 'VmName' could not access checkpoint repository: ErrorCode (HResult)
#Event ID 3331: Could not access checkpoint repository
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 3332: Cannot take checkpoint for 'VmName' because one or more pass-through disks are attached
#Event ID 3350: 'VmName' could not create auto virtual hard disk String: ErrorCodeString (ErrorCode)
#Event ID 3351: Could not create auto virtual hard disk String: ErrorCodeString.
#Event ID 3351: Could not create auto virtual hard disk String:
#Description
Could not create auto virtual hard disk : .
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3352: Production Checkpoint for VM 'VmName' failed in the guest VSS Integration Component with error ErrorCode (HResult)
#Description
Production Checkpoint for VM 'VmName' failed in the guest VSS Integration Component with error ErrorCode (HResult). If you continue to see this problem please use regular checkpoints instead (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 3353: Production Checkpoint for VM 'VmName' failed in the guest VSS Integration Component with error ErrorCode (HResult)
#Event ID 3361: Unable to stop the virtual processors
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 3370: 'VmName' is unable to reset the virtual hard disk path for String as a hr of failure to create a checkpoint
#Description
'VmName' is unable to reset the virtual hard disk path for String as a hr of failure to create a checkpoint. ErrorCodeString (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3371: Unable to change the virtual hard disk path for String as a hr of failure to create a checkpoint
#Event ID 3372: 'VmName' is unable to take a checkpoint due to incorrect file or path name 'String'
#Event ID 3373: An attempt to take checkpoint failed due to incorrect file or path name String.
#Event ID 3373: An attempt to take checkpoint failed due to incorrect file or path name
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3430: 'VmName' failed to set/change partition property: ErrorCodeString 'ErrorCode'
#Event ID 3431: Failed to set/change partition property: ErrorCodeString 'ErrorCode'
#Event ID 3432: 'VmName' could not set the processor affinity for the worker process: Parameter0.
#Event ID 3432: 'VmName' could not set the processor affinity for the worker process:
#Description
'VmName' could not set the processor affinity for the worker process: Parameter0. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 3433: Could not set the processor affinity for the worker process: Parameter0 (Parameter1)
#Event ID 3434: 'VmName' could not perform the operation
#Event ID 3435: Could not perform the operation
#Event ID 3436: 'VmName' could not perform configuration operation: ErrorCode (HResult)
#Event ID 3437: 'VmName' could not perform configuration operation: ErrorCode (HResult)
#Event ID 3438: Cannot take checkpoint for 'VmName' because one or more synthetic fibre channel controllers are attached
#Event ID 3450: 'VmName' failed to start: ErrorCodeString (ErrorCode)
#Event ID 3451: Failed to start
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3452: 'VmName' failed to stop: ErrorCodeString (ErrorCode).
#Description
'VmName' failed to stop: ErrorCodeString (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 3452,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-05-30T04:20:42.812480+00:00",
"event_record_id": 218,
"correlation": {
"ActivityID": "335F6A65-296E-491F-ADA1-9FF4BCCF07BB"
},
"execution": {
"process_id": 6288,
"thread_id": 7664
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-2498953043-1104008339-1333904521-1274921025"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "94f2ff53-d493-41cd-89c4-814f41c0fd4b",
"VmId": "94F2FF53-D493-41CD-89C4-814F41C0FD4B",
"ErrorCodeString": "%%2147749889",
"ErrorCode": "0x80041001"
}
},
"message": ""
}
Event ID 3452: 'VmlEventLog.VmName' failed to stop: VmlEventLog.ErrorCodeString (VmlEventLog.ErrorCode)
#Description
'VmName' failed to stop: ErrorCodeString (ErrorCode). (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId UnicodeString | |
VmlEventLog.ErrorCodeString UnicodeString | |
VmlEventLog.ErrorCode UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 3452,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-05-30T04:20:42.8124804+00:00",
"event_record_id": 218,
"correlation": {
"ActivityID": "{335F6A65-296E-491F-ADA1-9FF4BCCF07BB}"
},
"execution": {
"process_id": 6288,
"thread_id": 7664
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-2498953043-1104008339-1333904521-1274921025"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "94f2ff53-d493-41cd-89c4-814f41c0fd4b",
"VmId": "94F2FF53-D493-41CD-89C4-814F41C0FD4B",
"ErrorCodeString": "%%2147749889",
"ErrorCode": "0x80041001"
}
},
"message": "'94f2ff53-d493-41cd-89c4-814f41c0fd4b' failed to stop: Generic failure (0x80041001). (Virtual machine ID 94F2FF53-D493-41CD-89C4-814F41C0FD4B)"
}
Event ID 3453: Failed to stop
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3454: 'VmName' failed to pause: ErrorCodeString (ErrorCode)
#Event ID 3456: 'VmName' failed to resume: ErrorCodeString (ErrorCode)
#Event ID 3457: Failed to resume
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3458: 'VmName' failed to reset: ErrorCodeString (ErrorCode)
#Event ID 3459: Failed to reset
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3460: 'VmName' failed to save: ErrorCodeString (ErrorCode)
#Event ID 3461: Failed to save
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3462: 'VmName' failed to restore: ErrorCodeString (ErrorCode)
#Event ID 3463: Failed to restore
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3464: 'VmName' failed to take a snpahsot: ErrorCodeString (ErrorCode)
#Event ID 3465: Failed to take a checkpoint
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3466: 'VmName' failed to inject a non-maskable interrupt: ErrorCodeString (ErrorCode)
#Event ID 3467: Failed to inject a non-maskable interrupt
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3468: 'VmName' failed to initiate migration at the source: ErrorCodeString (ErrorCode)
#Event ID 3469: Failed to initiate migration at the source
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3470: 'VmName' failed to initiate migration at the destination: ErrorCodeString (ErrorCode)
#Event ID 3471: Failed to initiate migration at the destination
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3472: 'VmName' failed to initiate copying files to the guest: ErrorCodeString (ErrorCode)
#Event ID 3473: Failed to initiate copying files to the guest
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3474: 'VmName' cancelled copying files to the guest
#Event ID 3475: File copy to the guest was cancelled
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 3476: 'VmName' succesfully copied the source file 'SourcePath' to the destination 'DestinationPath' in the guest
#Event ID 3477: Succesfully copied the source file 'SourcePath' to the destination 'DestinationPath' in the guest
#Event ID 3478: 'VmName' failed to fast-save: ErrorCodeString (ErrorCode)
#Event ID 3479: Failed to fast-save
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3480: 'VmName' failed to fast-restore: ErrorCodeString (ErrorCode)
#Event ID 3481: Failed to fast-restore
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3482: 'VmName' failed a fast-save operation: ErrorCode (HResult)
#Event ID 3483: 'VmName' failed a fast-save operation: ErrorCode (HResult)
#Event ID 3484: A fast-save operation was cancelled for the virtual machine 'VmName'
#Event ID 3485: A fast-save operation was cancelled for the virtual machine 'VmName'
#Event ID 3486: 'VmName' failed to stop for critical error: ErrorCodeString (ErrorCode)
#Event ID 3487: Failed to stop for critical error
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3488: 'VmName' failed to pause for critical error: ErrorCodeString (ErrorCode)
#Event ID 3489: Failed to pause for critical error
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3490: 'VmName' failed to resume from critical error: ErrorCodeString (ErrorCode)
#Event ID 3491: Failed to resume from critical error
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 3492: 'VmName' has not yet recovered from previous critical errors
#Event ID 3493: 'VmName' has not yet recovered from previous critical errors
#Event ID 3494: 'VmName' could not start the PHU zero operation: ErrorCode (HResult)
#Event ID 3495: 'VmName' could not start the PHU zero operation
#Event ID 3496: 'VmName' could not complete the PHU zero operation: ErrorCode (HResult)
#Event ID 3497: 'VmName' could not complete the PHU zero operation
#Event ID 3498: The number of virtual processors assigned to 'VmName' exceeds the physical core count
#Event ID 3500: A timeout has occurred waiting for finalization of save for the virtual machine 'VmName'
#Event ID 3501: A timeout has occurred waiting for finalization of save for 'VmName'
#Event ID 5000: An invalid option was specified on the command line: 'Parameter0'
#Event ID 5010: Too many arguments were specified on the command line: 'Parameter0'
#Event ID 5020: Dynamic memory was turned off for 'VmName' because NumaNodesAreRequired and NumaNodeList are configured for the virtual machine
#Event ID 5100: The virtual machine identifier was missing from the command line
#Event ID 5120: 'VmName' failed to calculate per NUMA node processor count with total processor count(Parameter0), maximum NUMA nodes per socket(Parameter1), and virtual NUMA node cou...
#Description
'VmName' failed to calculate per NUMA node processor count with total processor count(Parameter0), maximum NUMA nodes per socket(Parameter1), and virtual NUMA node count(Parameter2): ErrorCode (HResult). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString |
Event ID 5120: 'VmName' failed to calculate per NUMA node processor count with total processor count(Parameter0), maximum NUMA nodes per socket(Parameter1), and virtual NUMA node count(Parameter2): ErrorCode (HRe...
#Description
'VmName' failed to calculate per NUMA node processor count with total processor count(Parameter0), maximum NUMA nodes per socket(Parameter1), and virtual NUMA node count(Parameter2): ErrorCode (HResult). (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString |
Event ID 5121: Failed to calculate per NUMA node processor count
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString |
Event ID 5122: Virtual processor count exceeds the maximum supported count for the root scheduler, which is 1024
#Event ID 5124: '.
#Event ID 5124: 'VmName' failed to reload management VTL at stage: ServicingStage with error code ErrorCode (ErrorCodeString)
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
ServicingStage UnicodeString | |
ImageFileName UnicodeString | |
OldImageVersion UnicodeString | |
NewImageVersion UnicodeString | |
ServicingType UnicodeString | |
CorrelationId GUID |
Event ID 5125: Failed to reload management VTL
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
ServicingStage UnicodeString | |
ImageFileName UnicodeString | |
OldImageVersion UnicodeString | |
NewImageVersion UnicodeString | |
ServicingType UnicodeString | |
CorrelationId GUID |
Event ID 5126: '.
#Event ID 5126: 'VmName' successfully reloaded its management VTL
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ImageFileName UnicodeString | |
OldFirmwareVersion UnicodeString | |
NewFirmwareVersion UnicodeString | |
ServicingType UnicodeString | |
CorrelationId GUID |
Event ID 5127: Successfully reloaded management VTL
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ImageFileName UnicodeString | |
OldFirmwareVersion UnicodeString | |
NewFirmwareVersion UnicodeString | |
ServicingType UnicodeString | |
CorrelationId GUID |
Event ID 5128: 'VmName' encountered an issue reloading its management VTL and will be reset (Virtual machine ID VmId)
#Description
'VmName' encountered an issue reloading its management VTL and will be reset (Virtual machine ID VmId). Reset reason: 'ResetReason'. Servicing type: ServicingType. Correlation ID: 'TaskId'.
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ResetReason UnicodeString | |
ServicingType UnicodeString | |
TaskId GUID |
Event ID 5129: Reset required for VM due to management VTL reload issue
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ResetReason UnicodeString | |
ServicingType UnicodeString | |
TaskId GUID |
Event ID 5130: '.
#Event ID 5130: 'VmName' did not require a management VTL update
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ImageFileName UnicodeString | |
OldFirmwareVersion UnicodeString | |
NewFirmwareVersion UnicodeString | |
ServicingType UnicodeString | |
CorrelationId GUID |
Event ID 5131: No management VTL update required, version is up to date
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ImageFileName UnicodeString | |
OldFirmwareVersion UnicodeString | |
NewFirmwareVersion UnicodeString | |
ServicingType UnicodeString | |
CorrelationId GUID |
Event ID 5132: '.
#Event ID 5132: 'VmName' has management VTL update disabled due to the host-wide management VTL reload policy setting
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ImageFileName UnicodeString | |
OldFirmwareVersion UnicodeString | |
NewFirmwareVersion UnicodeString | |
ServicingType UnicodeString | |
CorrelationId GUID |
Event ID 5133: Management VTL update disabled due to the host-wide management VTL reload policy setting
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ImageFileName UnicodeString | |
OldFirmwareVersion UnicodeString | |
NewFirmwareVersion UnicodeString | |
ServicingType UnicodeString | |
CorrelationId GUID |
Event ID 5134: '.
#Event ID 5134: 'VmName' has management VTL update disabled due to the VM's management VTL reload policy setting
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ImageFileName UnicodeString | |
OldFirmwareVersion UnicodeString | |
NewFirmwareVersion UnicodeString | |
ServicingType UnicodeString | |
CorrelationId GUID |
Event ID 5135: Management VTL update disabled due to the VM's management VTL reload policy setting
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ImageFileName UnicodeString | |
OldFirmwareVersion UnicodeString | |
NewFirmwareVersion UnicodeString | |
ServicingType UnicodeString | |
CorrelationId GUID |
Event ID 5136: 'VmName' signalled for a guest reset during a management VTL reload operation (Virtual machine ID VmId)
#Description
'VmName' signalled for a guest reset during a management VTL reload operation (Virtual machine ID VmId). Reason: ResetReason. Servicing type: ServicingType. Correlation ID: 'TaskId'.
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ResetReason UnicodeString | |
ServicingType UnicodeString | |
TaskId GUID |
Event ID 5137: Guest reset was signalled during management VTL reload operation
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ResetReason UnicodeString | |
ServicingType UnicodeString | |
TaskId GUID |
Event ID 5140: 'VmName' failed to load IGVM file with error code ErrorCode (ErrorCodeString)
#Event ID 5141: Failed to load IGVM file
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId GUID | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
ImageFileName UnicodeString |
Event ID 5142: 'VmName' failed to load custom IGVM file because AllowFirmwareLoadFromFile registry key is not set
#Event ID 5143: Loading custom IGVM files is not allowed without a registry opt-in
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 10010: [Virtual machine VmId] TraceData.
#Event ID 10010: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10020: [Virtual machine VmId] TraceData.
#Event ID 10020: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10030: [Virtual machine VmId] TraceData.
#Event ID 10030: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10040: [Virtual machine VmId] TraceData.
#Event ID 10040: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10044: The Virtual Machine Worker Process has lost its connection to the Parameter0 WMI namespace: ErrorMessage (ErrorCode)
#Event ID 10045: The Virtual Machine Worker Process has lost its connection to the Parameter0 WMI namespace: ErrorMessage (ErrorCode)
#Event ID 10046: The Virtual Machine Worker Process has restored its connection to the Parameter0 WMI namespace
#Event ID 10050: [Virtual machine VmId] TraceData.
#Event ID 10050: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10060: [Virtual machine VmId] TraceData.
#Event ID 10060: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10070: [Virtual machine VmId] TraceData.
#Event ID 10070: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10100: [Virtual machine VmId] TraceData.
#Event ID 10100: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10110: [Virtual machine VmId] TraceData.
#Event ID 10110: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10160: [Virtual machine VmId] TraceData.
#Event ID 10170: [Virtual machine VmId] TraceData.
#Event ID 10170: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10180: [Virtual machine VmId] TraceData.
#Event ID 10180: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10190: [Virtual machine VmId] TraceData.
#Event ID 10190: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10200: [Virtual machine VmId] TraceData.
#Event ID 10200: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10210: [Virtual machine VmId] TraceData.
#Event ID 10210: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10220: [Virtual machine VmId] TraceData.
#Event ID 10220: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10230: [Virtual machine VmId] TraceData.
#Event ID 10230: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10240: [Virtual machine VmId] TraceData.
#Event ID 10240: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10250: [Virtual machine VmId] TraceData.
#Event ID 10250: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10260: [Virtual machine VmId] TraceData.
#Event ID 10260: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10270: [Virtual machine VmId] TraceData.
#Event ID 10270: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10280: [Virtual machine VmId] TraceData.
#Event ID 10280: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10290: [Virtual machine VmId] TraceData.
#Event ID 10290: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10300: [Virtual machine VmId] TraceData.
#Event ID 10300: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10310: [Virtual machine VmId] TraceData.
#Event ID 10310: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10320: [Virtual machine VmId] TraceData.
#Event ID 10320: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10330: [Virtual machine VmId] TraceData.
#Event ID 10330: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10340: [Virtual machine VmId] TraceData.
#Event ID 10340: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10350: [Virtual machine VmId] TraceData.
#Event ID 10350: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10360: [Virtual machine VmId] TraceData.
#Event ID 10360: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10370: [Virtual machine VmId] TraceData.
#Event ID 10370: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10380: [Virtual machine VmId] TraceData.
#Event ID 10380: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10390: [Virtual machine VmId] TraceData.
#Event ID 10390: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10400: [Virtual machine VmId] TraceData.
#Event ID 10400: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10410: [Virtual machine VmId] TraceData.
#Event ID 10420: [Virtual machine VmId] TraceData.
#Event ID 10420: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10430: [Virtual machine VmId] TraceData.
#Event ID 10430: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10440: [Virtual machine VmId] TraceData.
#Event ID 10440: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10450: [Virtual machine VmId] TraceData.
#Event ID 10450: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10460: [Virtual machine VmId] TraceData.
#Event ID 10460: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10470: [Virtual machine VmId] TraceData.
#Event ID 10470: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10480: [Virtual machine VmId] TraceData.
#Event ID 10480: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10490: [Virtual machine VmId] TraceData.
#Event ID 10490: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10500: [Virtual machine VmId] TraceData.
#Event ID 10500: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10510: [Virtual machine VmId] TraceData.
#Event ID 10510: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10520: [Virtual machine VmId] TraceData.
#Event ID 10520: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10530: [Virtual machine VmId] TraceData.
#Event ID 10530: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10540: [Virtual machine VmId] TraceData.
#Event ID 10540: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10550: [Virtual machine VmId] TraceData.
#Event ID 10550: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10560: [Virtual machine VmId] TraceData.
#Event ID 10560: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10570: [Virtual machine VmId] TraceData.
#Event ID 10570: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10580: [Virtual machine VmId] TraceData.
#Event ID 10580: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10590: [Virtual machine VmId] TraceData.
#Event ID 10590: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10600: [Virtual machine VmId] TraceData.
#Event ID 10600: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10610: [Virtual machine VmId] TraceData.
#Event ID 10610: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10620: [Virtual machine VmId] TraceData.
#Event ID 10620: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10630: [Virtual machine VmId] TraceData.
#Event ID 10630: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10640: [Virtual machine VmId] TraceData.
#Event ID 10640: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10650: [Virtual machine VmId] TraceData.
#Event ID 10650: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10660: [Virtual machine VmId] TraceData.
#Event ID 10670: [Virtual machine VmId] TraceData.
#Event ID 10670: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10680: [Virtual machine VmId] TraceData.
#Event ID 10680: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10690: [Virtual machine VmId] TraceData.
#Event ID 10690: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10700: [Virtual machine VmId] TraceData.
#Event ID 10700: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10710: [Virtual machine VmId] TraceData.
#Event ID 10710: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10720: [Virtual machine VmId] TraceData.
#Event ID 10720: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10730: [Virtual machine VmId] TraceData.
#Event ID 10730: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10740: [Virtual machine VmId] TraceData.
#Event ID 10740: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10750: [Virtual machine VmId] TraceData.
#Event ID 10750: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10760: [Virtual machine VmId] TraceData.
#Event ID 10760: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10770: [Virtual machine VmId] TraceData.
#Event ID 10770: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10780: [Virtual machine VmId] TraceData.
#Event ID 10780: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10790: [Virtual machine VmId] TraceData.
#Event ID 10790: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10800: [Virtual machine VmId] TraceData.
#Event ID 10800: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10810: [Virtual machine VmId] TraceData.
#Event ID 10810: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10820: [Virtual machine VmId] TraceData.
#Event ID 10820: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10830: [Virtual machine VmId] TraceData.
#Event ID 10830: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10840: [Virtual machine VmId] TraceData.
#Event ID 10840: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10850: [Virtual machine VmId] TraceData.
#Event ID 10850: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10860: [Virtual machine VmId] TraceData.
#Event ID 10860: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10870: [Virtual machine VmId] TraceData.
#Event ID 10870: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10880: [Virtual machine VmId] TraceData.
#Event ID 10880: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10890: [Virtual machine VmId] TraceData.
#Event ID 10890: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10900: [Virtual machine VmId] TraceData.
#Event ID 10900: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10910: [Virtual machine VmId] TraceData.
#Event ID 10920: [Virtual machine VmId] TraceData.
#Event ID 10920: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10930: [Virtual machine VmId] TraceData.
#Event ID 10930: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10940: [Virtual machine VmId] TraceData.
#Event ID 10940: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10950: [Virtual machine VmId] TraceData.
#Event ID 10950: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10960: [Virtual machine VmId] TraceData.
#Event ID 10960: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10970: [Virtual machine VmId] TraceData.
#Event ID 10970: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10980: [Virtual machine VmId] TraceData.
#Event ID 10980: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 10990: [Virtual machine VmId] TraceData.
#Event ID 10990: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11000: [Virtual machine VmId] TraceData.
#Event ID 11000: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11010: [Virtual machine VmId] TraceData.
#Event ID 11010: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11020: [Virtual machine VmId] TraceData.
#Event ID 11020: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11030: [Virtual machine VmId] TraceData.
#Event ID 11030: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11040: [Virtual machine VmId] TraceData.
#Event ID 11040: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11050: [Virtual machine VmId] TraceData.
#Event ID 11050: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11060: [Virtual machine VmId] TraceData.
#Event ID 11060: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11070: [Virtual machine VmId] TraceData.
#Event ID 11070: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11080: [Virtual machine VmId] TraceData.
#Event ID 11080: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11090: [Virtual machine VmId] TraceData.
#Event ID 11090: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11100: [Virtual machine VmId] TraceData.
#Event ID 11100: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11110: [Virtual machine VmId] TraceData.
#Event ID 11110: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11120: [Virtual machine VmId] TraceData.
#Event ID 11120: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11130: [Virtual machine VmId] TraceData.
#Event ID 11130: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11140: [Virtual machine VmId] TraceData.
#Event ID 11140: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11150: [Virtual machine VmId] TraceData.
#Event ID 11150: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11160: [Virtual machine VmId] TraceData.
#Event ID 11170: [Virtual machine VmId] TraceData.
#Event ID 11170: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11180: [Virtual machine VmId] TraceData.
#Event ID 11180: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11190: [Virtual machine VmId] TraceData.
#Event ID 11190: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11200: [Virtual machine VmId] TraceData.
#Event ID 11200: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11210: [Virtual machine VmId] TraceData.
#Event ID 11210: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11220: [Virtual machine VmId] TraceData.
#Event ID 11220: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11230: [Virtual machine VmId] TraceData.
#Event ID 11230: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11240: [Virtual machine VmId] TraceData.
#Event ID 11240: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11250: [Virtual machine VmId] TraceData.
#Event ID 11250: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11260: [Virtual machine VmId] TraceData.
#Event ID 11260: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11270: [Virtual machine VmId] TraceData.
#Event ID 11270: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11280: [Virtual machine VmId] TraceData.
#Event ID 11280: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11290: [Virtual machine VmId] TraceData.
#Event ID 11290: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 11900: 'VmName' Device: Configuration section is corrupt
#Event ID 11901: Device: Configuration section is corrupt or has old versioning or schema
#Event ID 11902: 'VmName' (Device 'Device'): a unrecoverable internal error has occurred
#Event ID 11903: Device 'Device': a unrecoverable internal error has occurred
#Event ID 11990: DeviceName (Instance ID DeviceInstanceId): Error 'ErrorCodeString'
#Event ID 11998: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to create instance with error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to create instance with error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12000: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to initialize with error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to initialize with error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12001: DeviceName (Instance ID DeviceInstanceId): Error 'ErrorCodeString'
#Event ID 12002: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to teardown with error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to teardown with error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12003: DeviceName (Instance ID DeviceInstanceId): Error 'ErrorCodeString'
#Event ID 12004: 'VmName' DeviceName: Failed to start reserving resources with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName: Failed to start reserving resources with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12005: DeviceName (Instance ID DeviceInstanceId): Error 'ErrorCodeString'
#Event ID 12006: 'VmName' DeviceName: Failed to finish reserving resources with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName: Failed to finish reserving resources with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12007: DeviceName (Instance ID DeviceInstanceId): Error 'ErrorCodeString'
#Event ID 12008: 'VmName' DeviceName: Failed to free reserved resources with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName: Failed to free reserved resources with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12009: DeviceName (Instance ID DeviceInstanceId): Error 'ErrorCodeString'
#Event ID 12010: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to Power on with Error 'ErrorCodeString' (ErrorCode).
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to Power on with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12010: 'VmlEventLog.VmName' VmlEventLog.DeviceName (Instance ID VmlEventLog.DeviceInstanceId): Failed to Power on with Error 'VmlEventLog.ErrorCodeString' (VmlEventLog.ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to Power on with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId UnicodeString | |
VmlEventLog.DeviceName UnicodeString | |
VmlEventLog.ErrorCodeString UnicodeString | |
VmlEventLog.ErrorCode UnicodeString | |
VmlEventLog.DeviceInstanceId UnicodeString | |
VmlEventLog.Param1 UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 12010,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-06-13T15:46:57.7409502+00:00",
"event_record_id": 204,
"correlation": {
"ActivityID": "{0726B8BA-FB3C-0003-042C-29073CFBDC01}"
},
"execution": {
"process_id": 8888,
"thread_id": 5368
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "telemetry-W11-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-838361004-1162202325-2130707894-2078394515"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "evtgen-linux",
"VmId": "31F85FAC-CCD5-4545-B605-007F93C8E17B",
"DeviceName": "Microsoft Emulated IDE Controller",
"ErrorCodeString": "%%2147942432",
"ErrorCode": "0x80070020",
"DeviceInstanceId": "83F8638B-8DCA-4152-9EDA-2CA8B33039B4",
"Param1": ""
}
},
"message": "'evtgen-linux' Microsoft Emulated IDE Controller (Instance ID 83F8638B-8DCA-4152-9EDA-2CA8B33039B4): Failed to Power on with Error 'The process cannot access the file because it is being used by another process. ' (0x80070020). (Virtual machine ID 31F85FAC-CCD5-4545-B605-007F93C8E17B)"
}
Event ID 12011: DeviceName (Instance ID DeviceInstanceId): Failed to Power on with Error 'ErrorCodeString'
#Event ID 12020: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to Power off with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to Power off with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12021: DeviceName (Instance ID DeviceInstanceId): Failed to Power off with Error 'ErrorCodeString'
#Event ID 12030: 'VmName' failed to start.
#Event ID 12030: 'VmlEventLog.VmName' failed to start
#Description
'VmName' failed to start. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 12030,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-06-13T15:46:57.7583269+00:00",
"event_record_id": 205,
"correlation": {
"ActivityID": "{0726B8BA-FB3C-0003-042C-29073CFBDC01}"
},
"execution": {
"process_id": 8888,
"thread_id": 5368
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "telemetry-W11-d.cell-d.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-838361004-1162202325-2130707894-2078394515"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "evtgen-linux",
"VmId": "31F85FAC-CCD5-4545-B605-007F93C8E17B"
}
},
"message": "'evtgen-linux' failed to start. (Virtual machine ID 31F85FAC-CCD5-4545-B605-007F93C8E17B)"
}
Event ID 12040: 'VmName' failed to start after a reset
#Event ID 12041: 'VmName' failed to start after a reset
#Event ID 12042: 'VmName' failed to start after a reset by the guest operating system
#Event ID 12043: 'VmName' failed to start after a reset by the guest operating system
#Event ID 12044: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to Reset with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to Reset with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12045: DeviceName (Instance ID DeviceInstanceId): Failed to Reset with Error 'ErrorCodeString'
#Event ID 12046: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to Post Reset with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to Post Reset with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12047: DeviceName (Instance ID DeviceInstanceId): Failed to Post Reset with Error 'ErrorCodeString'
#Event ID 12048: 'VmName' failed to reload the configuration data during a reset operation (error 'Parameter0' (Parameter0))
#Description
'VmName' failed to reload the configuration data during a reset operation (error 'Parameter0' (Parameter0)). The Virtual machine will restart using the initial configuration data (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 12049: 'VmName' failed to reload the configuration data during a reset operation
#Event ID 12050: 'VmName' failed to restore
#Event ID 12051: 'VmName' failed to restore
#Event ID 12052: 'VmName' failed to fast-restore
#Event ID 12053: 'VmName' failed to fast-restore
#Event ID 12054: 'VmName' failed to save state: ErrorCode (HResult)
#Event ID 12055: 'VmName' failed to save state
#Event ID 12056: 'VmName' failed to fast-save state: ErrorCode (HResult)
#Event ID 12057: 'VmName' failed to fast-save state
#Event ID 12060: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to save with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to save with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12061: DeviceName (Instance ID DeviceInstanceId): Failed to save with Error 'ErrorCodeString'
#Event ID 12066: 'VmName' failed to resume
#Event ID 12067: 'VmName' failed to resume
#Event ID 12068: 'VmName' failed to resume from critical error
#Event ID 12069: 'VmName' failed to resume from critical error
#Event ID 12070: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to pause with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to pause with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12071: DeviceName (Instance ID DeviceInstanceId): Failed to pause with Error 'ErrorCodeString'
#Event ID 12080: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to restore with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to restore with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12081: DeviceName (Instance ID DeviceInstanceId): Failed to restore with Error 'ErrorCodeString'
#Event ID 12090: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to resume with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to resume with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12091: DeviceName: Failed to resume with Error 'ErrorCodeString'
#Event ID 12092: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to enable optimized mode with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to enable optimized mode with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12093: DeviceName: Failed to enable optimized mode with Error 'ErrorCodeString'
#Event ID 12094: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to start disable optimized mode with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to start disable optimized mode with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12095: DeviceName: Failed to start disable optimized mode with Error 'ErrorCodeString'
#Event ID 12096: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to start disable optimized mode with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to start disable optimized mode with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12097: DeviceName: Failed to start disable optimized mode with Error 'ErrorCodeString'
#Event ID 12098: 'VmName' DeviceName: Failed to save reserved resources with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName: Failed to save reserved resources with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12099: DeviceName (Instance ID DeviceInstanceId): Error 'ErrorCodeString'
#Event ID 12100: 'VmName' DeviceName: Failed to reconnect to resource pools with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName: Failed to reconnect to resource pools with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12101: DeviceName (Instance ID DeviceInstanceId): Error 'ErrorCodeString'
#Event ID 12132: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to save compatibility info with Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to save compatibility info with Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 12133: DeviceName (Instance ID DeviceInstanceId): Failed to save compatibility info with error 'ErrorCodeString'
#Event ID 12134: Remote SMB share does not support resiliency
#Event ID 12135: Remote SMB share does not support resiliency
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12136: 'VmName': The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still att...
#Description
'VmName': The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached to it. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12136: 'VmName': The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached to it
#Description
'VmName': The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached to it. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12137: The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached ...
#Description
The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached to it.
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12137: The storage controller resource allocation setting data object 'String' cannot be deleted because one or more storage drive objects are still attached to it
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12138: 'VmName': The storage drive resource allocation setting data object 'String' cannot be deleted because a logical disk object is still attached to it
#Description
'VmName': The storage drive resource allocation setting data object 'String' cannot be deleted because a logical disk object is still attached to it. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12139: The storage drive resource allocation setting data object 'String' cannot be deleted because a logical disk object is still attached to it
#Event ID 12140: 'VmName': Failed to open attachment 'String'
#Description
'VmName': Failed to open attachment 'String'. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12141: Failed to open attachment 'String'
#Event ID 12142: 'VmName': Failed to open virtual disk 'String'
#Description
'VmName': Failed to open virtual disk 'String'. A problem was encountered opening a virtual disk in the chain of differencing disks, 'Param1' (referenced by 'Param2'): 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12143: Failed to open virtual disk 'String'
#Description
Failed to open virtual disk 'String'. A problem was encountered opening a virtual disk in the chain of differencing disks, 'Param1': 'ErrorCodeString'.
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12144: 'VmName': Failed to open virtual disk 'String' because the file is corrupt or is too small
#Description
'VmName': Failed to open virtual disk 'String' because the file is corrupt or is too small. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12145: Failed to open virtual disk 'String' because the file is corrupt or is too small
#Event ID 12146: 'VmName': Failed to open ISO image 'String' because the file is corrupt or is too small
#Description
'VmName': Failed to open ISO image 'String' because the file is corrupt or is too small. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12147: Failed to open ISO image 'String' because the file is corrupt or is too small
#Event ID 12148: 'VmName': Failed to open 'String': Compressed virtual hard disks are not supported
#Event ID 12149: Failed to open 'String': Compressed virtual hard disks are not supported
#Event ID 12162: 'VmName': Failed to configure 'String': The storage where the virtual hard disk is located does not support virtual hard disk sharing
#Event ID 12163: Failed to configure 'String': The storage where the virtual hard disk is located does not support virtual hard disk sharing
#Event ID 12200: 'VmName' String: virtual machine is out of Memory Error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' String: virtual machine is out of Memory Error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12201: String: Virtual machine is out of Memory Error 'ErrorCodeString'
#Event ID 12240: 'VmName': Attachment 'String' not found
#Event ID 12241: Attachment 'String' not found
#Event ID 12242: 'VmName': Failed to mount the device 'String': The device is already mounted read-only, and an attempt was made to mount it read/write
#Description
'VmName': Failed to mount the device 'String': The device is already mounted read-only, and an attempt was made to mount it read/write. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12243: Failed to mount the device 'String': The device is already mounted read-only, and an attempt was made to mount it read/write
#Event ID 12244: 'VmName': Failed to mount the device 'String': The device is in use by another process
#Description
'VmName': Failed to mount the device 'String': The device is in use by another process. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12245: Failed to mount the device 'String': The device is in use by another process
#Event ID 12246: 'VmName': The physical device 'String' could not be found
#Description
'VmName': The physical device 'String' could not be found. It may have been removed from the system. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12247: The physical device could not be found
#Description
The physical device could not be found. It may have been removed from the system. Error: 'ErrorCodeString'.
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12248: 'VmName': The filename 'String' is reserved for use by Windows
#Description
'VmName': The filename 'String' is reserved for use by Windows. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12249: The filename 'String' is reserved for use by Windows
#Event ID 12260: 'VmName': Attachment 'String' is read only
#Description
'VmName': Attachment 'String' is read only. Please provide read/write access to add the attachment. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12261: Attachment 'String' is read only
#Description
Attachment 'String' is read only. Please provide read/write access to add the attachment. Error: 'ErrorCodeString'.
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12280: '.
#Event ID 12280: 'VmName': The Machine Account 'Param1' or the user initiating the VM management operation or both do not have the required access to the file share 'String'
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12281: The Machine Account 'Param1' or the user initiating the VM management operation or both do not have the required access to the file share 'String'
#Event ID 12290: 'VmName': Param1 Account does not have sufficient privilege to open attachment 'String'
#Description
'VmName': Param1 Account does not have sufficient privilege to open attachment 'String'. Error: 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12291: Param1 Account does not have sufficient privilege to open attachment 'String'
#Event ID 12292: 'VmName' encountered an error while calculating the size of the disk chain for 'String'
#Description
'VmName' encountered an error while calculating the size of the disk chain for 'String'. The error was: 'ErrorCodeString' (ErrorCode). Maximum disk metric will not be updated for the current disk. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12293: There was an error while calculating the size of the disk chain for disk metrics
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12300: Virtual machine='VmName', File 'String' is not a known floppy image type
#Event ID 12301: File 'String' is not a known floppy image type
#Event ID 12350: '.
#Event ID 12350: 'VmName': An error occurred while attempting to start the virtual machine
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12351: An error occurred while attempting to start the virtual machine
#Event ID 12352: '.
#Event ID 12352: 'VmName': An error occurred while attaching 'String' to the virtual machine
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12353: An error occurred while attaching 'String' to the virtual machine
#Event ID 12440: 'VmName' error 'ErrorCodeString' (ErrorCode) while opening file 'String' during ethernet device startup
#Description
'VmName' error 'ErrorCodeString' (ErrorCode) while opening file 'String' during ethernet device startup. The Hyper-V network service provider may not be installed. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12441: Error 'ErrorCodeString' (ErrorCode) while opening file 'String' during ethernet device startup
#Description
Error 'ErrorCodeString' (ErrorCode) while opening file 'String' during ethernet device startup. The Hyper-V network service provider may not be installed.
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12500: 'VmName' could not find a usable certificate
#Event ID 12501: Could not find a usable certificate
#Event ID 12502: Cannot find a certificate matching the certificate hash code specified at HKLM\Software\Microsoft\Windows NT\CurrentVersion\Virtualization\AuthCert...
#Description
Cannot find a certificate matching the certificate hash code specified at HKLM\Software\Microsoft\Windows NT\CurrentVersion\Virtualization\AuthCertificateHash.
Message #
Event ID 12502: Cannot find a certificate matching the certificate hash code specified at HKLM\Software\Microsoft\Windows NT\CurrentVersion\Virtualization\AuthCertificateHash
#Event ID 12504: The administrator specified certificate cannot be used because Hyper-V cannot access the private key container
#Message #
Event ID 12505: Cannot find certificate matching the certificate hash code Parameter0 specified at HKLM\Software\Microsoft\Windows NT\CurrentVersion\Virtualization\Trusted...
#Event ID 12505: Cannot find certificate matching the certificate hash code Parameter0 specified at HKLM\Software\Microsoft\Windows NT\CurrentVersion\Virtualization\TrustedIssuerCertificateHashes
#Description
Cannot find certificate matching the certificate hash code specified at HKLM\Software\Microsoft\Windows NT\CurrentVersion\Virtualization\TrustedIssuerCertificateHashes.
Fields #
| Name | Description |
|---|---|
ErrorMessage UnicodeString | |
ErrorCode UnicodeString | |
Parameter0 UnicodeString |
Event ID 12506: The administrator specified trusted issuer certificate with thumbprint Parameter0 cannot be used
#Event ID 12507: Cannot find registered CNG algorithm matching the algorithm id Parameter0 specified at HKLM\Software\Microsoft\Windows NT\CurrentVersion\Virtualization\All...
#Event ID 12507: Cannot find registered CNG algorithm matching the algorithm id Parameter0 specified at HKLM\Software\Microsoft\Windows NT\CurrentVersion\Virtualization\AllowedHashAlgorithms
#Description
Cannot find registered CNG algorithm matching the algorithm id specified at HKLM\Software\Microsoft\Windows NT\CurrentVersion\Virtualization\AllowedHashAlgorithms.
Fields #
| Name | Description |
|---|---|
ErrorMessage UnicodeString | |
ErrorCode UnicodeString | |
Parameter0 UnicodeString |
Event ID 12520: Auto-generating a self-signed certificate for server authentication
#Event ID 12521: Auto-generating a self-signed certificate for server authentication
#Event ID 12524: Could not create a self-signed certificate
#Event ID 12525: Could not create a self-signed certificate
#Event ID 12530: 'VmName' device Device could not allocate guest physical address space
#Event ID 12531: Device Device could not allocate guest physical address space
#Event ID 12540: 'VmName' device Device experienced a protocol error indicative of a deep system problem
#Event ID 12541: Device Device experienced a protocol error indicative of a deep system problem
#Event ID 12550: 'VmName' device Device found bad data on restoring
#Event ID 12551: Device Device found bad data on restoring
#Event ID 12616: Physical DVD drives are not supported on SCSI controllers
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12617: Physical DVD drives are not supported on SCSI controllers
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12618: DVD drives are not supported on SCSI controllers in Generation 1 virtual machines
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12619: DVD drives are not supported on SCSI controllers in Generation 1 virtual machines
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
String UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
Param1 UnicodeString | |
Param2 UnicodeString |
Event ID 12620: 'VmName': Could not get information for attachment 'String'
#Event ID 12621: Could not get information for attachment 'String'
#Event ID 12638: 'VmName': 'String' is an invalid pool id for this resource
#Event ID 12639: 'String' is an invalid pool id for this resource
#Event ID 12812: 'VmName': Enabling change tracking failed for the drive 'String'
#Event ID 18500: 'VmlEventLog.VmName' started successfully.
#Description
'VmlEventLog.VmName' started successfully. (Virtual machine ID VmlEventLog.VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 18500,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-11T06:31:57.936387+00:00",
"event_record_id": 6,
"correlation": {
"ActivityID": "164E10E5-B120-0006-8919-4E1620B1DC01"
},
"execution": {
"process_id": 9436,
"thread_id": 9460
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
"VmId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4"
}
},
"message": ""
}
Event ID 18500: 'VmlEventLog.VmName' started successfully
#Description
'VmName' started successfully. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 18500,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-04-17T20:05:37.4331128+00:00",
"event_record_id": 169,
"correlation": {
"ActivityID": "{5D13569F-CEA5-0007-305C-135DA5CEDC01}"
},
"execution": {
"process_id": 580,
"thread_id": 2892
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-2683995782-1224424216-1563295367-3526402197"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "9ffa8686-3b18-48fb-87fe-2d5d95a030d2",
"VmId": "9FFA8686-3B18-48FB-87FE-2D5D95A030D2"
}
},
"message": "'9ffa8686-3b18-48fb-87fe-2d5d95a030d2' started successfully. (Virtual machine ID 9FFA8686-3B18-48FB-87FE-2D5D95A030D2)"
}
Event ID 18502: 'VmlEventLog.VmName' was turned off.
#Description
'VmlEventLog.VmName' was turned off. (Virtual machine ID VmlEventLog.VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 18502,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-13T20:09:02.471009+00:00",
"event_record_id": 10,
"correlation": {
"ActivityID": "69ABE796-D54D-49FE-9F2F-16BC447BDC09"
},
"execution": {
"process_id": 9752,
"thread_id": 8468
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-754131803-1256623942-3691508397-1420384594"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "2cf3235b-8f46-4ae6-adf2-07dc5259a954",
"VmId": "2CF3235B-8F46-4AE6-ADF2-07DC5259A954"
}
},
"message": ""
}
Event ID 18502: 'VmlEventLog.VmName' was turned off
#Description
'VmName' was turned off. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 18502,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-04-17T20:06:16.9469381+00:00",
"event_record_id": 174,
"correlation": {
"ActivityID": "{9199839F-05CB-4C28-98EF-24EFDCE6EB91}"
},
"execution": {
"process_id": 580,
"thread_id": 2892
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-2683995782-1224424216-1563295367-3526402197"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "9ffa8686-3b18-48fb-87fe-2d5d95a030d2",
"VmId": "9FFA8686-3B18-48FB-87FE-2D5D95A030D2"
}
},
"message": "'9ffa8686-3b18-48fb-87fe-2d5d95a030d2' was turned off. (Virtual machine ID 9FFA8686-3B18-48FB-87FE-2D5D95A030D2)"
}
Event ID 18504: 'VmName' was shut down using the Shutdown Integration Component with parameters: Force = Force, Reason = 'Reason' (Virtual machine ID VmId)
#Event ID 18506: 'VmName' shut down was initiated using the Shutdown Integration Component (Virtual machine ID VmId)
#Event ID 18507: 'VmName' shut down was initiated using the Shutdown Integration Component (Virtual machine ID VmId)
#Event ID 18508: 'VmName' was shut down by the guest operating system
#Event ID 18510: 'VmlEventLog.VmName' saved successfully.
#Description
'VmlEventLog.VmName' saved successfully. (Virtual machine ID VmlEventLog.VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 18510,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-13T22:13:20.625644+00:00",
"event_record_id": 69,
"correlation": {
"ActivityID": "92EC003F-76BE-497F-B722-BC26BB65EBD2"
},
"execution": {
"process_id": 4568,
"thread_id": 4592
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-3384980156-1165660366-3794779786-1937668896"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "EventGenTestVM",
"VmId": "C9C2B2BC-90CE-457A-8ABE-2FE2207B7E73"
}
},
"message": ""
}
Event ID 18510: 'VmlEventLog.VmName' saved successfully
#Description
'VmName' saved successfully. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 18510,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-03-13T22:13:29.6870979+00:00",
"event_record_id": 81,
"correlation": {
"ActivityID": "{E5234140-02A2-416A-AD07-C007F5E12906}"
},
"execution": {
"process_id": 5276,
"thread_id": 2472
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-3384980156-1165660366-3794779786-1937668896"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "EventGenTestVM",
"VmId": "C9C2B2BC-90CE-457A-8ABE-2FE2207B7E73"
}
},
"message": "'EventGenTestVM' saved successfully. (Virtual machine ID C9C2B2BC-90CE-457A-8ABE-2FE2207B7E73)"
}
Event ID 18512: 'VmName' was reset
#Event ID 18514: 'VmName' was reset by the guest operating system
#Event ID 18515: 'VmName' was shut down for a reset initiated by the guest operating system
#Event ID 18516: 'VmlEventLog.VmName' was paused.
#Description
'VmlEventLog.VmName' was paused. (Virtual machine ID VmlEventLog.VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 18516,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-13T20:09:00.886590+00:00",
"event_record_id": 9,
"correlation": {
"ActivityID": "69ABE796-D54D-49FE-9F2F-16BC447BDC09"
},
"execution": {
"process_id": 9752,
"thread_id": 8468
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-754131803-1256623942-3691508397-1420384594"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "2cf3235b-8f46-4ae6-adf2-07dc5259a954",
"VmId": "2CF3235B-8F46-4AE6-ADF2-07DC5259A954"
}
},
"message": ""
}
Event ID 18516: 'VmlEventLog.VmName' was paused
#Description
'VmName' was paused. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 18516,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-04-17T20:06:21.8134336+00:00",
"event_record_id": 182,
"correlation": {
"ActivityID": "{429AF999-FC42-4764-9A30-62C19016EA5D}"
},
"execution": {
"process_id": 8996,
"thread_id": 9020
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-2996802696-1180546525-2945929097-3904707920"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "b29f9488-b5dd-465d-894f-97af501dbde8",
"VmId": "B29F9488-B5DD-465D-894F-97AF501DBDE8"
}
},
"message": "'b29f9488-b5dd-465d-894f-97af501dbde8' was paused. (Virtual machine ID B29F9488-B5DD-465D-894F-97AF501DBDE8)"
}
Event ID 18518: 'VmlEventLog.VmName' was resumed.
#Description
'VmlEventLog.VmName' was resumed. (Virtual machine ID VmlEventLog.VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 18518,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-13T22:13:40.863137+00:00",
"event_record_id": 92,
"correlation": {
"ActivityID": "3C57AE7D-D7C6-418F-A93E-7A6F08C5EE6B"
},
"execution": {
"process_id": 10232,
"thread_id": 3544
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-3384980156-1165660366-3794779786-1937668896"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "EventGenTestVM",
"VmId": "C9C2B2BC-90CE-457A-8ABE-2FE2207B7E73"
}
},
"message": ""
}
Event ID 18518: 'VmlEventLog.VmName' was resumed
#Description
'VmName' was resumed. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 18518,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-03-13T22:13:40.8631379+00:00",
"event_record_id": 92,
"correlation": {
"ActivityID": "{3C57AE7D-D7C6-418F-A93E-7A6F08C5EE6B}"
},
"execution": {
"process_id": 10232,
"thread_id": 3544
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-3384980156-1165660366-3794779786-1937668896"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "EventGenTestVM",
"VmId": "C9C2B2BC-90CE-457A-8ABE-2FE2207B7E73"
}
},
"message": "'EventGenTestVM' was resumed. (Virtual machine ID C9C2B2BC-90CE-457A-8ABE-2FE2207B7E73)"
}
Event ID 18524: 'VmName' was paused for critical error
#Event ID 18526: 'VmName' was resumed from critical error
#Event ID 18528: 'VmName' was turned off as it could not recover from a critical error
#Event ID 18539: 'VmName' was reset because the guest operating system requested an operation that is not supported by Hyper-V or an unrecoverable error occurred
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 18540: '.
#Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 |
Event ID 18540: 'VmName' was reset because the guest operating system requested an operation that is not supported by Hyper-V
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 |
Event ID 18550: '.
#Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 |
Event ID 18550: 'VmName' was reset because an unrecoverable error occurred while accessing a virtual processor register which caused a triple fault
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 |
Event ID 18560: 'VmName' was reset because an unrecoverable error occurred on a virtual processor that caused a triple fault
#Description
'VmName' was reset because an unrecoverable error occurred on a virtual processor that caused a triple fault. If the problem persists, contact Product Support. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 |
Event ID 18570: 'VmName' was faulted because the guest executed an intercepting instruction not supported by Hyper-V instruction emulation
#Description
'VmName' was faulted because the guest executed an intercepting instruction not supported by Hyper-V instruction emulation. If the problem persists, contact Product Support. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
FailureCategory UnicodeString | |
InstructionByteCount UInt8 | |
InstructionBytes Binary | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 | |
PendingInterruption HexInt64 |
Event ID 18571: '.
#Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
FailureCategory UnicodeString | |
InstructionByteCount UInt8 | |
InstructionBytes Binary | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 | |
PendingInterruption HexInt64 | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 18571: 'VmName' was faulted with general protection exception, due to insufficient memory on the host while emulating an instruction for this guest
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
FailureCategory UnicodeString | |
InstructionByteCount UInt8 | |
InstructionBytes Binary | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 | |
PendingInterruption HexInt64 | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 18572: '.
#Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
FailureCategory UnicodeString | |
InstructionByteCount UInt8 | |
InstructionBytes Binary | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 | |
PendingInterruption HexInt64 | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 18572: 'VmName' was faulted with general protection exception, due to unexpected error occurred on the host while emulating an instruction for this guest
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
FailureCategory UnicodeString | |
InstructionByteCount UInt8 | |
InstructionBytes Binary | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 | |
PendingInterruption HexInt64 | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 18573: 'VmName' was stopped because an intercept occurred while serving an interrupt request
#Description
'VmName' was stopped because an intercept occurred while serving an interrupt request. If the problem persists, contact Product Support. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
FailureCategory UnicodeString | |
InstructionByteCount UInt8 | |
InstructionBytes Binary | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 | |
PendingInterruption HexInt64 |
Event ID 18580: 'VmName' was powered off because a TLB page size mismatch error occurred on a virtual processor
#Description
'VmName' was powered off because a TLB page size mismatch error occurred on a virtual processor. If the problem persists, contact Product Support. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Rax HexInt64 | |
Rbx HexInt64 | |
Rcx HexInt64 | |
Rdx HexInt64 | |
Rsp HexInt64 | |
Rbp HexInt64 | |
Rsi HexInt64 | |
Rdi HexInt64 | |
R8 HexInt64 | |
R9 HexInt64 | |
R10 HexInt64 | |
R11 HexInt64 | |
R12 HexInt64 | |
R13 HexInt64 | |
R14 HexInt64 | |
R15 HexInt64 | |
Rip HexInt64 | |
Rflags HexInt64 | |
FpControlStatus Binary | |
XmmControlStatus Binary | |
Cr0 HexInt64 | |
Cr2 HexInt64 | |
Cr3 HexInt64 | |
Cr4 HexInt64 | |
Cr8 HexInt64 | |
Xfem HexInt64 | |
Dr0 HexInt64 | |
Dr1 HexInt64 | |
Dr2 HexInt64 | |
Dr3 HexInt64 | |
Dr6 HexInt64 | |
Dr7 HexInt64 | |
Es Binary | |
Cs Binary | |
Ss Binary | |
Ds Binary | |
Fs Binary | |
Gs Binary | |
Ldtr Binary | |
Tr Binary | |
Idtr Binary | |
Gdtr Binary | |
Tsc HexInt64 | |
ApicBase HexInt64 | |
SysenterCs HexInt64 | |
SysenterEip HexInt64 | |
SysenterEsp HexInt64 |
Event ID 18590: '.
#Event ID 18590: 'VmName' has encountered a fatal error
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
VmErrorCode0 HexInt64 | |
VmErrorCode1 HexInt64 | |
VmErrorCode2 HexInt64 | |
VmErrorCode3 HexInt64 | |
VmErrorCode4 HexInt64 | |
VmErrorMessage AnsiString | |
VmPreOSId UInt32 | |
VmHvOSId HexInt64 | |
VmVtl HexInt64 |
Event ID 18592: 'VmName' was fast-restored successfully
#Event ID 18594: 'VmName' fast-saved successfully
#Event ID 18596: 'VmlEventLog.VmName' was restored successfully.
#Description
'VmlEventLog.VmName' was restored successfully. (Virtual machine ID VmlEventLog.VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 18596,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-13T20:09:05.632402+00:00",
"event_record_id": 15,
"correlation": {
"ActivityID": "A5B814C5-B324-0002-DC27-B8A524B3DC01"
},
"execution": {
"process_id": 9800,
"thread_id": 6644
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-60294163-1090018550-3255637651-2390959015"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "03980413-5cf6-40f8-9316-0dc2a723838e",
"VmId": "03980413-5CF6-40F8-9316-0DC2A723838E"
}
},
"message": ""
}
Event ID 18596: 'VmlEventLog.VmName' was restored successfully
#Description
'VmName' was restored successfully. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 18596,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-04-17T20:06:21.1195821+00:00",
"event_record_id": 179,
"correlation": {
"ActivityID": "{5D13569F-CEA5-0006-4860-135DA5CEDC01}"
},
"execution": {
"process_id": 8996,
"thread_id": 9020
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-2996802696-1180546525-2945929097-3904707920"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "b29f9488-b5dd-465d-894f-97af501dbde8",
"VmId": "B29F9488-B5DD-465D-894F-97AF501DBDE8"
}
},
"message": "'b29f9488-b5dd-465d-894f-97af501dbde8' was restored successfully. (Virtual machine ID B29F9488-B5DD-465D-894F-97AF501DBDE8)"
}
Event ID 18598: 'VmName' has initiated a fast-save operation
#Event ID 18600: 'VmName' has initiated a fast-restore operation
#Event ID 18602: '.
#Event ID 18602: 'VmName' has encountered a fatal error and a memory dump has been generated
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
VmErrorCode HexInt32 |
Event ID 18604: 'VmName' has encountered a fatal error but a memory dump could not be generated
#Description
'VmName' has encountered a fatal error but a memory dump could not be generated. Error VmErrorCode. If the problem persists, contact Product Support for the guest operating system. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
VmErrorCode HexInt32 |
Event ID 18606: 'VmName' has encountered a fatal error and was saved to 'Parameter0' (Virtual machine ID VmId)
#Event ID 18608: 'VmName' was hibernated successfully
#Event ID 18609: 'VmlEventLog.VmName' properties were successfully initialized.
#Description
'VmlEventLog.VmName' properties were successfully initialized. (Virtual machine ID VmlEventLog.VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ProcessorFeatures UnicodeString | |
ProcessorXsaveFeatures HexInt64 | |
PartitionCreationFlags HexInt64 | |
NonArchitecturalCoreSharing UInt64 | |
ProcessorCLFlushSize UInt64 | |
ImplementedAddressBits UInt64 | |
PhysicalAddressWidth UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 18609,
"version": 1,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-11T06:31:56.948228+00:00",
"event_record_id": 1,
"correlation": {
"ActivityID": "F62799EA-9A4F-4751-BCB1-48EA758998A1"
},
"execution": {
"process_id": 9436,
"thread_id": 9464
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
"VmId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
"ProcessorFeatures": "0x405F87FE7F7859F, 0x800040",
"ProcessorXsaveFeatures": "0x1f",
"PartitionCreationFlags": "0x44140",
"NonArchitecturalCoreSharing": 2,
"ProcessorCLFlushSize": 8,
"ImplementedAddressBits": 46
}
},
"message": ""
}
Event ID 18609: 'VmlEventLog.VmName' properties were successfully initialized
#Description
'VmName' properties were successfully initialized. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmlEventLog.VmName UnicodeString | |
VmlEventLog.VmId UnicodeString | |
VmlEventLog.ProcessorFeatures UnicodeString | |
VmlEventLog.ProcessorXsaveFeatures HexInt64 | |
VmlEventLog.PartitionCreationFlags HexInt64 | |
VmlEventLog.NonArchitecturalCoreSharing UInt64 | |
VmlEventLog.ProcessorCLFlushSize UInt64 | |
VmlEventLog.ImplementedAddressBits UInt64 | |
VmName UnicodeString | |
VmId UnicodeString | |
ProcessorFeatures UnicodeString | |
ProcessorXsaveFeatures HexInt64 | |
PartitionCreationFlags HexInt64 | |
NonArchitecturalCoreSharing UInt64 | |
ProcessorCLFlushSize UInt64 | |
ImplementedAddressBits UInt64 | |
PhysicalAddressWidth UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "{51DDFA29-D5C8-4803-BE4B-2ECB715570FE}",
"event_source_name": "",
"event_id": 18609,
"version": 1,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": -9223372036854775808,
"time_created": "2026-04-17T20:06:18.9957860+00:00",
"event_record_id": 175,
"correlation": {
"ActivityID": "{429AF999-FC42-4764-9A30-62C19016EA5D}"
},
"execution": {
"process_id": 8996,
"thread_id": 9024
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "JD-WIN11-22H2-1.ludus.domain",
"security": {
"user_id": "S-1-5-83-1-2996802696-1180546525-2945929097-3904707920"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "b29f9488-b5dd-465d-894f-97af501dbde8",
"VmId": "B29F9488-B5DD-465D-894F-97AF501DBDE8",
"ProcessorFeatures": "0x1405F87FE7F7859F, 0x1000010000000",
"ProcessorXsaveFeatures": "0x1f",
"PartitionCreationFlags": "0x16b500",
"NonArchitecturalCoreSharing": "2",
"ProcessorCLFlushSize": "8",
"ImplementedAddressBits": "46"
}
},
"message": "'b29f9488-b5dd-465d-894f-97af501dbde8' properties were successfully initialized. (Virtual machine ID B29F9488-B5DD-465D-894F-97AF501DBDE8) \r\nGuest processor features: 0x1405F87FE7F7859F, 0x1000010000000\r\nGuest xsave features: 0x1F\r\nPartition creation flags: 0x16B500\r\nNon architectural core sharing: 2\r\nCache line flush size: 8\r\nAddress bit width: 46"
}
Event ID 18610: '.
#Event ID 18610: 'VmName' has encountered a fatal virtual firmware error
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
VmErrorCode0 UInt64 | |
VmErrorCode1 UInt64 | |
VmErrorCode2 UInt64 | |
VmErrorCode3 UInt64 | |
VmErrorCode4 UInt64 |
Event ID 18617: 'VmName' has encountered a watchdog timeout and was reset
#Event ID 19000: 'VmName' is suspended for performing a VM-PHU operation
#Event ID 19001: 'VmName' has completed resuming from a VM-PHU operation
#Event ID 20000: [Virtual machine VmId] TraceData.
#Event ID 20000: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 20001: [Virtual machine VmId] TraceData.
#Event ID 20001: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 20002: [Virtual machine VmId] TraceData.
#Event ID 20002: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 20003: [Virtual machine VmId] TraceData.
#Event ID 20003: [Virtual machine VmId]
#Description
[Virtual machine ].
Fields #
| Name | Description |
|---|---|
TraceData UnicodeString | |
VmName UnicodeString | |
VmId UnicodeString | |
StackFrameCount UInt32 | |
StackFrame Pointer | |
ModuleCount UInt32 | |
Module Int32 |
Event ID 21100: Live migration of 'VmName' did not succeed
#Event ID 21101: Live migration of 'VmName' did not succeed
#Event ID 21102: 'VmName' could not recover from migration failure
#Event ID 21103: 'VmName' could not recover from migration failure
#Event ID 21104: The migration was cancelled externally
#Event ID 21105: The migration was cancelled externally
#Event ID 21106: The migration was cancelled because of a virtual machine shutdown
#Event ID 21107: The migration was cancelled because of a virtual machine shutdown
#Event ID 21108: The migration was cancelled because of a virtual machine reset
#Event ID 21109: The migration was cancelled because of a virtual machine reset
#Event ID 21110: The virtual machine restore or shut down at migration destination failed: ErrorMessage (ErrorCode)
#Event ID 21111: The virtual machine restore at migration destination failed
#Fields #
| Name | Description |
|---|---|
ErrorMessage UnicodeString | |
ErrorCode UnicodeString |
Event ID 21112: The virtual machine recovery at migration source failed: ErrorMessage (ErrorCode)
#Event ID 21113: The virtual machine recovery at migration source failed
#Fields #
| Name | Description |
|---|---|
ErrorMessage UnicodeString | |
ErrorCode UnicodeString |
Event ID 21114: 'VmName' failed to open the destination virtual machine device share: ErrorCode (HResult)
#Event ID 21115: Failed to open the destination virtual machine device share
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 21116: The virtual machine 'VmName' can't start because virtualization-based security is not running on the host
#Event ID 21117: The virtual machine 'VmName' can't start because virtualization-based security is not running on the host
#Event ID 21118: The key protector for the virtual machine 'VmName' could not be unwrapped
#Description
The key protector for the virtual machine 'VmName' could not be unwrapped. Parameter0. Details are included in the HostGuardianService-Client event log. ErrorCode (HResult). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString |
Event ID 21119: The key protector could not be unwrapped
#Event ID 21120: The key protector assigned to 'VmName' can't decrypt the encrypted blob: ErrorCode (HResult)
#Event ID 21121: The key protector assigned to 'VmName' can't decrypt the encrypted blob
#Event ID 21122: The shielding setting for 'VmName' does not match the configured security policy
#Event ID 21123: The shielding setting does not match those allowed by the configured security policy
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 21124: A valid security policy is not present for virtual machine 'VmName'
#Event ID 21125: A valid security policy is not present for 'VmName'
#Event ID 21126: The Host Guardian Service client configuration for 'VmName' ErrorCode could not be retrieved
#Description
The Host Guardian Service client configuration for 'VmName' ErrorCode could not be retrieved. (HResult) . Parameter0. Details are included in the HostGuardianService-Client event log. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString |
Event ID 21127: The Host Guardian Service client configuration could not be retrieved
#Event ID 21128: Live migration has paused 'VmName' on the source
#Event ID 21130: Cancelled migration for 'VmName' due to blackout time threshold (ErrorCode ms) exceeded
#Event ID 21131: Cancelled migration due to blackout time threshold exceeded
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 21132: 'VmName' entered the blackout phase of the migration operation (Virtual machine ID VmId).
#Event ID 21133: 'VmName' exited the blackout phase of the migration operation, blackout duration Parameter0 seconds (Virtual machine ID VmId).
#Event ID 21134: 'VmName' exited the blackout phase after a failed migration operation, blackout duration Parameter0 seconds (Virtual machine ID VmId).
#Event ID 21300: Started live migration - source node
#Event ID 21301: Completed live migration - source node, time Time s
#Event ID 21302: Started live migration Setup phase - source node.
#Event ID 21303: Completed live migration Setup phase - source node, time Time s.
#Event ID 21305: Finished disabling device optimizations, time Time s
#Event ID 21306: Started saving preflight information.
#Event ID 21307: Finished saving preflight information, time Time s.
#Event ID 21309: Setup completed on target (preflight state size Parameter0 KByte), time Time s
#Event ID 21310: Started live migration Memory Transfer phase for VM 'Parameter5' - source node.
#Description
Started live migration Memory Transfer phase for VM 'Parameter5' - source node (RAM size Parameter0 MB, used Parameter1 MB, target blackout time Parameter2, target number of transfer passes Parameter3, cancel memory time threshold Parameter4).
Message #
Fields #
| Name | Description |
|---|---|
VmId UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString | |
Parameter3 UnicodeString | |
Parameter4 UnicodeString | |
Parameter5 UnicodeString |
Event ID 21311: Completed live migration Memory Transfer phase for VM 'Parameter0' - source node, time Time s.
#Event ID 21312: Started memory transfer pass #Parameter2 for VM 'Parameter5' with CPU Capping of Parameter0, Target Black Out Memory Page Count of Parameter1, Cancel Memory Page Threshold of Parameter3.
#Event ID 21313: Finished memory transfer pass for VM 'Parameter3' (pass #Parameter0, sent Parameter1 pages, with Parameter2 dirty pages, memory target reached Parameter4, devices ready for blackout Parameter5), ...
#Description
Finished memory transfer pass for VM 'Parameter3' (pass #Parameter0, sent Parameter1 pages, with Parameter2 dirty pages, memory target reached Parameter4, devices ready for blackout Parameter5), time Time s.
Message #
Fields #
| Name | Description |
|---|---|
VmId UnicodeString | |
Time UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString | |
Parameter3 UnicodeString | |
Parameter4 UnicodeString | |
Parameter5 UnicodeString |
Event ID 21314: Started live migration virtual machine Move phase - source node (VM 'Parameter0').
#Event ID 21315: Completed live migration VM Move phase - source node, time Time s (VM 'Parameter0').
#Event ID 21316: Started pausing VM 'Parameter0' on source.
#Event ID 21317: Finished pausing VM 'Parameter0' on source, time Time s.
#Event ID 21318: Started saving virtual machine state for VM 'Parameter0' on source.
#Event ID 21319: Finished saving virtual machine state for VM 'Parameter0' on source, time Time s.
#Event ID 21320: Started powering off devices for VM 'Parameter0' on source.
#Event ID 21321: Finished powering off devices for VM 'Parameter0' on source, time Time s.
#Event ID 21322: Started final memory transfer pass for VM 'Parameter0' (Virtual Machine ID VmId).
#Event ID 21323: Finished final memory transfer pass for VM 'Parameter2' (sent Parameter0 pages, target Parameter1 pages), time Time s (Virtual Machine ID VmId).
#Event ID 21324: Started transferring virtual machine state for VM 'Parameter0'.
#Event ID 21325: Finished transferring virtual machine state for VM 'Parameter1' (Parameter0 KByte), time Time s.
#Event ID 21327: Finished verifying checksums, time Time s
#Event ID 21328: Started waiting for virtual machine restore on target
#Fields #
| Name | Description |
|---|---|
VmId UnicodeString |
Event ID 21329: Restore on target completed, time Time s
#Event ID 21331: Finished notifying devices of imminent blackout, time Time s
#Event ID 21350: Started live migration - target node
#Event ID 21351: Completed live migration - target node, time Time s
#Event ID 21352: Started live migration Setup phase - target node
#Fields #
| Name | Description |
|---|---|
VmId UnicodeString |
Event ID 21353: Completed live migration Setup phase - target node, time Time s
#Event ID 21354: Started receiving preflight state.
#Event ID 21355: Finished receiving preflight state, time Time s.
#Event ID 21357: Finished creating guest memory, time Time s
#Event ID 21359: Finished reserving device resources, time Time s
#Event ID 21360: Started live migration Memory Transfer phase - target node
#Fields #
| Name | Description |
|---|---|
VmId UnicodeString |
Event ID 21361: Completed live migration Memory Transfer phase - target node, time Time s
#Event ID 21362: Started live migration virtual machine Move phase - target node
#Fields #
| Name | Description |
|---|---|
VmId UnicodeString |
Event ID 21363: Completed live migration virtual machine Move phase - target node, time Time s
#Event ID 21365: Finished receiving device state, time Time s
#Event ID 21367: Finished verifying checksums, time Time s
#Event ID 21368: Started waiting for virtual machine ownership
#Fields #
| Name | Description |
|---|---|
VmId UnicodeString |
Event ID 21369: Got virtual machine ownership, time Time s
#Event ID 21371: Finished preparing VM for restore, time Time s
#Event ID 21372: Started restoring VMB for VM 'Parameter0' on destination.
#Event ID 21373: Finished restoring VMB for VM 'Parameter0' on destination, time Time s.
#Event ID 21374: Started restoring partition for VM 'Parameter0' on destination.
#Event ID 21375: Finished restoring partition for VM 'Parameter0' on destination, time Time s.
#Event ID 21376: Started resuming VM 'Parameter0' on destination.
#Event ID 21377: Finished resuming VM 'Parameter0' on destination, time Time s.
#Event ID 21379: Finished restoring metrics, time Time s
#Event ID 21380: Started restoring VMB for VM 'Parameter0' on source.
#Event ID 21381: Finished restoring VMB for VM 'Parameter0' on source, time Time s.
#Event ID 21382: Started resuming VM 'Parameter0' on source.
#Event ID 21383: Finished resuming VM 'Parameter0' on source, time Time s.
#Event ID 21384: VM 'Parameter0' has been placed in the Migrating-Suspended state on source.
#Event ID 21386: Waiting for final state transition for VM 'Parameter0'.
#Event ID 21387: Received final state transition of Parameter1 for VM 'Parameter0', time Time s.
#Event ID 21388: VM 'Parameter0' has fully recovered on the source host.
#Event ID 21389: Migration received notification of cancellation by the user for VM 'Parameter0'.
#Event ID 21390: Migration cancelled for VM 'Parameter0' because the dirty page count (Parameter1) exceeded the blackout threshold (Parameter2).
#Event ID 21391: Migration is handling an error for the migration of VM 'Parameter0'.
#Event ID 21399: Time drift between the nodes is Parameter0 for migration of VM 'Parameter1'.
#Event ID 21400: Started restoring worker process for VM 'Parameter0' on destination.
#Event ID 21401: Finished restoring worker process for VM 'Parameter0' on destination, time Time s.
#Event ID 21402: Started flushing persistent memory for VM 'Parameter0' on destination.
#Event ID 21403: Finished flushing persistent memory for VM 'Parameter0' on destination, time Time s.
#Event ID 21404: Started flushing persistent memory range Parameter1 for VM 'Parameter0' on destination.
#Event ID 21405: Finished flushing persistent memory range Parameter1 for VM 'Parameter0' on destination, time Time s.
#Event ID 21407: Finished waiting for persistent memory flush to finish for VM 'Parameter0' on destination, time Time s.
#Event ID 21408: Started saving VSM state for VM 'Parameter0' on source.
#Event ID 21409: Finished saving VSM state for VM 'Parameter0' on source, time Time s.
#Event ID 21410: Started saving VDevs for VM 'Parameter0' on source.
#Event ID 21411: Finished saving VDevs for VM 'Parameter0' on source, time Time s.
#Event ID 21412: Started saving the partition for VM 'Parameter0' on source.
#Event ID 21413: Finished saving the partition for VM 'Parameter0' on source, time Time s.
#Event ID 21414: Started saving metrics for VM 'Parameter0' on source.
#Event ID 21415: Finished saving metrics for VM 'Parameter0' on source, time Time s.
#Event ID 21416: Started saving runtime state changes for VM 'Parameter0' on source.
#Event ID 21417: Finished saving runtime state changes for VM 'Parameter0' on source, time Time s.
#Event ID 21418: Started reloading the configuration for restoring VM 'Parameter0' on source.
#Event ID 21419: Finished reloading the configuration for restoring VM 'Parameter0' on source, time Time s.
#Event ID 21420: Started reloading the runtime state for restoring VM 'Parameter0' on source.
#Event ID 21421: Finished reloading the runtime state for restoring VM 'Parameter0' on source, time Time s.
#Event ID 21422: Started restoring VSM state for VM 'Parameter0' on destination.
#Event ID 21423: Finished restoring VSM state for VM 'Parameter0' on destination, time Time s.
#Event ID 21424: Started restoring runtime state changes for VM 'Parameter0' on destination.
#Event ID 21425: Finished restoring runtime state changes for VM 'Parameter0' on destination, time Time s.
#Event ID 22038: Failed to send data for a Virtual Machine migration: ErrorMessage (ErrorCode)
#Event ID 22039: Failed to send data: ErrorMessage (ErrorCode)
#Event ID 22040: Failed to receive data for a Virtual Machine migration: ErrorMessage (ErrorCode)
#Event ID 22041: Failed to receive data: ErrorMessage (ErrorCode)
#Event ID 22042: Received invalid or corrupted data for a Virtual Machine migration
#Event ID 22043: Received invalid or corrupted data
#Event ID 23012: The virtual machine VmName cannot load device Device because there are no mutually supported protocol versions
#Description
The virtual machine VmName cannot load device Device because there are no mutually supported protocol versions. The server version is ServerVersion and the client version is ClientVersion (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Device UnicodeString | |
ServerVersion UnicodeString | |
ClientVersion UnicodeString |
Event ID 23013: The device Device cannot be loaded because there are no mutually support protocol versions between the server and client
#Event ID 23100: Started powering on device 'Parameter0'
#Event ID 23101: Finished powering on device 'Parameter0', time Time s
#Event ID 23102: Started restoring device 'Parameter0'
#Event ID 23103: Finished restoring device 'Parameter0', time Time s
#Event ID 23104: Started powering off device 'Parameter0'
#Event ID 23105: Finished powering off device 'Parameter0', time Time s
#Event ID 23106: Started saving device 'Parameter0'
#Event ID 23107: Finished saving device 'Parameter0', time Time s
#Event ID 23108: Started pausing device 'Parameter0'
#Event ID 23109: Finished pausing device 'Parameter0', time Time s
#Event ID 23110: Started resuming device 'Parameter0'
#Event ID 23111: Finished resuming device 'Parameter0', time Time s
#Event ID 23112: Began start reserving resources for device 'Parameter0'
#Event ID 23113: Completed start reserving resources for device 'Parameter0', time Time s
#Event ID 23114: Began finish reserving resources for device 'Parameter0'
#Event ID 23115: Completed finish reserving resources for device 'Parameter0', time Time s
#Event ID 23116: Started freeing reserved resources for device 'Parameter0'
#Event ID 23117: Finished freeing reserved resources for device 'Parameter0', time Time s
#Event ID 23118: Started saving reserved resources for device 'Parameter0'
#Event ID 23119: Finished saving reserved resources for device 'Parameter0', time Time s
#Event ID 23120: Started enabling optimizations for device 'Parameter0'
#Event ID 23121: Finished enabling optimizations for device 'Parameter0', time Time s
#Event ID 23123: Completed start disable optimizations for device 'Parameter0', time Time s
#Event ID 23124: Began finish disable optimizations for device 'Parameter0'
#Event ID 23125: Completed finish disable optimizations for device 'Parameter0', time Time s
#Event ID 23126: Started teardown for device 'Parameter0'
#Event ID 23127: Finished teardown for device 'Parameter0', time Time s
#Event ID 23128: Started save compatibility info for device 'Parameter0'
#Event ID 23129: Finished save compatibility info for device 'Parameter0', time Time s
#Event ID 23130: Started reconnect to resource pools for device 'Parameter0'
#Event ID 23131: Finished reconnect to resource pools for device 'Parameter0', time Time s
#Event ID 23132: Started notify migration progress (code Parameter2) for device 'Parameter0'
#Event ID 23133: Finished notify migration progress (code Parameter2) for device 'Parameter0', time Time s
#Event ID 23134: Started query migration status for device 'Parameter0'
#Event ID 23135: Finished query migration status for device 'Parameter0', time Time s
#Event ID 23136: Started post reset for device 'Parameter0'
#Event ID 23137: Finished post reset for device 'Parameter0', time Time s
#Event ID 23138: Started reset for device 'Parameter0'
#Event ID 23139: Finished reset for device 'Parameter0', time Time s
#Event ID 23140: Started begin component servicing for device 'Parameter0'
#Event ID 23141: Finished begin component servicing for device 'Parameter0', time Time s
#Event ID 23142: Started complete component servicing for device 'Parameter0'
#Event ID 23143: Finished complete component servicing for device 'Parameter0', time Time s
#Event ID 23144: Started prepare for migration brownout transfer for device 'Parameter0'
#Event ID 23145: Finished prepare for migration brownout transfer for device 'Parameter0', time Time s
#Event ID 23146: Started to query servicing participation for device 'Parameter0'
#Event ID 23147: Finished query servicing participation for device 'Parameter0', time Time s
#Event ID 23148: Began finalize disable optimizations for device 'Parameter0'
#Event ID 23149: Completed finalize disable optimizations for device 'Parameter0', time Time s
#Event ID 24000: The virtual machine 'VmName' is not compatible with physical computer 'Parameter0'
#Event ID 24001: The virtual machine 'VmName' is not compatible with physical computer 'Parameter0'
#Event ID 24002: The virtual machine 'VmName' is currently using an Parameter1 processor, but physical computer 'Parameter0' has an Parameter2 processor
#Event ID 24003: The virtual machine is currently using an Parameter1 processor, but physical computer 'Parameter0' has an Parameter2 processor
#Event ID 24004: The virtual machine 'VmName' is using processor-specific features not supported on physical computer 'Parameter0'
#Event ID 24005: The virtual machine is using processor-specific features not supported on physical computer 'Parameter0'
#Event ID 24006: The version of virtual machine 'VmName' is not compatible with physical computer 'Parameter0'
#Event ID 24007: The version of the virtual machine is not compatible with physical computer 'Parameter0'
#Event ID 24008: The virtual machine 'VmName' is using processor-specific features (MissingFeatures) not supported on physical computer 'HostName'
#Event ID 24009: The virtual machine 'VmName' is using processor-specific xsave features (Parameter0) not supported on physical computer 'HostName'
#Event ID 24010: The virtual machine 'VmName' requires cache line flush size Parameter0 bytes which is greater than Parameter1 bytes supported on physical computer 'HostName'
#Event ID 24011: The virtual machine 'VmName' requires maximum physical address width size Parameter0 bits which is greater than Parameter1 bits supported on physical computer 'HostName'
#Event ID 24012: Virtual machine VmName (ID: VmId) uses Key Storage Drive which might be removed in a future release of Hyper-V
#Event ID 24013: The virtual machine 'VmName' does not use non architectural core sharing (Parameter0) while the physical computer does (Parameter1) 'HostName'
#Event ID 24014: The custom CPU brand string provided for virtual machine VmName (ID: VmId) was invalid and was not applied
#Event ID 24015: The frequency cap (Parameter1) applied to virtual machine VmName (ID: VmId) was unable to be applied with error code Parameter0.
#Event ID 24015: The frequency cap (Parameter1) applied to virtual machine VmName (ID: VmId) was unable to be applied with error code
#Description
The frequency cap () applied to virtual machine (ID: ) was unable to be applied with error code .
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 24016: The processor compatibility settings are invalid: 'Parameter0'
#Event ID 24018: The virtual machine 'VmName' requires physical address width size Parameter0 bits which is greater than Parameter1 bits supported on physical computer 'HostName'
#Event ID 24020: The throttle priority (Parameter2) applied to virtual machine VmName (ID: VmId) was unable to be applied: Parameter0 (Parameter1)
#Event ID 26001: Finished guest memory saving, time Time s
#Event ID 26003: Finished guest memory restoring, time Time s
#Event ID 26004: Started guest memory saving for checkpoint
#Fields #
| Name | Description |
|---|---|
VmId UnicodeString |
Event ID 26005: Finished guest memory saving for checkpoint, time Time s
#Event ID 27000: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to save metrics with error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to save metrics with error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 27001: DeviceName (Instance ID DeviceInstanceId): Failed to save metrics with error 'ErrorCodeString'
#Event ID 27002: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to restore metrics with error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to restore metrics with error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 27003: DeviceName (Instance ID DeviceInstanceId): Failed to restore metrics with error 'ErrorCodeString'
#Event ID 27004: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to enumerate all of its metrics with error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to enumerate all of its metrics with error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 27005: DeviceName (Instance ID DeviceInstanceId): Failed to enumerate all of its metrics with error 'ErrorCodeString'
#Event ID 27006: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to reset one or more of its metrics with error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to reset one or more of its metrics with error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 27007: DeviceName (Instance ID DeviceInstanceId): Failed to reset one or more of its metrics with error 'ErrorCodeString'
#Event ID 27008: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to enable one or more of its metrics with error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to enable one or more of its metrics with error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 27009: DeviceName (Instance ID DeviceInstanceId): Failed to enable one or more of its metrics with error 'ErrorCodeString'
#Event ID 27010: 'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to disable one or more of its metrics with error 'ErrorCodeString' (ErrorCode)
#Description
'VmName' DeviceName (Instance ID DeviceInstanceId): Failed to disable one or more of its metrics with error 'ErrorCodeString' (ErrorCode). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
DeviceName UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
DeviceInstanceId UnicodeString | |
Param1 UnicodeString |
Event ID 27011: DeviceName (Instance ID DeviceInstanceId): Failed to disable one or more of its metrics with error 'ErrorCodeString'
#Event ID 27012: The periodic save of metrics information for 'VmName' failed with error 'ErrorCodeString' (ErrorCode)
#Description
The periodic save of metrics information for 'VmName' failed with error 'ErrorCodeString' (ErrorCode). If the virtual machine were to suddenly stop it would not have the latest metrics information. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 27013: The periodic save of metrics information failed
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 27014: While resetting or stopping 'VmName' failed to save metrics with error 'ErrorCodeString' (ErrorCode)
#Description
While resetting or stopping 'VmName' failed to save metrics with error 'ErrorCodeString' (ErrorCode). Metrics information since the last periodic save may be lost. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString |
Event ID 27015: While resetting or stopping 'VmName' failed to save metrics with error 'ErrorCodeString' (ErrorCode)
#Event ID 27016: 'VmName' could not determine the host CPU speed
#Event ID 27017: Could not determine the host CPU speed
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString |
Event ID 28000: Failed to write metrics information to the configuration: ErrorMessage (ErrorCode)
#Event ID 28001: Failed to write metrics information to the configuration
#Fields #
| Name | Description |
|---|---|
ErrorMessage UnicodeString | |
ErrorCode UnicodeString |
Event ID 28002: Failed to write metrics information to the configuration for one or more metric value: ErrorMessage (ErrorCode)
#Event ID 28003: Failed to write metrics information to the configuration for one or more values
#Fields #
| Name | Description |
|---|---|
ErrorMessage UnicodeString | |
ErrorCode UnicodeString |
Event ID 28004: Failed to read metrics information from the configuration for one or more metric values: ErrorMessage (ErrorCode)
#Event ID 28005: Failed to read metrics information from the configuration for one or more values
#Fields #
| Name | Description |
|---|---|
ErrorMessage UnicodeString | |
ErrorCode UnicodeString |
Event ID 33010: Could not find an Ethernet connection resource pool with ID 'Parameter0'
#Event ID 33011: An intercept for 'VmName' was delayed because the VM exceeded its maximum intercept limit
#Event ID 33012: Could not find a PCI Express device resource pool with ID 'Parameter0'
#Event ID 33013: Could not find the PCI Express device resource pool
#Event ID 33014: VMId: MM Section Backed GPA Range Created Index GpaPageIndex PageCount PageCount Handle GpaRangeHandle.
#Event ID 33015: VMId: MM Section Backed GPA Range Destroyed GPA Handle GpaRangeHandle.
#Event ID 33100: 'VmlEventLog.VmName': Virtual machine successfully negotiated Virtual PCI protocol version VmlEventLog.Parameter1 on 'VmlEventLog.Parameter0'.
#Description
'VmlEventLog.VmName': Virtual machine successfully negotiated Virtual PCI protocol version VmlEventLog.Parameter1 on 'VmlEventLog.Parameter0'. (Virtual machine ID VmlEventLog.VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 33100,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-11T06:32:03.036742+00:00",
"event_record_id": 14,
"correlation": {
"ActivityID": "4AD22A0C-3750-4783-AE6C-7B435D941594"
},
"execution": {
"process_id": 9436,
"thread_id": 10020
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
"VmId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
"ErrorCode": "%%0",
"HResult": "0x00000000",
"Parameter0": "Channel {11067404-78C9-4288-A368-768A4E810BD4} [VTL0]",
"Parameter1": "0x10004"
}
},
"message": ""
}
Event ID 33100: 'VmName': Virtual machine successfully negotiated Virtual PCI protocol version Parameter1 on 'Parameter0'
#Description
'VmName': Virtual machine successfully negotiated Virtual PCI protocol version Parameter1 on 'Parameter0'. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 33101: 'VmName': Virtual machine requested unsupported Virtual PCI protocol version Parameter1 on 'Parameter0'
#Description
'VmName': Virtual machine requested unsupported Virtual PCI protocol version Parameter1 on 'Parameter0'. Error: 'ErrorCode' (HResult). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 33102: 'VmName': An unexpected transport error occurred on the virtual PCI bus: Parameter0.
#Event ID 33102: 'VmName': An unexpected transport error occurred on the virtual PCI bus:
#Description
'VmName': An unexpected transport error occurred on the virtual PCI bus: Parameter0. Error: 'ErrorCode' (HResult). (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString |
Event ID 33103: 'VmlEventLog.VmName': A virtual PCI device was successfully offered to the virtual machine: 'VmlEventLog.Parameter0'.
#Description
'VmlEventLog.VmName': A virtual PCI device was successfully offered to the virtual machine: 'VmlEventLog.Parameter0'. PnpID = 'VmlEventLog.Parameter1', FunctionType = VmlEventLog.Parameter2. (Virtual machine ID VmlEventLog.VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 33103,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-11T06:32:03.035040+00:00",
"event_record_id": 13,
"correlation": {
"ActivityID": "4AD22A0C-3750-4783-AE6C-7B435D941594"
},
"execution": {
"process_id": 9436,
"thread_id": 10020
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
"VmId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
"ErrorCode": "%%0",
"HResult": "0x00000000",
"Parameter0": "Bus {11067404-78C9-4288-A368-768A4E810BD4} Slot 0",
"Parameter1": "PCI\\VEN_1AF4&DEV_105A&SUBSYS_00401AF4&REV_01",
"Parameter2": "FlexIO"
}
},
"message": ""
}
Event ID 33103: 'VmName': A virtual PCI device was successfully offered to the virtual machine: 'Parameter0'
#Description
'VmName': A virtual PCI device was successfully offered to the virtual machine: 'Parameter0'. PnpID = 'Parameter1', FunctionType = Parameter2. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString |
Event ID 33104: 'VmName': A virtual PCI device was successfully revoked from the virtual machine: 'Parameter0'
#Event ID 33105: 'VmName': Hardware resources have been successfully assigned to a virtual PCI device: 'Parameter0'
#Description
'VmName': Hardware resources have been successfully assigned to a virtual PCI device: 'Parameter0'. Physical device LUID = Parameter1, Virtual function LUID = Parameter2. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString |
Event ID 33106: 'VmName': Hardware resources have been removed from a virtual PCI device: 'Parameter0'
#Description
'VmName': Hardware resources have been removed from a virtual PCI device: 'Parameter0'. Physical device LUID = Parameter1, Virtual function LUID = Parameter2. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString | |
Parameter2 UnicodeString |
Event ID 33107: 'VmlEventLog.VmName': The guest operating system powered on a virtual PCI device: 'VmlEventLog.Parameter0'.
#Description
'VmlEventLog.VmName': The guest operating system powered on a virtual PCI device: 'VmlEventLog.Parameter0'. (Virtual machine ID VmlEventLog.VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Hyper-V-Worker",
"guid": "51DDFA29-D5C8-4803-BE4B-2ECB715570FE",
"event_source_name": "",
"event_id": 33107,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 9223372036854775808,
"time_created": "2026-03-11T06:32:03.187256+00:00",
"event_record_id": 15,
"correlation": {},
"execution": {
"process_id": 9436,
"thread_id": 9592
},
"channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
"computer": "LAB-WIN11",
"security": {
"user_id": "S-1-5-83-1-698845485-1245677379-4261864325-3027728797"
}
},
"user_data": {
"VmlEventLog": {
"VmName": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
"VmId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
"ErrorCode": "%%0",
"HResult": "0x00000000",
"Parameter0": "Bus {11067404-78C9-4288-A368-768A4E810BD4} Slot 0"
}
},
"message": ""
}
Event ID 33107: 'VmName': The guest operating system powered on a virtual PCI device: 'Parameter0'
#Description
'VmName': The guest operating system powered on a virtual PCI device: 'Parameter0'. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString |
Event ID 33108: 'VmName': The guest operating system powered off a virtual PCI device: 'Parameter0'
#Event ID 33109: 'VmName': A critical error occurred on virtual PCI device 'Parameter0'
#Description
'VmName': A critical error occurred on virtual PCI device 'Parameter0'. Reason = Parameter1. The device has been ejected from the virtual machine. Error: 'ErrorCode' (HResult). (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 33110: 'VmName': Virtual PCI device 'Parameter0' is affinitized to virtual NUMA node Parameter1.
#Event ID 33110: 'VmName': Virtual PCI device 'Parameter0' is affinitized to virtual NUMA node
#Description
'VmName': Virtual PCI device 'Parameter0' is affinitized to virtual NUMA node Parameter1. (Virtual machine ID VmId).
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString | |
Parameter1 UnicodeString |
Event ID 33111: 'VmName': Initiating virtual PCI device reset (full): 'Parameter0'
#Event ID 33112: 'VmName': Initiating virtual PCI device reset (soft): 'Parameter0'
#Event ID 33113: '.
#Event ID 33113: 'VmName': A critical error occurred on a virtual PCI device due to an error reported by the underlying physical hardware: 'ErrorCode&apos
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString |
Event ID 33114: '.
#Event ID 33114: 'VmName': A critical error occurred on a virtual PCI device due to an error reported by the underlying software stack: 'ErrorCode&apos
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString | |
Parameter0 UnicodeString |
Event ID 33200: 'VmName' has encountered a fatal error caused by device 'Parameter0'
#Event ID 33210: 'VmName': error 'ErrorCodeString' (ErrorCode) from emulator when invoking API 'ApiCall'
#Description
'VmName': error 'ErrorCodeString' (ErrorCode) from emulator when invoking API 'ApiCall'. Please follow up with the emulator owner. Emulator ID 'EmulatorId' ('EmulatorName'), device path 'DevicePath'. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
EmulatorId GUID | |
EmulatorName UnicodeString | |
ApiCall AnsiString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
InstanceId GUID | |
DevicePath UnicodeString | |
DeviceLuid UnicodeString | |
VfLuid UnicodeString | |
HwProviderId GUID |
Event ID 33211: A call into the emulator 'EmulatorName' failed
#Description
A call into the emulator 'EmulatorName' failed. Please follow up with the emulator owner.
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
EmulatorId GUID | |
EmulatorName UnicodeString | |
ApiCall AnsiString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
InstanceId GUID | |
DevicePath UnicodeString | |
DeviceLuid UnicodeString | |
VfLuid UnicodeString | |
HwProviderId GUID |
Event ID 33212: 'VmName': 'ErrorCodeString' (ErrorCode) from hardware provider when invoking API 'ApiCall'
#Description
'VmName': 'ErrorCodeString' (ErrorCode) from hardware provider when invoking API 'ApiCall'. Please follow up with the emulator owner. Emulator ID 'EmulatorId' ('EmulatorName'), hardware provider ID 'HwProviderId'. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
EmulatorId GUID | |
EmulatorName UnicodeString | |
ApiCall AnsiString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
InstanceId GUID | |
DevicePath UnicodeString | |
DeviceLuid UnicodeString | |
VfLuid UnicodeString | |
HwProviderId GUID |
Event ID 33213: Hardware provider 'HwProviderId' failed for emulator ID 'EmulatorId' ('EmulatorName')
#Description
Hardware provider 'HwProviderId' failed for emulator ID 'EmulatorId' ('EmulatorName'). Please follow up with the emulator owner.
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
EmulatorId GUID | |
EmulatorName UnicodeString | |
ApiCall AnsiString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
InstanceId GUID | |
DevicePath UnicodeString | |
DeviceLuid UnicodeString | |
VfLuid UnicodeString | |
HwProviderId GUID |
Event ID 33214: 'VmName': Management VTL failed to bind to virtual PCI device 'InstanceId' for emulator ID 'EmulatorId' ('EmulatorName'), the virtual machine may encounter IO errors
#Description
'VmName': Management VTL failed to bind to virtual PCI device 'InstanceId' for emulator ID 'EmulatorId' ('EmulatorName'), the virtual machine may encounter IO errors. (Virtual machine ID VmId).
Message #
Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
EmulatorId GUID | |
EmulatorName UnicodeString | |
ApiCall AnsiString | |
ErrorCodeString UnicodeString | |
ErrorCode UnicodeString | |
InstanceId GUID | |
DevicePath UnicodeString | |
DeviceLuid UnicodeString | |
VfLuid UnicodeString | |
HwProviderId GUID |
Event ID 40012: Memory weight above maximum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40014: Memory virtual quantity above maximum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40016: Memory virtual quantity below minimum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40018: Memory virtual quantity not properly aligned
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40020: Memory virtual quantity above limit
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40022: Memory virtual quantity below reservation
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40024: Memory limit above maximum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40026: Memory limit below minimum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40028: Memory limit not properly aligned
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40030: Memory reservation above maximum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40032: Memory reservation below minimum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40034: Memory reservation not properly aligned
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40036: Memory target memory buffer above maximum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40038: Memory target memory buffer below minimum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40048: Invalid memory alignment
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40050: The version of the virtual machine is not compatible with the alignment
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40052: Memory weight is below minimum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40054: The version or generation of the virtual machine is not compatible with SGX
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40056: SGX launch control mode is invalid
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40058: Default SGX launch control MSR string is invalid
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40060: Memory per virtual NUMA node is above maximum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40062: Memory per virtual NUMA node is below minimum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40064: Memory per virtual NUMA node is not properly aligned
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40066: SGX memory is above maximum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Event ID 40068: SGX memory is below minimum
#Fields #
| Name | Description |
|---|---|
VmName UnicodeString | |
VmId UnicodeString | |
ErrorCode UnicodeString | |
HResult UnicodeString |
Provenance
ETW provider GUID 51ddfa29-d5c8-4803-be4b-2ecb715570fe
Defined in vmwpevents.dll, which carries the event manifest.
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB