Microsoft-Windows-Kernel-CPU-Starvation

Event	Title	Channel	Sample	Rule
1	CPU CpuNumber exceeded its single DPC soft timeout of SoftTimeoutTicks clock …	Operational	N	N
2	CPU CpuNumber exceeded its cumulative DPC soft timeout of …	Operational	N	N
3	Thread DpcSequenceNumber on CPU ThresholdTicks exceeded the threshold of …	Operational	N	N
4	Capture DPC sequence number DpcSequenceNumber at tick Tick.	Operational	N	N

Event ID 1: CPU CpuNumber exceeded its single DPC soft timeout of SoftTimeoutTicks clock ticks.

Channel: Operational
Task: DPCSoftTimeout
Opcode: SingleDPCSoftTimeoutReached

Description

CPU CpuNumber exceeded its single DPC soft timeout of SoftTimeoutTicks clock ticks. A single DPC in module ModuleName, with key DpcRoutineKey, ran for TickCount clock ticks on the thread with TID ThreadID.

Message #

CPU %3 exceeded its single DPC soft timeout of %5 clock ticks. A single DPC in module %7, with key %1, ran for %4 clock ticks on the thread with TID %2.

Fields #

Name	Description
`DpcRoutineKey` Pointer
`ThreadID` UInt32
`CpuNumber` UInt32
`TickCount` UInt32
`SoftTimeoutTicks` UInt32
`ModuleNameLength` UInt16
`ModuleName` UnicodeString

Event ID 2: CPU CpuNumber exceeded its cumulative DPC soft timeout of CumulativeSoftTimeoutTicks clock ticks, by running at an IRQL greater than or equal to DISPATCH_LEVEL for CumulativeTickCount clock ticks...

Channel: Operational
Task: DPCSoftTimeout
Opcode: CumulativeDPCSoftTimeoutReached

Description

CPU CpuNumber exceeded its cumulative DPC soft timeout of CumulativeSoftTimeoutTicks clock ticks, by running at an IRQL greater than or equal to DISPATCH_LEVEL for CumulativeTickCount clock ticks on the thread with TID ThreadID.

Message #

CPU %2 exceeded its cumulative DPC soft timeout of %4 clock ticks, by running at an IRQL greater than or equal to DISPATCH_LEVEL for %3 clock ticks on the thread with TID %1.

Fields #

Name	Description
`ThreadID` UInt32
`CpuNumber` UInt32
`CumulativeTickCount` UInt32
`CumulativeSoftTimeoutTicks` UInt32

Event ID 3: Thread DpcSequenceNumber on CPU ThresholdTicks exceeded the threshold of CumulativeTickCount ticks running at DISPATCH_LEVEL or higher, profiling started with sequence number SingleTickCount.

Channel: Operational
Task: DPCProfiling
Opcode: DPCProfilingThresholdReached

Message #

Thread %1 on CPU %2 exceeded the threshold of %4 ticks running at DISPATCH_LEVEL or higher, profiling started with sequence number %3.

Fields #

Name	Description
`DpcSequenceNumber` UInt32
`ThresholdTicks` UInt32
`SingleTickCount` UInt32
`CumulativeTickCount` UInt32
`Cause` UInt32

Event ID 4: Capture DPC sequence number DpcSequenceNumber at tick Tick.

Channel: Operational
Task: DPCProfiling
Opcode: DPCProfilingStackCapture

Message #

Capture DPC sequence number %1 at tick %2.

Fields #

Name	Description
`DpcSequenceNumber` UInt32
`Tick` UInt32

Provenance

ETW provider GUID 7f54ca8a-6c72-5cbc-b96f-d0ef905b8bce

Defined in Microsoft-Windows-System-Events.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3932, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB