detection.wiki

Microsoft-Windows-IIS

EventTitleChannelSampleRule
1GENERAL_REQUEST_START: SiteId='.DiagnosticNN
1GENERAL_REQUEST_START: …OperationalNN
2GENERAL_REQUEST_END: …Diagnostic, OperationalNN
10GENERAL_STATIC_FILE_HANDLER: FileName='FileName'Diagnostic, OperationalNN
11GENERAL_CGI_HANDLERDiagnostic, OperationalNN
12GENERAL_ISAPI_HANDLERDiagnostic, OperationalNN
13GENERAL_OOP_ISAPI_HANDLER: …Diagnostic, OperationalNN
14GENERAL_REDIRECTION_HANDLER: RedirectedURL='RedirectedURL'Diagnostic, OperationalNN
15GENERAL_DAV_HANDLER: FileName='FileName'Diagnostic, OperationalNN
16GENERAL_OPTIONS_HANDLERDiagnostic, OperationalNN
17GENERAL_TRACE_HANDLERDiagnostic, OperationalNN
18GENERAL_HSTS_HANDLER: HstsOperation='HstsOperation'Diagnostic, OperationalNN
30GENERAL_GET_URL_METADATA: PhysicalPath='PhysicalPath',AccessPerms='AccessPerms'Diagnostic, OperationalNN
31GENERAL_CHILD_REQUEST_START: …Diagnostic, OperationalNN
32GENERAL_CHILD_REQUEST_END: …Diagnostic, OperationalNN
33GENERAL_SEND_CUSTOM_ERROR: …Diagnostic, OperationalNN
34GENERAL_MAP_HANDLERDiagnostic, OperationalNN
35GENERAL_FLUSH_RESPONSE_STARTDiagnostic, OperationalNN
36GENERAL_FLUSH_RESPONSE_END: BytesSent='BytesSent',ErrorCode='ErrorCode'Diagnostic, OperationalNN
37GENERAL_READ_ENTITY_STARTDiagnostic, OperationalNN
38GENERAL_READ_ENTITY_END: BytesReceived='BytesReceived',ErrorCode='ErrorCode'Diagnostic, OperationalNN
39FILE_CHANGE_NOTIFICATION: FilePath='FilePath'Diagnostic, OperationalNN
40CONFIG_CHANGE_NOTIFICATION: ConfigPath='ConfigPath'Diagnostic, OperationalNN
41VIRTUAL_MODULE_UNRESOLVED: Name='Name',Type='Type'Diagnostic, OperationalNN
42URL_CHANGED: OldUrl='OldUrl',NewUrl='NewUrl'Diagnostic, OperationalNN
43HANDLER_CHANGED: …Diagnostic, OperationalNN
44USER_SET: …Diagnostic, OperationalNN
45MODULE_PRECONDITION_NOT_MATCH: Name='Name',Precondition='Precondition'Diagnostic, OperationalNN
46HANDLER_PRECONDITION_NOT_MATCH: Name='Name',Precondition='Precondition'Diagnostic, OperationalNN
47GENERAL_RESPONSE_HEADERS: Headers='Headers'Diagnostic, OperationalNN
48GENERAL_RESPONSE_ENTITY_FILE: FileName='FileName',Offset='Offset',Size='Size'Diagnostic, OperationalNN
49GENERAL_RESPONSE_ENTITY_BUFFER: Buffer='Buffer'Diagnostic, OperationalNN
50GENERAL_REQUEST_HEADERS: Headers='Headers'Diagnostic, OperationalNN
51GENERAL_REQUEST_ENTITY: Buffer='Buffer'Diagnostic, OperationalNN
52GENERAL_NOT_SEND_CUSTOM_ERROR: Reason='Reason'Diagnostic, OperationalNN
53GENERAL_SET_REQUEST_HEADER: …Diagnostic, OperationalNN
54GENERAL_MODULE_FACTORY_FAILED: ModuleName='ModuleName',ErrorCode='ErrorCode'Diagnostic, OperationalNN
55GENERAL_ENDPOINT_INFORMATION: …Diagnostic, OperationalNN
56GENERAL_SET_RESPONSE_HEADER: …Diagnostic, OperationalNN
57GENERAL_SET_RESPONSE_TRAILER: …Diagnostic, OperationalNN
522AUTH_START: AuthTypeSupported='AuthTypeSupported'Diagnostic, OperationalNN
523AUTH_SUCCEEDED: …Diagnostic, OperationalNN
524AUTH_TYPE_NOT_SUPPORTEDDiagnostic, OperationalNN
525AUTH_INVALID_ANON_ACCOUNT: ErrorCode='ErrorCode'Diagnostic, OperationalNN
526AUTH_PASSWD_CHANGE_NEEDEDDiagnostic, OperationalNN
527AUTH_PASSWD_CHANGE_DISABLEDDiagnostic, OperationalNN
528AUTH_BAD_BASIC_HEADERDiagnostic, OperationalNN
529AUTH_BASIC_LOGON_FAILED: ErrorCode='ErrorCode'Diagnostic, OperationalNN
530AUTH_WDIGEST_LOGON_FAILED: ErrorCode='ErrorCode'Diagnostic, OperationalNN
531AUTH_IISDIGEST_LOGON_FAILED: ErrorCode='ErrorCode'Diagnostic, OperationalNN
532AUTH_PASSPORT_LOGON_FAILED: ErrorCode='ErrorCode'Diagnostic, OperationalNN
533AUTH_SSPI_LOGON_FAILED: ErrorCode='ErrorCode'Diagnostic, OperationalNN
534AUTH_NTLM_NULL_SESSIONDiagnostic, OperationalNN
535AUTH_SSPI_CONTINUE_NEEDED: PackageName='PackageName'Diagnostic, OperationalNN
536AUTH_ANON_PASSWD_CHANGE_NEEDEDDiagnostic, OperationalNN
539AUTH_REQUEST_AUTH_TYPE: RequestAuthType='RequestAuthType'Diagnostic, OperationalNN
540AUTH_ENDDiagnostic, OperationalNN
567AUTH_KERBEROS_FAILED: …Diagnostic, OperationalNN
778SECURITY_ILLEGAL_SHORT_FILENAME: FileName='FileName'Diagnostic, OperationalNN
779SECURITY_REJECTED_IP: IPAddress='IPAddress'Diagnostic, OperationalNN
780SECURITY_REJECTED_HOSTNAME: HostName='HostName'Diagnostic, OperationalNN
781SECURITY_REJECTED_REQUIRE_SSL_128Diagnostic, OperationalNN
782SECURITY_FILE_ACCESS_DENIED: …Diagnostic, OperationalNN
783SECURITY_DENIED_BY_MIMEMAP: FileName='FileName'Diagnostic, OperationalNN
784SECURITY_DENIED_BY_ISAPI_RESTRICTION: ImageName='ImageName'Diagnostic, OperationalNN
785SECURITY_DENIED_BY_CGI_RESTRICTION: ImageName='ImageName'Diagnostic, OperationalNN
786SECURITY_DENIED_BY_ACCESS_FLAGS: …Diagnostic, OperationalNN
1025FILTER_START: FilterName='FilterName'Diagnostic, OperationalNN
1026FILTER_END: NotificationStatus='NotificationStatus'Diagnostic, OperationalNN
1036FILTER_ERROR: ErrorCode='ErrorCode'Diagnostic, OperationalNN
1037FILTER_PREPROC_HEADERS_STARTDiagnostic, OperationalNN
1038FILTER_PREPROC_HEADERS_ENDDiagnostic, OperationalNN
1039FILTER_URL_MAP_START: …Diagnostic, OperationalNN
1040FILTER_URL_MAP_END: …Diagnostic, OperationalNN
1041FILTER_AUTHENTICATION_START: OrigUserName='OrigUserName'Diagnostic, OperationalNN
1042FILTER_AUTHENTICATION_END: …Diagnostic, OperationalNN
1043FILTER_AUTH_COMPLETE_STARTDiagnostic, OperationalNN
1044FILTER_AUTH_COMPLETE_ENDDiagnostic, OperationalNN
1045FILTER_SEND_RESPONSE_START: HttpStatus='HttpStatus'Diagnostic, OperationalNN
1046FILTER_SEND_RESPONSE_ENDDiagnostic, OperationalNN
1047FILTER_END_OF_REQUEST_STARTDiagnostic, OperationalNN
1048FILTER_END_OF_REQUEST_ENDDiagnostic, OperationalNN
1049FILTER_LOG_START: …Diagnostic, OperationalNN
1050FILTER_LOG_END: …Diagnostic, OperationalNN
1051FILTER_SEND_RAW_DATA_STARTDiagnostic, OperationalNN
1052FILTER_SEND_RAW_DATA_ENDDiagnostic, OperationalNN
1053FILTER_ACCESS_DENIED_START: …Diagnostic, OperationalNN
1054FILTER_ACCESS_DENIED_ENDDiagnostic, OperationalNN
1055FILTER_SET_REQ_HEADER: HeaderName='HeaderName',HeaderValue='HeaderValue'Diagnostic, OperationalNN
1056FILTER_ADD_REQ_HEADER: HeaderName='HeaderName',HeaderValue='HeaderValue'Diagnostic, OperationalNN
1057FILTER_SET_RESP_HEADER: HeaderName='HeaderName',HeaderValue='HeaderValue'Diagnostic, OperationalNN
1058FILTER_ADD_RESP_HEADER: HeaderName='HeaderName',HeaderValue='HeaderValue'Diagnostic, OperationalNN
1537CGI_STARTDiagnostic, OperationalNN
1538CGI_ENDDiagnostic, OperationalNN
1539CGI_LAUNCH: …Diagnostic, OperationalNN
1540CGI_TIMEOUT: Headers='Headers'Diagnostic, OperationalNN
1541CGI_PREMATURE_TERMINATION: Headers='Headers'Diagnostic, OperationalNN
1542CGI_REQUEST_ENTITY_SENTDiagnostic, OperationalNN
1543CGI_HEADERS_RECEIVEDDiagnostic, OperationalNN
1793STATIC_COMPRESSION_STARTDiagnostic, OperationalNN
1794STATIC_COMPRESSION_SUCCESSDiagnostic, OperationalNN
1795STATIC_COMPRESSION_NOT_SUCCESS: Reason='Reason'Diagnostic, OperationalNN
1796STATIC_COMPRESSION_CREATE_START: OriginalFileName='OriginalFileName'Diagnostic, OperationalNN
1797STATIC_COMPRESSION_CREATE_END: …Diagnostic, OperationalNN
1798DYNAMIC_COMPRESSION_STARTDiagnostic, OperationalNN
1799DYNAMIC_COMPRESSION_SUCCESSDiagnostic, OperationalNN
1800DYNAMIC_COMPRESSION_NOT_SUCCESS: Reason='Reason'Diagnostic, OperationalNN
1801DYNAMIC_COMPRESSION_DO: …Diagnostic, OperationalNN
1802DYNAMIC_COMPRESSION_ENDDiagnostic, OperationalNN
1803STATIC_COMPRESSION_ENDDiagnostic, OperationalNN
2058FILE_CACHE_ACCESS_START: …Diagnostic, OperationalNN
2059FILE_CACHE_ACCESS_END: …Diagnostic, OperationalNN
2060URL_CACHE_ACCESS_START: RequestURL='RequestURL'Diagnostic, OperationalNN
2061URL_CACHE_ACCESS_END: …Diagnostic, OperationalNN
2062HTTPSYS_CACHEABLE: …Diagnostic, OperationalNN
2063OUTPUT_CACHE_LOOKUP_STARTDiagnostic, OperationalNN
2064OUTPUT_CACHE_LOOKUP_END: Result='Result'Diagnostic, OperationalNN
2065OUTPUT_CACHE_UPDATE_START: CachePolicy='CachePolicy',TimeToLive='TimeToLive'Diagnostic, OperationalNN
2066OUTPUT_CACHE_UPDATE_END: Result='Result'Diagnostic, OperationalNN
2067OUTPUT_CACHE_DISABLEDDiagnostic, OperationalNN
2068FILE_CACHE_CREATE_FILE: …Diagnostic, OperationalNN
2305NOTIFY_MODULE_START: ModuleName='.DiagnosticNN
2305NOTIFY_MODULE_START: …OperationalNN
2306NOTIFY_MODULE_END: ModuleName='.DiagnosticNN
2306NOTIFY_MODULE_END: …OperationalNN
2307NOTIFY_MODULE_COMPLETION: ModuleName='.DiagnosticNN
2307NOTIFY_MODULE_COMPLETION: …OperationalNN
2308PRE_BEGIN_REQUEST_START: ModuleName='ModuleName'Diagnostic, OperationalNN
2309PRE_BEGIN_REQUEST_END: …Diagnostic, OperationalNN
2319REQUEST_PROCESSING_ERROR: …Diagnostic, OperationalNN
2320MODULE_SET_RESPONSE_ERROR_STATUS: …Diagnostic, OperationalNN
2321MODULE_SET_RESPONSE_SUCCESS_STATUS: …Diagnostic, OperationalNN
2322SET_RESPONSE_ERROR_DESCRIPTION: ErrorDescription='ErrorDescription'Diagnostic, OperationalNN
2561MODULE_START: …Diagnostic, OperationalNN
2562MODULE_END: …Diagnostic, OperationalNN
2563MODULE_CRITICAL_ERROR: …Diagnostic, OperationalNN
2564MODULE_ERROR: …Diagnostic, OperationalNN
2565MODULE_WARNING: …Diagnostic, OperationalNN
2566MODULE_INFORMATION: …Diagnostic, OperationalNN
2567MODULE_VERBOSE: …Diagnostic, OperationalNN
3329FASTCGI_ACTIVITY_TIMEOUTDiagnostic, OperationalNN
3330FASTCGI_REQUEST_TIMEOUTDiagnostic, OperationalNN
3331FASTCGI_UNEXPECTED_EXITDiagnostic, OperationalNN
3332FASTCGI_RAPID_FAILURE_PROTECTIONDiagnostic, OperationalNN
3333FASTCGI_PATH_NOT_FOUNDDiagnostic, OperationalNN
3334FASTCGI_SCRIPT_PROCESSOR_MISSINGDiagnostic, OperationalNN
3335FASTCGI_ADD_JOBOBJECT_FAILDiagnostic, OperationalNN
3336FASTCGI_APPLICATION_MANAGER_SHUTDOWNDiagnostic, OperationalNN
3337FASTCGI_QUEUE_FULLDiagnostic, OperationalNN
3338FASTCGI_UNKNOWN_ERROR: ErrorCode='ErrorCode'Diagnostic, OperationalNN
3339FASTCGI_RESPONSE_WRITTENDiagnostic, OperationalNN
3340FASTCGI_WAITING_FOR_RESPONSEDiagnostic, OperationalNN
3341FASTCGI_STDERR_TRACE_ERROR: Message='Message'Diagnostic, OperationalNN
3342FASTCGI_STDERR_TRACE_WARNING: Message='Message'Diagnostic, OperationalNN
3343FASTCGI_STDERR_TRACE_INFO: Message='Message'Diagnostic, OperationalNN
3344FASTCGI_QUEUE_REQUEST: …Diagnostic, OperationalNN
3345FASTCGI_ASSIGN_PROCESS: …Diagnostic, OperationalNN
3346FASTCGI_STARTDiagnostic, OperationalNN
3347FASTCGI_ENDDiagnostic, OperationalNN
3585ISAPI_STARTDiagnostic, OperationalNN
3586ISAPI_ENDDiagnostic, OperationalNN
3841WEBSOCKET_INITIALIZE_FAILED: ErrorCode='ErrorCode'Diagnostic, OperationalNN
3842WEBSOCKET_HANDSHAKE_STARTDiagnostic, OperationalNN
3843WEBSOCKET_HANDSHAKE_SUCCESSDiagnostic, OperationalNN
3844WEBSOCKET_HANDSHAKE_NOT_SUCCESS: ErrorCode='ErrorCode'Diagnostic, OperationalNN
3845WEBSOCKET_READ_FRAGMENT_START: BufferSize='BufferSize'Diagnostic, OperationalNN
3846WEBSOCKET_READ_FRAGMENT_END_PENDINGDiagnostic, OperationalNN
3847WEBSOCKET_READ_FRAGMENT_END_SUCCESS: BytesReceived='BytesReceived'Diagnostic, OperationalNN
3848WEBSOCKET_READ_FRAGMENT_END_NOT_SUCCESS: ErrorCode='ErrorCode'Diagnostic, OperationalNN
3849WEBSOCKET_WRITE_FRAGMENT_START: DataType='DataType',DataSize='DataSize'Diagnostic, OperationalNN
3850WEBSOCKET_WRITE_FRAGMENT_END_PENDINGDiagnostic, OperationalNN
3851WEBSOCKET_WRITE_FRAGMENT_END_SUCCESS: BytesSent='BytesSent'Diagnostic, OperationalNN
3852WEBSOCKET_WRITE_FRAGMENT_END_NOT_SUCCESS: ErrorCode='ErrorCode'Diagnostic, OperationalNN
3853WEBSOCKET_APPLICATION_CLOSE_CONNECTIONDiagnostic, OperationalNN
3854WEBSOCKET_MODULE_CLOSE_CONNECTION: Reason='Reason'Diagnostic, OperationalNN
3855WEBSOCKET_READ_IO_NOT_SUCCESS: ErrorCode='ErrorCode'Diagnostic, OperationalNN
3856WEBSOCKET_WRITE_IO_NOT_SUCCESS: ErrorCode='ErrorCode'Diagnostic, OperationalNN
3857WEBSOCKET_RECEIVED_CLOSE: Status='Status',Reason='Reason'Diagnostic, OperationalNN
3858WEBSOCKET_SEND_CLOSE_START: Status='Status',Reason='Reason'Diagnostic, OperationalNN
3859WEBSOCKET_SEND_CLOSE_END_SUCCESSDiagnostic, OperationalNN
3860WEBSOCKET_SEND_CLOSE_END_NOT_SUCCESS: ErrorCode='ErrorCode'Diagnostic, OperationalNN

Event ID 1: GENERAL_REQUEST_START: SiteId='.

#
Channel
Diagnostic

Description

GENERAL_REQUEST_START: SiteId='SiteId',AppPoolId='AppPoolId',ConnId='ConnId',RawConnId='RawConnId',RequestURL='RequestURL',RequestVerb='RequestVerb'.

Message #

GENERAL_REQUEST_START: SiteId='%2',AppPoolId='%3',ConnId='%4',RawConnId='%5',RequestURL='%6',RequestVerb='%7'

Fields #

NameDescription
ContextId GUID
SiteId UInt32
AppPoolId UnicodeString
ConnId UInt64
RawConnId UInt64
RequestURL UnicodeString
RequestVerb AnsiString

Event ID 1: GENERAL_REQUEST_START: SiteId='SiteId',AppPoolId='AppPoolId',ConnId='ConnId',RawConnId='RawConnId',RequestURL='RequestURL',RequestVerb='RequestVerb'

#
Channel
Operational

Fields #

NameDescription
ContextId GUID
SiteId UInt32
AppPoolId UnicodeString
ConnId UInt64
RawConnId UInt64
RequestURL UnicodeString
RequestVerb AnsiString

Event ID 2: GENERAL_REQUEST_END: BytesSent='BytesSent',BytesReceived='BytesReceived',HttpStatus='HttpStatus',HttpSubStatus='HttpSubStatus'

#
Channel
Diagnostic, Operational

Message #

GENERAL_REQUEST_END: BytesSent='%2',BytesReceived='%3',HttpStatus='%4',HttpSubStatus='%5'

Fields #

NameDescription
ContextId GUID
BytesSent UInt32
BytesReceived UInt32
HttpStatus UInt32
HttpSubStatus UInt16

Event ID 10: GENERAL_STATIC_FILE_HANDLER: FileName='FileName'

#
Channel
Diagnostic, Operational

Message #

GENERAL_STATIC_FILE_HANDLER: FileName='%2'

Fields #

NameDescription
ContextId GUID
FileName UnicodeString

Event ID 11: GENERAL_CGI_HANDLER

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 12: GENERAL_ISAPI_HANDLER

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 13: GENERAL_OOP_ISAPI_HANDLER: ProcessId='ProcessId',TotalReqs='TotalReqs',CurrentReqs='CurrentReqs'

#
Channel
Diagnostic, Operational

Message #

GENERAL_OOP_ISAPI_HANDLER: ProcessId='%2',TotalReqs='%3',CurrentReqs='%4'

Fields #

NameDescription
ContextId GUID
ProcessId UInt32
TotalReqs UInt32
CurrentReqs UInt32

Event ID 14: GENERAL_REDIRECTION_HANDLER: RedirectedURL='RedirectedURL'

#
Channel
Diagnostic, Operational

Message #

GENERAL_REDIRECTION_HANDLER: RedirectedURL='%2'

Fields #

NameDescription
ContextId GUID
RedirectedURL UnicodeString

Event ID 15: GENERAL_DAV_HANDLER: FileName='FileName'

#
Channel
Diagnostic, Operational

Message #

GENERAL_DAV_HANDLER: FileName='%2'

Fields #

NameDescription
ContextId GUID
FileName UnicodeString

Event ID 16: GENERAL_OPTIONS_HANDLER

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 17: GENERAL_TRACE_HANDLER

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 18: GENERAL_HSTS_HANDLER: HstsOperation='HstsOperation'

#
Channel
Diagnostic, Operational

Message #

GENERAL_HSTS_HANDLER: HstsOperation='%2'

Fields #

NameDescription
ContextId GUID
HstsOperation UInt32

Event ID 30: GENERAL_GET_URL_METADATA: PhysicalPath='PhysicalPath',AccessPerms='AccessPerms'

#
Channel
Diagnostic, Operational

Message #

GENERAL_GET_URL_METADATA: PhysicalPath='%2',AccessPerms='%3'

Fields #

NameDescription
ContextId GUID
PhysicalPath UnicodeString
AccessPerms UInt32

Event ID 31: GENERAL_CHILD_REQUEST_START: SiteId='SiteId',RequestURL='RequestURL',RequestVerb='RequestVerb',RecursiveLevel='RecursiveLevel'

#
Channel
Diagnostic, Operational

Message #

GENERAL_CHILD_REQUEST_START: SiteId='%2',RequestURL='%3',RequestVerb='%4',RecursiveLevel='%5'

Fields #

NameDescription
ContextId GUID
SiteId UInt32
RequestURL UnicodeString
RequestVerb AnsiString
RecursiveLevel UInt32

Event ID 32: GENERAL_CHILD_REQUEST_END: BytesSent='BytesSent',HttpStatus='HttpStatus',HttpSubStatus='HttpSubStatus'

#
Channel
Diagnostic, Operational

Message #

GENERAL_CHILD_REQUEST_END: BytesSent='%2',HttpStatus='%3',HttpSubStatus='%4'

Fields #

NameDescription
ContextId GUID
BytesSent UInt32
HttpStatus UInt32
HttpSubStatus UInt16

Event ID 33: GENERAL_SEND_CUSTOM_ERROR: HttpStatus='HttpStatus',HttpSubStatus='HttpSubStatus',FileNameOrURL='FileNameOrURL'

#
Channel
Diagnostic, Operational

Message #

GENERAL_SEND_CUSTOM_ERROR: HttpStatus='%2',HttpSubStatus='%3',FileNameOrURL='%4'

Fields #

NameDescription
ContextId GUID
HttpStatus UInt32
HttpSubStatus UInt16
FileNameOrURL UnicodeString

Event ID 34: GENERAL_MAP_HANDLER

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 35: GENERAL_FLUSH_RESPONSE_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 36: GENERAL_FLUSH_RESPONSE_END: BytesSent='BytesSent',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

GENERAL_FLUSH_RESPONSE_END: BytesSent='%2',ErrorCode='%3'

Fields #

NameDescription
ContextId GUID
BytesSent UInt32
ErrorCode UInt32

Event ID 37: GENERAL_READ_ENTITY_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 38: GENERAL_READ_ENTITY_END: BytesReceived='BytesReceived',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

GENERAL_READ_ENTITY_END: BytesReceived='%2',ErrorCode='%3'

Fields #

NameDescription
ContextId GUID
BytesReceived UInt32
ErrorCode UInt32

Event ID 39: FILE_CHANGE_NOTIFICATION: FilePath='FilePath'

#
Channel
Diagnostic, Operational

Message #

FILE_CHANGE_NOTIFICATION: FilePath='%2'

Fields #

NameDescription
ContextId GUID
FilePath UnicodeString

Event ID 40: CONFIG_CHANGE_NOTIFICATION: ConfigPath='ConfigPath'

#
Channel
Diagnostic, Operational

Message #

CONFIG_CHANGE_NOTIFICATION: ConfigPath='%2'

Fields #

NameDescription
ContextId GUID
ConfigPath UnicodeString

Event ID 41: VIRTUAL_MODULE_UNRESOLVED: Name='Name',Type='Type'

#
Channel
Diagnostic, Operational

Message #

VIRTUAL_MODULE_UNRESOLVED: Name='%2',Type='%3'

Fields #

NameDescription
ContextId GUID
Name UnicodeString
Type UnicodeString

Event ID 42: URL_CHANGED: OldUrl='OldUrl',NewUrl='NewUrl'

#
Channel
Diagnostic, Operational

Message #

URL_CHANGED: OldUrl='%2',NewUrl='%3'

Fields #

NameDescription
ContextId GUID
OldUrl UnicodeString
NewUrl UnicodeString

Event ID 43: HANDLER_CHANGED: OldHandlerName='OldHandlerName',NewHandlerName='NewHandlerName',NewHandlerModules='NewHandlerModules',NewHandlerScriptProcessor='NewHandlerScriptProcessor',NewHandlerType='NewHandl

#
Channel
Diagnostic, Operational

Description

HANDLER_CHANGED: OldHandlerName='OldHandlerName',NewHandlerName='NewHandlerName',NewHandlerModules='NewHandlerModules',NewHandlerScriptProcessor='NewHandlerScriptProcessor',NewHandlerType='NewHandlerType'.

Message #

HANDLER_CHANGED: OldHandlerName='%2',NewHandlerName='%3',NewHandlerModules='%4',NewHandlerScriptProcessor='%5',NewHandlerType='%6'

Fields #

NameDescription
ContextId GUID
OldHandlerName UnicodeString
NewHandlerName UnicodeString
NewHandlerModules UnicodeString
NewHandlerScriptProcessor UnicodeString
NewHandlerType UnicodeString

Event ID 44: USER_SET: AuthType='AuthType',UserName='UserName',SupportsIsInRole='SupportsIsInRole'

#
Channel
Diagnostic, Operational

Message #

USER_SET: AuthType='%2',UserName='%3',SupportsIsInRole='%4'

Fields #

NameDescription
ContextId GUID
AuthType UnicodeString
UserName UnicodeString
SupportsIsInRole Boolean

Event ID 45: MODULE_PRECONDITION_NOT_MATCH: Name='Name',Precondition='Precondition'

#
Channel
Diagnostic, Operational

Message #

MODULE_PRECONDITION_NOT_MATCH: Name='%2',Precondition='%3'

Fields #

NameDescription
ContextId GUID
Name UnicodeString
Precondition UnicodeString

Event ID 46: HANDLER_PRECONDITION_NOT_MATCH: Name='Name',Precondition='Precondition'

#
Channel
Diagnostic, Operational

Message #

HANDLER_PRECONDITION_NOT_MATCH: Name='%2',Precondition='%3'

Fields #

NameDescription
ContextId GUID
Name UnicodeString
Precondition UnicodeString

Event ID 47: GENERAL_RESPONSE_HEADERS: Headers='Headers'

#
Channel
Diagnostic, Operational

Message #

GENERAL_RESPONSE_HEADERS: Headers='%2'

Fields #

NameDescription
ContextId GUID
Headers AnsiString

Event ID 48: GENERAL_RESPONSE_ENTITY_FILE: FileName='FileName',Offset='Offset',Size='Size'

#
Channel
Diagnostic, Operational

Message #

GENERAL_RESPONSE_ENTITY_FILE: FileName='%2',Offset='%3',Size='%4'

Fields #

NameDescription
ContextId GUID
FileName UnicodeString
Offset UInt64
Size UInt64

Event ID 49: GENERAL_RESPONSE_ENTITY_BUFFER: Buffer='Buffer'

#
Channel
Diagnostic, Operational

Message #

GENERAL_RESPONSE_ENTITY_BUFFER: Buffer='%2'

Fields #

NameDescription
ContextId GUID
Buffer AnsiString

Event ID 50: GENERAL_REQUEST_HEADERS: Headers='Headers'

#
Channel
Diagnostic, Operational

Message #

GENERAL_REQUEST_HEADERS: Headers='%2'

Fields #

NameDescription
ContextId GUID
Headers AnsiString

Event ID 51: GENERAL_REQUEST_ENTITY: Buffer='Buffer'

#
Channel
Diagnostic, Operational

Message #

GENERAL_REQUEST_ENTITY: Buffer='%2'

Fields #

NameDescription
ContextId GUID
Buffer AnsiString

Event ID 52: GENERAL_NOT_SEND_CUSTOM_ERROR: Reason='Reason'

#
Channel
Diagnostic, Operational

Message #

GENERAL_NOT_SEND_CUSTOM_ERROR: Reason='%2'

Fields #

NameDescription
ContextId GUID
Reason UInt32

Event ID 53: GENERAL_SET_REQUEST_HEADER: HeaderName='HeaderName',HeaderValue='HeaderValue',Replace='Replace'

#
Channel
Diagnostic, Operational

Message #

GENERAL_SET_REQUEST_HEADER: HeaderName='%2',HeaderValue='%3',Replace='%4'

Fields #

NameDescription
ContextId GUID
HeaderName AnsiString
HeaderValue AnsiString
Replace Boolean

Event ID 54: GENERAL_MODULE_FACTORY_FAILED: ModuleName='ModuleName',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

GENERAL_MODULE_FACTORY_FAILED: ModuleName='%2',ErrorCode='%3'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
ErrorCode UInt32

Event ID 55: GENERAL_ENDPOINT_INFORMATION: RemoteAddress='RemoteAddress',RemotePort='RemotePort',LocalAddress='LocalAddress',LocalPort='LocalPort'

#
Channel
Diagnostic, Operational

Message #

GENERAL_ENDPOINT_INFORMATION: RemoteAddress='%2',RemotePort='%3',LocalAddress='%4',LocalPort='%5'

Fields #

NameDescription
ContextId GUID
RemoteAddress AnsiString
RemotePort AnsiString
LocalAddress AnsiString
LocalPort AnsiString

Event ID 56: GENERAL_SET_RESPONSE_HEADER: HeaderName='HeaderName',HeaderValue='HeaderValue',Replace='Replace'

#
Channel
Diagnostic, Operational

Message #

GENERAL_SET_RESPONSE_HEADER: HeaderName='%2',HeaderValue='%3',Replace='%4'

Fields #

NameDescription
ContextId GUID
HeaderName AnsiString
HeaderValue AnsiString
Replace Boolean

Event ID 57: GENERAL_SET_RESPONSE_TRAILER: HeaderName='HeaderName',HeaderValue='HeaderValue',Replace='Replace'

#
Channel
Diagnostic, Operational

Message #

GENERAL_SET_RESPONSE_TRAILER: HeaderName='%2',HeaderValue='%3',Replace='%4'

Fields #

NameDescription
ContextId GUID
HeaderName AnsiString
HeaderValue AnsiString
Replace Boolean

Event ID 522: AUTH_START: AuthTypeSupported='AuthTypeSupported'

#
Channel
Diagnostic, Operational

Message #

AUTH_START: AuthTypeSupported='%2'

Fields #

NameDescription
ContextId GUID
AuthTypeSupported UInt32

Event ID 523: AUTH_SUCCEEDED: AuthType='AuthType',NTLMUsed='NTLMUsed',RemoteUserName='RemoteUserName',AuthUserName='AuthUserName',TokenImpersonationLevel='TokenImpersonationLevel'

#
Channel
Diagnostic, Operational

Message #

AUTH_SUCCEEDED: AuthType='%2',NTLMUsed='%3',RemoteUserName='%4',AuthUserName='%5',TokenImpersonationLevel='%6'

Fields #

NameDescription
ContextId GUID
AuthType UInt32
NTLMUsed Boolean
RemoteUserName UnicodeString
AuthUserName UnicodeString
TokenImpersonationLevel UInt32

Event ID 524: AUTH_TYPE_NOT_SUPPORTED

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 525: AUTH_INVALID_ANON_ACCOUNT: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

AUTH_INVALID_ANON_ACCOUNT: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 526: AUTH_PASSWD_CHANGE_NEEDED

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 527: AUTH_PASSWD_CHANGE_DISABLED

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 528: AUTH_BAD_BASIC_HEADER

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 529: AUTH_BASIC_LOGON_FAILED: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

AUTH_BASIC_LOGON_FAILED: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 530: AUTH_WDIGEST_LOGON_FAILED: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

AUTH_WDIGEST_LOGON_FAILED: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 531: AUTH_IISDIGEST_LOGON_FAILED: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

AUTH_IISDIGEST_LOGON_FAILED: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 532: AUTH_PASSPORT_LOGON_FAILED: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

AUTH_PASSPORT_LOGON_FAILED: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 533: AUTH_SSPI_LOGON_FAILED: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

AUTH_SSPI_LOGON_FAILED: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 534: AUTH_NTLM_NULL_SESSION

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 535: AUTH_SSPI_CONTINUE_NEEDED: PackageName='PackageName'

#
Channel
Diagnostic, Operational

Message #

AUTH_SSPI_CONTINUE_NEEDED: PackageName='%2'

Fields #

NameDescription
ContextId GUID
PackageName UnicodeString

Event ID 536: AUTH_ANON_PASSWD_CHANGE_NEEDED

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 539: AUTH_REQUEST_AUTH_TYPE: RequestAuthType='RequestAuthType'

#
Channel
Diagnostic, Operational

Message #

AUTH_REQUEST_AUTH_TYPE: RequestAuthType='%2'

Fields #

NameDescription
ContextId GUID
RequestAuthType UInt32

Event ID 540: AUTH_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 567: AUTH_KERBEROS_FAILED: KMUsed='KMUsed',APUserName='APUserName',SPNName='SPNName',ADConfigIsOK='ADConfigIsOK',KerberosInfo='KerberosInfo'

#
Channel
Diagnostic, Operational

Message #

AUTH_KERBEROS_FAILED: KMUsed='%2',APUserName='%3',SPNName='%4',ADConfigIsOK='%5',KerberosInfo='%6'

Fields #

NameDescription
ContextId GUID
KMUsed Boolean
APUserName UnicodeString
SPNName UnicodeString
ADConfigIsOK Boolean
KerberosInfo UnicodeString

Event ID 778: SECURITY_ILLEGAL_SHORT_FILENAME: FileName='FileName'

#
Channel
Diagnostic, Operational

Message #

SECURITY_ILLEGAL_SHORT_FILENAME: FileName='%2'

Fields #

NameDescription
ContextId GUID
FileName UnicodeString

Event ID 779: SECURITY_REJECTED_IP: IPAddress='IPAddress'

#
Channel
Diagnostic, Operational

Message #

SECURITY_REJECTED_IP: IPAddress='%2'

Fields #

NameDescription
ContextId GUID
IPAddress UnicodeString

Event ID 780: SECURITY_REJECTED_HOSTNAME: HostName='HostName'

#
Channel
Diagnostic, Operational

Message #

SECURITY_REJECTED_HOSTNAME: HostName='%2'

Fields #

NameDescription
ContextId GUID
HostName UnicodeString

Event ID 781: SECURITY_REJECTED_REQUIRE_SSL_128

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 782: SECURITY_FILE_ACCESS_DENIED: FileName='FileName',AccountName='AccountName',DomainName='DomainName'

#
Channel
Diagnostic, Operational

Message #

SECURITY_FILE_ACCESS_DENIED: FileName='%2',AccountName='%3',DomainName='%4'

Fields #

NameDescription
ContextId GUID
FileName UnicodeString
AccountName UnicodeString
DomainName UnicodeString

Event ID 783: SECURITY_DENIED_BY_MIMEMAP: FileName='FileName'

#
Channel
Diagnostic, Operational

Message #

SECURITY_DENIED_BY_MIMEMAP: FileName='%2'

Fields #

NameDescription
ContextId GUID
FileName UnicodeString

Event ID 784: SECURITY_DENIED_BY_ISAPI_RESTRICTION: ImageName='ImageName'

#
Channel
Diagnostic, Operational

Message #

SECURITY_DENIED_BY_ISAPI_RESTRICTION: ImageName='%2'

Fields #

NameDescription
ContextId GUID
ImageName UnicodeString

Event ID 785: SECURITY_DENIED_BY_CGI_RESTRICTION: ImageName='ImageName'

#
Channel
Diagnostic, Operational

Message #

SECURITY_DENIED_BY_CGI_RESTRICTION: ImageName='%2'

Fields #

NameDescription
ContextId GUID
ImageName UnicodeString

Event ID 786: SECURITY_DENIED_BY_ACCESS_FLAGS: CurrentFlags='CurrentFlags',NeededFlags='NeededFlags'

#
Channel
Diagnostic, Operational

Message #

SECURITY_DENIED_BY_ACCESS_FLAGS: CurrentFlags='%2',NeededFlags='%3'

Fields #

NameDescription
ContextId GUID
CurrentFlags UInt32
NeededFlags UInt32

Event ID 1025: FILTER_START: FilterName='FilterName'

#
Channel
Diagnostic, Operational

Message #

FILTER_START: FilterName='%2'

Fields #

NameDescription
ContextId GUID
FilterName UnicodeString

Event ID 1026: FILTER_END: NotificationStatus='NotificationStatus'

#
Channel
Diagnostic, Operational

Message #

FILTER_END: NotificationStatus='%2'

Fields #

NameDescription
ContextId GUID
NotificationStatus UInt32

Event ID 1036: FILTER_ERROR: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

FILTER_ERROR: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 1037: FILTER_PREPROC_HEADERS_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1038: FILTER_PREPROC_HEADERS_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1039: FILTER_URL_MAP_START: OrigURL='OrigURL',OrigPath='OrigPath',AccessPerms='AccessPerms',MatchingPath='MatchingPath',MatchingURL='MatchingURL',ScriptMapEntry='ScriptMapEntry'

#
Channel
Diagnostic, Operational

Message #

FILTER_URL_MAP_START: OrigURL='%2',OrigPath='%3',AccessPerms='%4',MatchingPath='%5',MatchingURL='%6',ScriptMapEntry='%7'

Fields #

NameDescription
ContextId GUID
OrigURL AnsiString
OrigPath AnsiString
AccessPerms UInt32
MatchingPath UInt32
MatchingURL UInt32
ScriptMapEntry AnsiString

Event ID 1040: FILTER_URL_MAP_END: FinalURL='FinalURL',FinalPath='FinalPath',AccessPerms='AccessPerms',MatchingPath='MatchingPath',MatchingURL='MatchingURL',ScriptMapEntry='ScriptMapEntry'

#
Channel
Diagnostic, Operational

Message #

FILTER_URL_MAP_END: FinalURL='%2',FinalPath='%3',AccessPerms='%4',MatchingPath='%5',MatchingURL='%6',ScriptMapEntry='%7'

Fields #

NameDescription
ContextId GUID
FinalURL AnsiString
FinalPath AnsiString
AccessPerms UInt32
MatchingPath UInt32
MatchingURL UInt32
ScriptMapEntry AnsiString

Event ID 1041: FILTER_AUTHENTICATION_START: OrigUserName='OrigUserName'

#
Channel
Diagnostic, Operational

Message #

FILTER_AUTHENTICATION_START: OrigUserName='%2'

Fields #

NameDescription
ContextId GUID
OrigUserName AnsiString

Event ID 1042: FILTER_AUTHENTICATION_END: FinalUserName='FinalUserName',PasswordChanged='PasswordChanged'

#
Channel
Diagnostic, Operational

Message #

FILTER_AUTHENTICATION_END: FinalUserName='%2',PasswordChanged='%3'

Fields #

NameDescription
ContextId GUID
FinalUserName AnsiString
PasswordChanged Boolean

Event ID 1043: FILTER_AUTH_COMPLETE_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1044: FILTER_AUTH_COMPLETE_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1045: FILTER_SEND_RESPONSE_START: HttpStatus='HttpStatus'

#
Channel
Diagnostic, Operational

Message #

FILTER_SEND_RESPONSE_START: HttpStatus='%2'

Fields #

NameDescription
ContextId GUID
HttpStatus UInt32

Event ID 1046: FILTER_SEND_RESPONSE_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1047: FILTER_END_OF_REQUEST_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1048: FILTER_END_OF_REQUEST_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1049: FILTER_LOG_START: OrigClientHostName='OrigClientHostName',OrigClientUserName='OrigClientUserName',OrigServerName='OrigServerName',OrigOperation='OrigOperation',OrigTarget='OrigTarget',OrigParameter

#
Channel
Diagnostic, Operational

Description

FILTER_LOG_START: OrigClientHostName='OrigClientHostName',OrigClientUserName='OrigClientUserName',OrigServerName='OrigServerName',OrigOperation='OrigOperation',OrigTarget='OrigTarget',OrigParameters='OrigParameters',OrigHttpStatus='OrigHttpStatus',OrigWin32Status='OrigWin32Status'.

Message #

FILTER_LOG_START: OrigClientHostName='%2',OrigClientUserName='%3',OrigServerName='%4',OrigOperation='%5',OrigTarget='%6',OrigParameters='%7',OrigHttpStatus='%8',OrigWin32Status='%9'

Fields #

NameDescription
ContextId GUID
OrigClientHostName AnsiString
OrigClientUserName AnsiString
OrigServerName AnsiString
OrigOperation AnsiString
OrigTarget AnsiString
OrigParameters AnsiString
OrigHttpStatus UInt32
OrigWin32Status UInt32

Event ID 1050: FILTER_LOG_END: FinalClientHostName='FinalClientHostName',FinalClientUserName='FinalClientUserName',FinalServerName='FinalServerName',FinalOperation='FinalOperation',FinalTarget='FinalTarget',Final

#
Channel
Diagnostic, Operational

Description

FILTER_LOG_END: FinalClientHostName='FinalClientHostName',FinalClientUserName='FinalClientUserName',FinalServerName='FinalServerName',FinalOperation='FinalOperation',FinalTarget='FinalTarget',FinalParameters='FinalParameters',FinalHttpStatus='FinalHttpStatus',FinalWin32Status='FinalWin32Status'.

Message #

FILTER_LOG_END: FinalClientHostName='%2',FinalClientUserName='%3',FinalServerName='%4',FinalOperation='%5',FinalTarget='%6',FinalParameters='%7',FinalHttpStatus='%8',FinalWin32Status='%9'

Fields #

NameDescription
ContextId GUID
FinalClientHostName AnsiString
FinalClientUserName AnsiString
FinalServerName AnsiString
FinalOperation AnsiString
FinalTarget AnsiString
FinalParameters AnsiString
FinalHttpStatus UInt32
FinalWin32Status UInt32

Event ID 1051: FILTER_SEND_RAW_DATA_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1052: FILTER_SEND_RAW_DATA_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1053: FILTER_ACCESS_DENIED_START: RequestedURL='RequestedURL',PhysicalPath='PhysicalPath',DenialReason='DenialReason'

#
Channel
Diagnostic, Operational

Message #

FILTER_ACCESS_DENIED_START: RequestedURL='%2',PhysicalPath='%3',DenialReason='%4'

Fields #

NameDescription
ContextId GUID
RequestedURL AnsiString
PhysicalPath AnsiString
DenialReason UInt32

Event ID 1054: FILTER_ACCESS_DENIED_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1055: FILTER_SET_REQ_HEADER: HeaderName='HeaderName',HeaderValue='HeaderValue'

#
Channel
Diagnostic, Operational

Message #

FILTER_SET_REQ_HEADER: HeaderName='%2',HeaderValue='%3'

Fields #

NameDescription
ContextId GUID
HeaderName AnsiString
HeaderValue AnsiString

Event ID 1056: FILTER_ADD_REQ_HEADER: HeaderName='HeaderName',HeaderValue='HeaderValue'

#
Channel
Diagnostic, Operational

Message #

FILTER_ADD_REQ_HEADER: HeaderName='%2',HeaderValue='%3'

Fields #

NameDescription
ContextId GUID
HeaderName AnsiString
HeaderValue AnsiString

Event ID 1057: FILTER_SET_RESP_HEADER: HeaderName='HeaderName',HeaderValue='HeaderValue'

#
Channel
Diagnostic, Operational

Message #

FILTER_SET_RESP_HEADER: HeaderName='%2',HeaderValue='%3'

Fields #

NameDescription
ContextId GUID
HeaderName AnsiString
HeaderValue AnsiString

Event ID 1058: FILTER_ADD_RESP_HEADER: HeaderName='HeaderName',HeaderValue='HeaderValue'

#
Channel
Diagnostic, Operational

Message #

FILTER_ADD_RESP_HEADER: HeaderName='%2',HeaderValue='%3'

Fields #

NameDescription
ContextId GUID
HeaderName AnsiString
HeaderValue AnsiString

Event ID 1537: CGI_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1538: CGI_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1539: CGI_LAUNCH: CommandLine='CommandLine',ErrorCode='ErrorCode',ProcessId='ProcessId'

#
Channel
Diagnostic, Operational

Message #

CGI_LAUNCH: CommandLine='%2',ErrorCode='%3',ProcessId='%4'

Fields #

NameDescription
ContextId GUID
CommandLine UnicodeString
ErrorCode UInt32
ProcessId UInt32

Event ID 1540: CGI_TIMEOUT: Headers='Headers'

#
Channel
Diagnostic, Operational

Message #

CGI_TIMEOUT: Headers='%2'

Fields #

NameDescription
ContextId GUID
Headers AnsiString

Event ID 1541: CGI_PREMATURE_TERMINATION: Headers='Headers'

#
Channel
Diagnostic, Operational

Message #

CGI_PREMATURE_TERMINATION: Headers='%2'

Fields #

NameDescription
ContextId GUID
Headers AnsiString

Event ID 1542: CGI_REQUEST_ENTITY_SENT

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1543: CGI_HEADERS_RECEIVED

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1793: STATIC_COMPRESSION_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1794: STATIC_COMPRESSION_SUCCESS

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1795: STATIC_COMPRESSION_NOT_SUCCESS: Reason='Reason'

#
Channel
Diagnostic, Operational

Message #

STATIC_COMPRESSION_NOT_SUCCESS: Reason='%2'

Fields #

NameDescription
ContextId GUID
Reason UInt32

Event ID 1796: STATIC_COMPRESSION_CREATE_START: OriginalFileName='OriginalFileName'

#
Channel
Diagnostic, Operational

Message #

STATIC_COMPRESSION_CREATE_START: OriginalFileName='%2'

Fields #

NameDescription
ContextId GUID
OriginalFileName UnicodeString

Event ID 1797: STATIC_COMPRESSION_CREATE_END: ErrorCode='ErrorCode',OriginalFileName='OriginalFileName',OriginalFileSize='OriginalFileSize',CompressedFileName='CompressedFileName',CompressedFileSize='CompressedFi

#
Channel
Diagnostic, Operational

Description

STATIC_COMPRESSION_CREATE_END: ErrorCode='ErrorCode',OriginalFileName='OriginalFileName',OriginalFileSize='OriginalFileSize',CompressedFileName='CompressedFileName',CompressedFileSize='CompressedFileSize'.

Message #

STATIC_COMPRESSION_CREATE_END: ErrorCode='%2',OriginalFileName='%3',OriginalFileSize='%4',CompressedFileName='%5',CompressedFileSize='%6'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32
OriginalFileName UnicodeString
OriginalFileSize UInt32
CompressedFileName UnicodeString
CompressedFileSize UInt32

Event ID 1798: DYNAMIC_COMPRESSION_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1799: DYNAMIC_COMPRESSION_SUCCESS

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1800: DYNAMIC_COMPRESSION_NOT_SUCCESS: Reason='Reason'

#
Channel
Diagnostic, Operational

Message #

DYNAMIC_COMPRESSION_NOT_SUCCESS: Reason='%2'

Fields #

NameDescription
ContextId GUID
Reason UInt32

Event ID 1801: DYNAMIC_COMPRESSION_DO: OriginalSize='OriginalSize',CompressedSize='CompressedSize'

#
Channel
Diagnostic, Operational

Message #

DYNAMIC_COMPRESSION_DO: OriginalSize='%2',CompressedSize='%3'

Fields #

NameDescription
ContextId GUID
OriginalSize UInt32
CompressedSize UInt32

Event ID 1802: DYNAMIC_COMPRESSION_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 1803: STATIC_COMPRESSION_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 2058: FILE_CACHE_ACCESS_START: FileName='FileName',UserName='UserName',DomainName='DomainName'

#
Channel
Diagnostic, Operational

Message #

FILE_CACHE_ACCESS_START: FileName='%2',UserName='%3',DomainName='%4'

Fields #

NameDescription
ContextId GUID
FileName UnicodeString
UserName UnicodeString
DomainName UnicodeString

Event ID 2059: FILE_CACHE_ACCESS_END: Successful='Successful',FileFromCache='FileFromCache',FileAddedToCache='FileAddedToCache',FileDirmoned='FileDirmoned',LastModCheckErrorIgnored='LastModCheckErrorIgnored',Erro

#
Channel
Diagnostic, Operational

Description

FILE_CACHE_ACCESS_END: Successful='Successful',FileFromCache='FileFromCache',FileAddedToCache='FileAddedToCache',FileDirmoned='FileDirmoned',LastModCheckErrorIgnored='LastModCheckErrorIgnored',ErrorCode='ErrorCode',LastModifiedTime='LastModifiedTime'.

Message #

FILE_CACHE_ACCESS_END: Successful='%2',FileFromCache='%3',FileAddedToCache='%4',FileDirmoned='%5',LastModCheckErrorIgnored='%6',ErrorCode='%7',LastModifiedTime='%8'

Fields #

NameDescription
ContextId GUID
Successful Boolean
FileFromCache Boolean
FileAddedToCache Boolean
FileDirmoned Boolean
LastModCheckErrorIgnored Boolean
ErrorCode UInt32
LastModifiedTime AnsiString

Event ID 2060: URL_CACHE_ACCESS_START: RequestURL='RequestURL'

#
Channel
Diagnostic, Operational

Message #

URL_CACHE_ACCESS_START: RequestURL='%2'

Fields #

NameDescription
ContextId GUID
RequestURL UnicodeString

Event ID 2061: URL_CACHE_ACCESS_END: PhysicalPath='PhysicalPath',URLInfoFromCache='URLInfoFromCache',URLInfoAddedToCache='URLInfoAddedToCache',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

URL_CACHE_ACCESS_END: PhysicalPath='%2',URLInfoFromCache='%3',URLInfoAddedToCache='%4',ErrorCode='%5'

Fields #

NameDescription
ContextId GUID
PhysicalPath UnicodeString
URLInfoFromCache Boolean
URLInfoAddedToCache Boolean
ErrorCode UInt32

Event ID 2062: HTTPSYS_CACHEABLE: HttpsysCacheable='HttpsysCacheable',Reason='Reason',CachePolicy='CachePolicy',TimeToLive='TimeToLive'

#
Channel
Diagnostic, Operational

Message #

HTTPSYS_CACHEABLE: HttpsysCacheable='%2',Reason='%3',CachePolicy='%4',TimeToLive='%5'

Fields #

NameDescription
ContextId GUID
HttpsysCacheable Boolean
Reason UInt32
CachePolicy UInt32
TimeToLive UInt32

Event ID 2063: OUTPUT_CACHE_LOOKUP_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 2064: OUTPUT_CACHE_LOOKUP_END: Result='Result'

#
Channel
Diagnostic, Operational

Message #

OUTPUT_CACHE_LOOKUP_END: Result='%2'

Fields #

NameDescription
ContextId GUID
Result UInt32

Event ID 2065: OUTPUT_CACHE_UPDATE_START: CachePolicy='CachePolicy',TimeToLive='TimeToLive'

#
Channel
Diagnostic, Operational

Message #

OUTPUT_CACHE_UPDATE_START: CachePolicy='%2',TimeToLive='%3'

Fields #

NameDescription
ContextId GUID
CachePolicy UInt32
TimeToLive UInt32

Event ID 2066: OUTPUT_CACHE_UPDATE_END: Result='Result'

#
Channel
Diagnostic, Operational

Message #

OUTPUT_CACHE_UPDATE_END: Result='%2'

Fields #

NameDescription
ContextId GUID
Result UInt32

Event ID 2067: OUTPUT_CACHE_DISABLED

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 2068: FILE_CACHE_CREATE_FILE: FileName='FileName',UserName='UserName',DomainName='DomainName'

#
Channel
Diagnostic, Operational

Message #

FILE_CACHE_CREATE_FILE: FileName='%2',UserName='%3',DomainName='%4'

Fields #

NameDescription
ContextId GUID
FileName UnicodeString
UserName UnicodeString
DomainName UnicodeString

Event ID 2305: NOTIFY_MODULE_START: ModuleName='.

#
Channel
Diagnostic

Description

NOTIFY_MODULE_START: ModuleName='ModuleName',Notification='Notification',fIsPostNotification='fIsPostNotification'.

Message #

NOTIFY_MODULE_START: ModuleName='%2',Notification='%3',fIsPostNotification='%4'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Notification UInt32
fIsPostNotification Boolean

Event ID 2305: NOTIFY_MODULE_START: ModuleName='ModuleName',Notification='Notification',fIsPostNotification='fIsPostNotification'

#
Channel
Operational

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Notification UInt32
fIsPostNotification Boolean

Event ID 2306: NOTIFY_MODULE_END: ModuleName='.

#
Channel
Diagnostic

Description

NOTIFY_MODULE_END: ModuleName='ModuleName',Notification='Notification',fIsPostNotificationEvent='fIsPostNotificationEvent',NotificationStatus='NotificationStatus'.

Message #

NOTIFY_MODULE_END: ModuleName='%2',Notification='%3',fIsPostNotificationEvent='%4',NotificationStatus='%5'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Notification UInt32
fIsPostNotificationEvent Boolean
NotificationStatus UInt32

Event ID 2306: NOTIFY_MODULE_END: ModuleName='ModuleName',Notification='Notification',fIsPostNotificationEvent='fIsPostNotificationEvent',NotificationStatus='NotificationStatus'

#
Channel
Operational

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Notification UInt32
fIsPostNotificationEvent Boolean
NotificationStatus UInt32

Event ID 2307: NOTIFY_MODULE_COMPLETION: ModuleName='.

#
Channel
Diagnostic

Description

NOTIFY_MODULE_COMPLETION: ModuleName='ModuleName',Notification='Notification',fIsPostNotificationEvent='fIsPostNotificationEvent',CompletionBytes='CompletionBytes',ErrorCode='ErrorCode'.

Message #

NOTIFY_MODULE_COMPLETION: ModuleName='%2',Notification='%3',fIsPostNotificationEvent='%4',CompletionBytes='%5',ErrorCode='%6'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Notification UInt32
fIsPostNotificationEvent Boolean
CompletionBytes UInt32
ErrorCode UInt32

Event ID 2307: NOTIFY_MODULE_COMPLETION: ModuleName='ModuleName',Notification='Notification',fIsPostNotificationEvent='fIsPostNotificationEvent',CompletionBytes='CompletionBytes',ErrorCode='ErrorCode'

#
Channel
Operational

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Notification UInt32
fIsPostNotificationEvent Boolean
CompletionBytes UInt32
ErrorCode UInt32

Event ID 2308: PRE_BEGIN_REQUEST_START: ModuleName='ModuleName'

#
Channel
Diagnostic, Operational

Message #

PRE_BEGIN_REQUEST_START: ModuleName='%2'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString

Event ID 2309: PRE_BEGIN_REQUEST_END: ModuleName='ModuleName',NotificationStatus='NotificationStatus'

#
Channel
Diagnostic, Operational

Message #

PRE_BEGIN_REQUEST_END: ModuleName='%2',NotificationStatus='%3'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
NotificationStatus UInt32

Event ID 2319: REQUEST_PROCESSING_ERROR: ModuleName='ModuleName',Notification='Notification',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

REQUEST_PROCESSING_ERROR: ModuleName='%2',Notification='%3',ErrorCode='%4'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Notification UInt32
ErrorCode UInt32

Event ID 2320: MODULE_SET_RESPONSE_ERROR_STATUS: ModuleName='ModuleName',Notification='Notification',HttpStatus='HttpStatus',HttpReason='HttpReason',HttpSubStatus='HttpSubStatus',ErrorCode='ErrorCode',ConfigExcep

#
Channel
Diagnostic, Operational

Description

MODULE_SET_RESPONSE_ERROR_STATUS: ModuleName='ModuleName',Notification='Notification',HttpStatus='HttpStatus',HttpReason='HttpReason',HttpSubStatus='HttpSubStatus',ErrorCode='ErrorCode',ConfigExceptionInfo='ConfigExceptionInfo'.

Message #

MODULE_SET_RESPONSE_ERROR_STATUS: ModuleName='%2',Notification='%3',HttpStatus='%4',HttpReason='%5',HttpSubStatus='%6',ErrorCode='%7',ConfigExceptionInfo='%8'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Notification UInt32
HttpStatus UInt32
HttpReason AnsiString
HttpSubStatus UInt16
ErrorCode UInt32
ConfigExceptionInfo UnicodeString

Event ID 2321: MODULE_SET_RESPONSE_SUCCESS_STATUS: ModuleName='ModuleName',Notification='Notification',HttpStatus='HttpStatus',HttpReason='HttpReason'

#
Channel
Diagnostic, Operational

Message #

MODULE_SET_RESPONSE_SUCCESS_STATUS: ModuleName='%2',Notification='%3',HttpStatus='%4',HttpReason='%5'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Notification UInt32
HttpStatus UInt32
HttpReason AnsiString

Event ID 2322: SET_RESPONSE_ERROR_DESCRIPTION: ErrorDescription='ErrorDescription'

#
Channel
Diagnostic, Operational

Message #

SET_RESPONSE_ERROR_DESCRIPTION: ErrorDescription='%2'

Fields #

NameDescription
ContextId GUID
ErrorDescription UnicodeString

Event ID 2561: MODULE_START: ModuleName='ModuleName',Data1='Data1',Data2='Data2',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

MODULE_START: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Data1 UnicodeString
Data2 UnicodeString
ErrorCode UInt32

Event ID 2562: MODULE_END: ModuleName='ModuleName',Data1='Data1',Data2='Data2',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

MODULE_END: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Data1 UnicodeString
Data2 UnicodeString
ErrorCode UInt32

Event ID 2563: MODULE_CRITICAL_ERROR: ModuleName='ModuleName',Data1='Data1',Data2='Data2',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

MODULE_CRITICAL_ERROR: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Data1 UnicodeString
Data2 UnicodeString
ErrorCode UInt32

Event ID 2564: MODULE_ERROR: ModuleName='ModuleName',Data1='Data1',Data2='Data2',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

MODULE_ERROR: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Data1 UnicodeString
Data2 UnicodeString
ErrorCode UInt32

Event ID 2565: MODULE_WARNING: ModuleName='ModuleName',Data1='Data1',Data2='Data2',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

MODULE_WARNING: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Data1 UnicodeString
Data2 UnicodeString
ErrorCode UInt32

Event ID 2566: MODULE_INFORMATION: ModuleName='ModuleName',Data1='Data1',Data2='Data2',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

MODULE_INFORMATION: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Data1 UnicodeString
Data2 UnicodeString
ErrorCode UInt32

Event ID 2567: MODULE_VERBOSE: ModuleName='ModuleName',Data1='Data1',Data2='Data2',ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

MODULE_VERBOSE: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields #

NameDescription
ContextId GUID
ModuleName UnicodeString
Data1 UnicodeString
Data2 UnicodeString
ErrorCode UInt32

Event ID 3329: FASTCGI_ACTIVITY_TIMEOUT

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3330: FASTCGI_REQUEST_TIMEOUT

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3331: FASTCGI_UNEXPECTED_EXIT

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3332: FASTCGI_RAPID_FAILURE_PROTECTION

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3333: FASTCGI_PATH_NOT_FOUND

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3334: FASTCGI_SCRIPT_PROCESSOR_MISSING

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3335: FASTCGI_ADD_JOBOBJECT_FAIL

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3336: FASTCGI_APPLICATION_MANAGER_SHUTDOWN

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3337: FASTCGI_QUEUE_FULL

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3338: FASTCGI_UNKNOWN_ERROR: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

FASTCGI_UNKNOWN_ERROR: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 3339: FASTCGI_RESPONSE_WRITTEN

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3340: FASTCGI_WAITING_FOR_RESPONSE

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3341: FASTCGI_STDERR_TRACE_ERROR: Message='Message'

#
Channel
Diagnostic, Operational

Message #

FASTCGI_STDERR_TRACE_ERROR: Message='%2'

Fields #

NameDescription
ContextId GUID
Message UnicodeString

Event ID 3342: FASTCGI_STDERR_TRACE_WARNING: Message='Message'

#
Channel
Diagnostic, Operational

Message #

FASTCGI_STDERR_TRACE_WARNING: Message='%2'

Fields #

NameDescription
ContextId GUID
Message UnicodeString

Event ID 3343: FASTCGI_STDERR_TRACE_INFO: Message='Message'

#
Channel
Diagnostic, Operational

Message #

FASTCGI_STDERR_TRACE_INFO: Message='%2'

Fields #

NameDescription
ContextId GUID
Message UnicodeString

Event ID 3344: FASTCGI_QUEUE_REQUEST: PositionInQueue='PositionInQueue',MaxInstances='MaxInstances'

#
Channel
Diagnostic, Operational

Message #

FASTCGI_QUEUE_REQUEST: PositionInQueue='%2',MaxInstances='%3'

Fields #

NameDescription
ContextId GUID
PositionInQueue UInt32
MaxInstances UInt32

Event ID 3345: FASTCGI_ASSIGN_PROCESS: CommandLine='CommandLine',IsNewProcess='IsNewProcess',ProcessId='ProcessId',RequestNumber='RequestNumber'

#
Channel
Diagnostic, Operational

Message #

FASTCGI_ASSIGN_PROCESS: CommandLine='%2',IsNewProcess='%3',ProcessId='%4',RequestNumber='%5'

Fields #

NameDescription
ContextId GUID
CommandLine UnicodeString
IsNewProcess Boolean
ProcessId UInt32
RequestNumber UInt32

Event ID 3346: FASTCGI_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3347: FASTCGI_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3585: ISAPI_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3586: ISAPI_END

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3841: WEBSOCKET_INITIALIZE_FAILED: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_INITIALIZE_FAILED: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 3842: WEBSOCKET_HANDSHAKE_START

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3843: WEBSOCKET_HANDSHAKE_SUCCESS

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3844: WEBSOCKET_HANDSHAKE_NOT_SUCCESS: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_HANDSHAKE_NOT_SUCCESS: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 3845: WEBSOCKET_READ_FRAGMENT_START: BufferSize='BufferSize'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_READ_FRAGMENT_START: BufferSize='%2'

Fields #

NameDescription
ContextId GUID
BufferSize UInt32

Event ID 3846: WEBSOCKET_READ_FRAGMENT_END_PENDING

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3847: WEBSOCKET_READ_FRAGMENT_END_SUCCESS: BytesReceived='BytesReceived'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_READ_FRAGMENT_END_SUCCESS: BytesReceived='%2'

Fields #

NameDescription
ContextId GUID
BytesReceived UInt32

Event ID 3848: WEBSOCKET_READ_FRAGMENT_END_NOT_SUCCESS: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_READ_FRAGMENT_END_NOT_SUCCESS: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 3849: WEBSOCKET_WRITE_FRAGMENT_START: DataType='DataType',DataSize='DataSize'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_WRITE_FRAGMENT_START: DataType='%2',DataSize='%3'

Fields #

NameDescription
ContextId GUID
DataType UInt32
DataSize UInt32

Event ID 3850: WEBSOCKET_WRITE_FRAGMENT_END_PENDING

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3851: WEBSOCKET_WRITE_FRAGMENT_END_SUCCESS: BytesSent='BytesSent'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_WRITE_FRAGMENT_END_SUCCESS: BytesSent='%2'

Fields #

NameDescription
ContextId GUID
BytesSent UInt32

Event ID 3852: WEBSOCKET_WRITE_FRAGMENT_END_NOT_SUCCESS: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_WRITE_FRAGMENT_END_NOT_SUCCESS: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 3853: WEBSOCKET_APPLICATION_CLOSE_CONNECTION

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3854: WEBSOCKET_MODULE_CLOSE_CONNECTION: Reason='Reason'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_MODULE_CLOSE_CONNECTION: Reason='%2'

Fields #

NameDescription
ContextId GUID
Reason UInt32

Event ID 3855: WEBSOCKET_READ_IO_NOT_SUCCESS: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_READ_IO_NOT_SUCCESS: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 3856: WEBSOCKET_WRITE_IO_NOT_SUCCESS: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_WRITE_IO_NOT_SUCCESS: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Event ID 3857: WEBSOCKET_RECEIVED_CLOSE: Status='Status',Reason='Reason'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_RECEIVED_CLOSE: Status='%2',Reason='%3'

Fields #

NameDescription
ContextId GUID
Status UInt32NTSTATUS reference
Reason UnicodeString

Event ID 3858: WEBSOCKET_SEND_CLOSE_START: Status='Status',Reason='Reason'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_SEND_CLOSE_START: Status='%2',Reason='%3'

Fields #

NameDescription
ContextId GUID
Status UInt32NTSTATUS reference
Reason UnicodeString

Event ID 3859: WEBSOCKET_SEND_CLOSE_END_SUCCESS

#
Channel
Diagnostic, Operational

Fields #

NameDescription
ContextId GUID

Event ID 3860: WEBSOCKET_SEND_CLOSE_END_NOT_SUCCESS: ErrorCode='ErrorCode'

#
Channel
Diagnostic, Operational

Message #

WEBSOCKET_SEND_CLOSE_END_NOT_SUCCESS: ErrorCode='%2'

Fields #

NameDescription
ContextId GUID
ErrorCode UInt32

Provenance

ETW provider GUID de4649c9-15e8-4fea-9d85-1cdda520c334

Defined in iisetw.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB