Microsoft-Windows-IIS-W3SVC
Event ID 1001: Not used
#Event ID 1002: Not used
#Event ID 1003: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site
#Fields #
| Name | Description |
|---|---|
UrlPrefix UnicodeString | |
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1004: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site
#Fields #
| Name | Description |
|---|---|
UrlPrefix UnicodeString | |
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1005: The World Wide Web Publishing Service (WWW Service) is stopping because it encountered an error
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1006: Not used
#Event ID 1007: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site
#Fields #
| Name | Description |
|---|---|
UrlPrefix UnicodeString | |
SiteID UnicodeString | |
__binLength | |
binary |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-IIS-W3SVC",
"guid": "{05448E22-93DE-4A7A-BBA5-92E27486A8BE}",
"event_source_name": "W3SVC",
"event_id": 1007,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2022-04-04T14:08:17.969392+00:00",
"event_record_id": 1849,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "System",
"computer": "WIN-TKC15D7KHUR",
"security": {
"user_id": ""
}
},
"event_data": {
"UrlPrefix": "http://*:80/",
"SiteID": "2",
"Binary": "B7000780"
},
"message": ""
}
Example keys not documented in the fields table: Binary
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 1008: Not used
#Event ID 1009: Not used
#Event ID 1010: Not used
#Event ID 1011: Not used
#Event ID 1012: Not used
#Event ID 1013: Not used
#Event ID 1014: Not used
#Event ID 1015: Not used
#Event ID 1016: The World Wide Web Publishing Service (WWW Service) did not configure logging for site
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1017: Not used
#Event ID 1018: The World Wide Web Publishing Service was not able to initialize performance counters
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1019: The World Wide Web Publishing Service (WWW Service) failed to intialize performance counters properly
#Event ID 1020: The World Wide Web Publishing Service (WWW Service) failed to configure the HTTP
#Fields #
| Name | Description |
|---|---|
HttpSysControlChannelProperty UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1021: Not used
#Event ID 1022: Not used
#Event ID 1023: Not Used
#Event ID 1024: Not used
#Event ID 1025: Not used
#Event ID 1026: The World Wide Web Publishing Service (WWW Service) encountered an error when it tried to secure the handle of application pool AppPoolID from HTTP
#Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1027: Application pool AppPoolID has been disabled
#Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1028: Not used
#Event ID 1029: The World Wide Web Publishing Service (WWW Service) did not configure bindings for an application in site
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1030: Not used
#Event ID 1031: Not Used
#Event ID 1032: The World Wide Web Publishing Service (WWW Service) did not configure logging properties for site
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1033: The World Wide Web Publishing Service (WWW Service) did not configure the logging properties for site
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1034: The World Wide Web Publishing Service (WWW Service) did not configure the logging properties for site
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1035: The World Wide Web Publishing Service (WWW Service) did not configure the logging properties for site
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1036: Not used
#Event ID 1037: The HTTP control channel for the World Wide Web Publishing Service (WWW Service) did not open
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1038: Not Used
#Event ID 1039: Not used
#Event ID 1040: Not Used
#Event ID 1041: The 'param1' 'param2' failed range validation for property 'Property'
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString | |
Property UnicodeString | |
Value UnicodeString | |
RangeLow UnicodeString | |
RangeHigh UnicodeString | |
DefaultValue UnicodeString |
Event ID 1042: The AppPoolCommand property set for application pool 'AppPoolID' is not a valid value
#Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | |
CmdValue UnicodeString |
Event ID 1043: The virtual site SiteID is invalid because the World Wide Web Publishing Service (WWW Service) could not configure valid site bindings or no site bindings exist for the site
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1044: The virtual site SiteID is invalid because the application pool ID for the site is null
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1045: Not Used
#Event ID 1046: Not used
#Event ID 1047: Not used
#Event ID 1048: Not used
#Event ID 1049: Not used
#Event ID 1050: Not used
#Event ID 1051: Not used
#Event ID 1052: Not used
#Event ID 1053: Not used
#Event ID 1054: Not used
#Event ID 1055: Not used
#Event ID 1056: Not used
#Event ID 1057: Not used
#Event ID 1058: Not used
#Event ID 1059: Not used
#Event ID 1060: Not used
#Event ID 1061: Not used
#Event ID 1062: The World Wide Web Publishing Service (WWW Service) failed to configure the logging properties for the HTTP control channel
#Fields #
| Name | Description |
|---|---|
LogEnabled UnicodeString | |
LogFileDirectory UnicodeString | |
LogPeriod UnicodeString | |
LogTruncateSize UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1063: Not used
#Event ID 1064: Not used
#Event ID 1065: Not used
#Event ID 1066: Not used
#Event ID 1067: Not used
#Event ID 1068: Not used
#Event ID 1069: Not used
#Event ID 1070: Not used
#Event ID 1071: The World Wide Web Publishing Service (WWW Service) failed to enable global bandwidth throttling because QoS Packet Scheduler is not installed
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1072: The World Wide Web Publishing Service failed to enable bandwidth throttling on site 'SiteID'
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1073: The World Wide Web Publishing Service failed to enable global bandwidth throttling because QoS Packet Scheduler is not installed or it's not running
#Event ID 1074: Not used
#Event ID 1075: Not used
#Event ID 1076: Not used
#Event ID 1077: Not used
#Event ID 1078: Not used
#Event ID 1079: Not used
#Event ID 1080: Not used
#Event ID 1081: Not used
#Event ID 1082: Not used
#Event ID 1083: HTTP
#Event ID 1084: Application pool AppPoolID was not disabled
#Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1085: Not used
#Event ID 1086: The World Wide Web Publishing Service failed to properly configure the load balancer capabilities on application pool 'AppPoolID'
#Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1087: The World Wide Web Publishing Service failed to properly configure the application pool queue length on app pool 'AppPoolID'
#Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1088: Not used
#Event ID 1089: The World Wide Web Publishing Service (WWW Service) did not issue a demand start to HTTP
#Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1090: Not used
#Event ID 1091: Not used
#Event ID 1092: Not used
#Event ID 1093: Not used
#Event ID 1094: Not used
#Event ID 1095: The World Wide Web Publishing Service failed to delete the config group for the application 'Application' in site 'SiteID'
#Fields #
| Name | Description |
|---|---|
Application UnicodeString | |
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1096: The World Wide Web Publishing Service failed to remove the urls for the application 'Application' in virtual site 'SiteID'
#Fields #
| Name | Description |
|---|---|
Application UnicodeString | |
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1097: The World Wide Web Publishing Service failed to set the application pool for the application 'Application' in site 'SiteID'
#Fields #
| Name | Description |
|---|---|
Application UnicodeString | |
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-IIS-W3SVC",
"guid": "{05448E22-93DE-4A7A-BBA5-92E27486A8BE}",
"event_source_name": "",
"event_id": 1097,
"version": 0,
"level": 2,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-05-30T01:45:33.4677682+00:00",
"event_record_id": 35190,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "System",
"computer": "JD-DC01-2022.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"Application": "/",
"SiteID": "3"
},
"message": "The World Wide Web Publishing Service failed to set the application pool for the application '/' in site '3'. The data field contains the error number."
}
Event ID 1098: The World Wide Web Publishing Service failed to set the max connections for the virtual site 'SiteID'
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1099: The World Wide Web Publishing Service failed to set the connection timeout for the virtual site 'SiteID'
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1100: Not used
#Event ID 1101: Not used
#Event ID 1102: Not used
#Event ID 1103: Not used
#Event ID 1104: Not used
#Event ID 1105: Not used
#Event ID 1106: Not used
#Event ID 1107: Not used
#Event ID 1108: Not used
#Event ID 1109: The World Wide Web Publishing Service (WWW Service) failed to set the filter configuration for the control channel
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1110: Not used
#Event ID 1111: Not used
#Event ID 1112: Not used
#Event ID 1113: Not used
#Event ID 1114: Not used
#Event ID 1115: Not used
#Event ID 1116: Not used
#Event ID 1117: Not used
#Event ID 1118: Not used
#Event ID 1119: Not used
#Event ID 1120: The World Wide Web Publishing Service (WWW Service) failed to obtain cache counters from HTTP
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1121: The World Wide Web Publishing Service (WWW Service) failed to obtain site performance counters from HTTP
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1122: The World Wide Web Publishing Service (WWW Service) failed to publish the performance counters that it gathered from HTTP
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1123: The World Wide Web Publishing Service (WWW Service) failed to cancel the timer for gathering performance counters
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1124: The World Wide Web Publishing Service (WWW Service) failed to cancel the timer for the performance counter
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1125: The World Wide Web Publishing Service (WWW Service) failed to start the timer for gathering performance counters
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1126: The World Wide Web Publishing Service (WWW Service) failed to copy a change notification for processing, so the service may not be in sync with data currently in the IIS configuration store
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1127: Not used
#Event ID 1128: The World Wide Web Publishing Service (WWW Service) failed to initialize ASP performance counters
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1129: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site
#Fields #
| Name | Description |
|---|---|
UrlPrefix UnicodeString | |
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1130: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site
#Fields #
| Name | Description |
|---|---|
UrlPrefix UnicodeString | |
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1131: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site
#Fields #
| Name | Description |
|---|---|
UrlPrefix UnicodeString | |
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1132: Not used
#Event ID 1133: The World Wide Web Publishing Service (WWW Service) has both centralized binary logging and centralized W3C logging enabled
#Event ID 1134: The World Wide Web Publishing Service (WWW Service) failed to configure centralized W3C logging properly
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1135: The World Wide Web Publishing Service (WWW Service) failed to configure the centralized W3C logging properties on the HTTP control channel
#Fields #
| Name | Description |
|---|---|
LogEnabled UnicodeString | |
LogFileDirectory UnicodeString | |
LogPeriod UnicodeString | |
LogTruncateSize UnicodeString | |
LogExtFileFlags UnicodeString | |
LocalTimeRollover UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1168: The World Wide Web Publishing Service (WWW Service) did not create a relationship between ProtocolID and application Application in site
#Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | |
Application UnicodeString | |
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1172: The World Wide Web Publishing Service (WWW Service) did not construct valid URLs for virtual site
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1173: The World Wide Web Publishing Service (WWW Service) did not initialize the HTTP driver, and was unable start
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1174: The World Wide Web Publishing Service (WWW Service) failed to create binding string for site
#Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | |
BindingString UnicodeString | |
__binLength UInt32 | |
binary Binary |
Event ID 1175: The World Wide Web Publishing Service (WWW Service) failed to enable end point sharing for the HTTP control channel
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1176: The World Wide Web Publishing Service (WWW Service) failed to start dynamic site registration handler
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1177: The World Wide Web Publishing Service (WWW Service) failed to update dynamic site registration handler from configuration change
#Fields #
| Name | Description |
|---|---|
__binLength UInt32 | |
binary Binary |
Event ID 1073742898: Not used.
#Event ID 1073742899: Not used.
#Event ID 1073742900: Not used.
#Event ID 1073742901: Not used.
#Event ID 1073742902: Not used.
#Event ID 1073742903: Not used.
#Event ID 1073742904: Not used.
#Event ID 1073742905: Not used.
#Event ID 1073742906: Not used.
#Event ID 1073742941: Not used.
#Event ID 2147484649: Not used.
#Event ID 2147484656: Not used.
#Event ID 2147484657: Not used.
#Event ID 2147484658: Not used.
#Event ID 2147484659: Not used.
#Event ID 2147484660: Not used.
#Event ID 2147484661: Not used.
#Event ID 2147484662: Not used.
#Event ID 2147484664: The World Wide Web Publishing Service (WWW Service) did not configure logging for site SiteID.
#Event ID 2147484667: The World Wide Web Publishing Service (WWW Service) failed to intialize performance counters properly.
#Description
The World Wide Web Publishing Service (WWW Service) failed to intialize performance counters properly. The performance counters will run, but counter data may be inaccurate. The data field contains the error number.
Message #
Event ID 2147484669: Not used.
#Event ID 2147484670: Not used.
#Event ID 2147484673: Not used.
#Event ID 2147484687: Not used.
#Event ID 2147484689: The 'param1' 'param2' failed range validation for property 'Property'.
#Event ID 2147484690: The AppPoolCommand property set for application pool 'AppPoolID' is not a valid value.
#Event ID 2147484691: The virtual site SiteID is invalid because the World Wide Web Publishing Service (WWW Service) could not configure valid site bindings or no site bindi...
#Event ID 2147484692: The virtual site SiteID is invalid because the application pool ID for the site is null.
#Event ID 2147484693: Not Used.
#Event ID 2147484694: Not used.
#Event ID 2147484695: Not used.
#Event ID 2147484696: Not used.
#Event ID 2147484697: Not used.
#Event ID 2147484698: Not used.
#Event ID 2147484699: Not used.
#Event ID 2147484700: Not used.
#Event ID 2147484703: Not used.
#Event ID 2147484704: Not used.
#Event ID 2147484705: Not used.
#Event ID 2147484706: Not used.
#Event ID 2147484713: Not used.
#Event ID 2147484715: Not used.
#Event ID 2147484716: Not used.
#Event ID 2147484717: Not used.
#Event ID 2147484718: Not used.
#Event ID 2147484719: The World Wide Web Publishing Service (WWW Service) failed to enable global bandwidth throttling because QoS Packet Scheduler is not installed.
#Fields #
| Name | Description |
|---|---|
SiteID | |
__binLength | |
binary |
Event ID 2147484720: The World Wide Web Publishing Service failed to enable bandwidth throttling on site 'SiteID'.
#Event ID 2147484721: The World Wide Web Publishing Service failed to enable global bandwidth throttling because QoS Packet Scheduler is not installed or it's not running.
#Event ID 2147484775: Not used.
#Event ID 2147484780: Not used.
#Event ID 2147484781: The World Wide Web Publishing Service (WWW Service) has both centralized binary logging and centralized W3C logging enabled.
#Description
The World Wide Web Publishing Service (WWW Service) has both centralized binary logging and centralized W3C logging enabled. Only one type of logging can be enabled at a time, so the system will default to central W3C logging.
Message #
Event ID 2147484820: The World Wide Web Publishing Service (WWW Service) did not construct valid URLs for virtual site SiteID.
#Description
The World Wide Web Publishing Service (WWW Service) did not construct valid URLs for virtual site SiteID. Therefore, the virtual site SiteID will be stopped. This can be caused by invalid characters in the site bindings. The following characters are not allowed in a site binding: "\"" "/" "\\" "[" "]" ":" "|" " " "<" ">" "+" "=" ";" "," "?" "*" "%" "#" "@" "{" "}" "^" "`". To fix this problem please remove invalid characters from the site bindings.
Message #
Fields #
| Name | Description |
|---|---|
SiteID | |
__binLength | |
binary |
Event ID 3221226474: Not used.
#Event ID 3221226475: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site SiteID.
#Event ID 3221226476: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site SiteID.
#Event ID 3221226477: The World Wide Web Publishing Service (WWW Service) is stopping because it encountered an error.
#Event ID 3221226478: Not used.
#Event ID 3221226479: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site SiteID.
#Description
The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site SiteID. The necessary network binding may already be in use. The site has been disabled. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
UrlPrefix | |
SiteID | |
__binLength | |
binary |
Event ID 3221226487: Not used.
#Event ID 3221226489: Not used.
#Event ID 3221226490: The World Wide Web Publishing Service was not able to initialize performance counters.
#Description
The World Wide Web Publishing Service was not able to initialize performance counters. The service will run without the performance counters. Please restart the World Wide Web Publishing Service to reinitialize the performance counters. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
__binLength | |
binary |
Event ID 3221226492: The World Wide Web Publishing Service (WWW Service) failed to configure the HTTP.
#Event ID 3221226495: Not Used.
#Event ID 3221226496: Not used.
#Event ID 3221226498: The World Wide Web Publishing Service (WWW Service) encountered an error when it tried to secure the handle of application pool AppPoolID from HTTP.
#Description
The World Wide Web Publishing Service (WWW Service) encountered an error when it tried to secure the handle of application pool AppPoolID from HTTP.sys. Edit the identification information for the application pool so that the WWW Service can secure the handle of the application pool again. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
AppPoolID | |
__binLength | |
binary |
Event ID 3221226499: Application pool AppPoolID has been disabled.
#Event ID 3221226500: Not used.
#Event ID 3221226501: The World Wide Web Publishing Service (WWW Service) did not configure bindings for an application in site SiteID.
#Event ID 3221226502: Not used.
#Event ID 3221226503: Not Used.
#Event ID 3221226504: The World Wide Web Publishing Service (WWW Service) did not configure logging properties for site SiteID.
#Description
The World Wide Web Publishing Service (WWW Service) did not configure logging properties for site SiteID. The site's log file directory path may be a mapped network path. Using a mapped network path as the site's log file directory is not supported by IIS. Use a UNC path instead.
Message #
Fields #
| Name | Description |
|---|---|
SiteID | |
__binLength | |
binary |
Event ID 3221226505: The World Wide Web Publishing Service (WWW Service) did not configure the logging properties for site SiteID.
#Event ID 3221226506: The World Wide Web Publishing Service (WWW Service) did not configure the logging properties for site SiteID.
#Event ID 3221226507: The World Wide Web Publishing Service (WWW Service) did not configure the logging properties for site SiteID.
#Description
The World Wide Web Publishing Service (WWW Service) did not configure the logging properties for site SiteID. The site's log file directory is not fully qualified, which may be because it is missing the drive letter or other important information.
Message #
Fields #
| Name | Description |
|---|---|
SiteID | |
__binLength | |
binary |
Event ID 3221226508: Not used.
#Event ID 3221226509: The HTTP control channel for the World Wide Web Publishing Service (WWW Service) did not open.
#Event ID 3221226510: Not Used.
#Event ID 3221226512: Not Used.
#Event ID 3221226525: Not used.
#Event ID 3221226526: Not used.
#Event ID 3221226531: Not used.
#Event ID 3221226532: Not used.
#Event ID 3221226533: Not used.
#Event ID 3221226534: The World Wide Web Publishing Service (WWW Service) failed to configure the logging properties for the HTTP control channel.
#Description
The World Wide Web Publishing Service (WWW Service) failed to configure the logging properties for the HTTP control channel. Logging Enabled is 'LogEnabled'. Log File Directory is 'LogFileDirectory'. Log Period is 'LogPeriod'. Log Truncate Size is 'LogTruncateSize'. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
LogEnabled | |
LogFileDirectory | |
LogPeriod | |
LogTruncateSize | |
__binLength | |
binary |
Event ID 3221226535: Not used.
#Event ID 3221226536: Not used.
#Event ID 3221226538: Not used.
#Event ID 3221226555: HTTP.
#Description
HTTP.SYS provided inconsistent site performance counter data to the World Wide Web Publishing Service (WWW Service), so the WWW Service will ignore the data.
Message #
Event ID 3221226556: Application pool AppPoolID was not disabled.
#Event ID 3221226557: Not used.
#Event ID 3221226558: The World Wide Web Publishing Service failed to properly configure the load balancer capabilities on application pool 'AppPoolID'.
#Event ID 3221226559: The World Wide Web Publishing Service failed to properly configure the application pool queue length on app pool 'AppPoolID'.
#Event ID 3221226560: Not used.
#Event ID 3221226561: The World Wide Web Publishing Service (WWW Service) did not issue a demand start to HTTP.
#Event ID 3221226562: Not used.
#Event ID 3221226563: Not used.
#Event ID 3221226564: Not used.
#Event ID 3221226565: Not used.
#Event ID 3221226566: Not used.
#Event ID 3221226567: The World Wide Web Publishing Service failed to delete the config group for the application 'Application' in site 'SiteID'.
#Event ID 3221226568: The World Wide Web Publishing Service failed to remove the urls for the application 'Application' in virtual site 'SiteID'.
#Event ID 3221226569: The World Wide Web Publishing Service failed to set the application pool for the application 'Application' in site 'SiteID'.
#Event ID 3221226570: The World Wide Web Publishing Service failed to set the max connections for the virtual site 'SiteID'.
#Event ID 3221226571: The World Wide Web Publishing Service failed to set the connection timeout for the virtual site 'SiteID'.
#Event ID 3221226572: Not used.
#Event ID 3221226573: Not used.
#Event ID 3221226574: Not used.
#Event ID 3221226575: Not used.
#Event ID 3221226576: Not used.
#Event ID 3221226577: Not used.
#Event ID 3221226578: Not used.
#Event ID 3221226579: Not used.
#Event ID 3221226580: Not used.
#Event ID 3221226581: The World Wide Web Publishing Service (WWW Service) failed to set the filter configuration for the control channel.
#Event ID 3221226582: Not used.
#Event ID 3221226583: Not used.
#Event ID 3221226584: Not used.
#Event ID 3221226585: Not used.
#Event ID 3221226586: Not used.
#Event ID 3221226587: Not used.
#Event ID 3221226588: Not used.
#Event ID 3221226590: Not used.
#Event ID 3221226591: Not used.
#Event ID 3221226592: The World Wide Web Publishing Service (WWW Service) failed to obtain cache counters from HTTP.
#Description
The World Wide Web Publishing Service (WWW Service) failed to obtain cache counters from HTTP.SYS. The performance counters that were reported do not include performance counters for this gathering from HTTP.SYS. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
__binLength | |
binary |
Event ID 3221226593: The World Wide Web Publishing Service (WWW Service) failed to obtain site performance counters from HTTP.
#Description
The World Wide Web Publishing Service (WWW Service) failed to obtain site performance counters from HTTP.SYS. The performance counters that were reported do not include counters for this gathering from HTTP.SYS. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
__binLength | |
binary |
Event ID 3221226594: The World Wide Web Publishing Service (WWW Service) failed to publish the performance counters that it gathered from HTTP.
#Event ID 3221226595: The World Wide Web Publishing Service (WWW Service) failed to cancel the timer for gathering performance counters.
#Event ID 3221226596: The World Wide Web Publishing Service (WWW Service) failed to cancel the timer for the performance counter.
#Event ID 3221226597: The World Wide Web Publishing Service (WWW Service) failed to start the timer for gathering performance counters.
#Event ID 3221226598: The World Wide Web Publishing Service (WWW Service) failed to copy a change notification for processing, so the service may not be in sync with dat...
#Event ID 3221226600: The World Wide Web Publishing Service (WWW Service) failed to initialize ASP performance counters.
#Description
The World Wide Web Publishing Service (WWW Service) failed to initialize ASP performance counters. The service will run without ASP performance counters. Restart the WWW Service to start ASP performance counter gathering. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
__binLength | |
binary |
Event ID 3221226601: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site SiteID.
#Description
The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site SiteID. Either the network endpoint for the site's IP address could not be created or the IP listen list for HTTP.sys did not have any usable IP addresses. The site has been disabled. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
UrlPrefix | |
SiteID | |
__binLength | |
binary |
Event ID 3221226602: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site SiteID.
#Description
The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site SiteID. The IP address for the site is not in the HTTP.sys IP listen list. The site has been disabled. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
UrlPrefix | |
SiteID | |
__binLength | |
binary |
Event ID 3221226603: The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site SiteID.
#Description
The World Wide Web Publishing Service (WWW Service) did not register the URL prefix UrlPrefix for site SiteID. HTTP.sys has been configured to listen to too many ports. The site has been disabled. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
UrlPrefix | |
SiteID | |
__binLength | |
binary |
Event ID 3221226606: The World Wide Web Publishing Service (WWW Service) failed to configure centralized W3C logging properly.
#Event ID 3221226607: The World Wide Web Publishing Service (WWW Service) failed to configure the centralized W3C logging properties on the HTTP control channel.
#Description
The World Wide Web Publishing Service (WWW Service) failed to configure the centralized W3C logging properties on the HTTP control channel. Logging Enabled is 'LogEnabled'. Log File Directory is 'LogFileDirectory'. Log Period is 'LogPeriod'. Log Truncate Size is 'LogTruncateSize'. Log Ext File Flags is 'LogExtFileFlags'. Local Time Rollover is 'LocalTimeRollover'. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
LogEnabled | |
LogFileDirectory | |
LogPeriod | |
LogTruncateSize | |
LogExtFileFlags | |
LocalTimeRollover | |
__binLength | |
binary |
Event ID 3221226640: The World Wide Web Publishing Service (WWW Service) did not create a relationship between ProtocolID and application Application in site SiteID.
#Description
The World Wide Web Publishing Service (WWW Service) did not create a relationship between ProtocolID and application Application in site SiteID. The site will be stopped because the WWW Service cannot notify HTTP.sys about the application. The data field contains the error number.
Message #
Fields #
| Name | Description |
|---|---|
ProtocolID | |
Application | |
SiteID | |
__binLength | |
binary |