Microsoft-Windows-OcpUpdateAgent

Event	Title	Channel	Sample	Rule
100	A new deployment session was created with session ID {Prop_SessionId}.	Ocp Update Agent operational channel	N	N
101	Failed to create a new deployment session with error {HRESULT}.	Ocp Update Agent operational channel	N	N
200	Failed to generate a list of files to download with error {HRESULT}.	Ocp Update Agent operational channel	N	N
201	Requesting {Prop_NumFiles} files with total size {Prop_RequestSize}.	Ocp Update Agent operational channel	N	N
300	Failed to install updates with error {HRESULT}.	Ocp Update Agent operational channel	N	N
301	Update '{Prop_UnicodeString}' encountered install error {Win32Error}.	Ocp Update Agent operational channel	N	N
302	Update '{Prop_UnicodeString}' encountered import error {Win32Error}.	Ocp Update Agent operational channel	N	N
303	Update '{Prop_UnicodeString}' should have already existed on the machine; but …	Ocp Update Agent operational channel	N	N
304	Installation of update set '{Prop_Id}' requires the system to be rebooted.	Ocp Update Agent operational channel	N	N
305	Installation of update '{Prop_Id}' requires the system to be rebooted.	Ocp Update Agent operational channel	N	N
306	Installation of update set '{Prop_SetId}' is complete.	Ocp Update Agent operational channel	N	N
307	Updated product '{Prop_ProductId}' to version '{Prop_ProductVersion}'.	Ocp Update Agent operational channel	N	N
400	Failed to commit updates with error {HRESULT}.	Ocp Update Agent operational channel	N	N
500	Failed to clean up updates with error {HRESULT}.	Ocp Update Agent operational channel	N	N
600	Failed to cancel updates with error {HRESULT}.	Ocp Update Agent operational channel	N	N
601	Updates were cancelled with reason {HRESULT}.	Ocp Update Agent operational channel	N	N
700	Failed to merge updates with error {HRESULT}.	Ocp Update Agent operational channel	N	N
800	Failed to get update result post reboot with error {HRESULT}.	Ocp Update Agent operational channel	N	N
801	Updated product '{Prop_ProductId}' to last activated version …	Ocp Update Agent operational channel	N	N
802	Product '{Prop_ProductId}' was not updated to last activated version …	Ocp Update Agent operational channel	N	N
900	Failed to perform post download operation with error {HRESULT}.	Ocp Update Agent operational channel	N	N
1000	Parsed manifest for product '{Prop_ProductId}' at version '{Prop_Version1}' is …	Ocp Update Agent operational channel	N	N

Event ID 100: A new deployment session was created with session ID {Prop_SessionId}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`Prop_SessionId`

Event ID 101: Failed to create a new deployment session with error {HRESULT}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`HRESULT`

Event ID 200: Failed to generate a list of files to download with error {HRESULT}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`HRESULT`

Event ID 201: Requesting {Prop_NumFiles} files with total size {Prop_RequestSize}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`Prop_NumFiles`
`Prop_RequestSize`

Event ID 300: Failed to install updates with error {HRESULT}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`HRESULT`

Event ID 301: Update '{Prop_UnicodeString}' encountered install error {Win32Error}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`Prop_UnicodeString`
`Win32Error`

Event ID 302: Update '{Prop_UnicodeString}' encountered import error {Win32Error}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`Prop_UnicodeString`
`Win32Error`

Event ID 303: Update '{Prop_UnicodeString}' should have already existed on the machine; but was missing.

Channel: Ocp Update Agent operational channel

Description

Update '{Prop_UnicodeString}' should have already existed on the machine; but was missing. Error = {Win32Error}.

Message #

Update '{Prop_UnicodeString}' should have already existed on the machine; but was missing.  Error = {Win32Error}

Fields #

Name	Description
`Prop_UnicodeString`
`Win32Error`

Event ID 304: Installation of update set '{Prop_Id}' requires the system to be rebooted.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`Prop_Id`

Event ID 305: Installation of update '{Prop_Id}' requires the system to be rebooted.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`Prop_Id`

Event ID 306: Installation of update set '{Prop_SetId}' is complete.

Channel: Ocp Update Agent operational channel

Description

Installation of update set '{Prop_SetId}' is complete. {Prop_SuccessfulUpdates} updates out of {Prop_TotalUpdates} updates were successfully installed in {Prop_ElapsedMilliseconds} milliseconds.

Message #

Installation of update set '{Prop_SetId}' is complete.  {Prop_SuccessfulUpdates} updates out of {Prop_TotalUpdates} updates were successfully installed in {Prop_ElapsedMilliseconds} milliseconds

Fields #

Name	Description
`Prop_SetId`
`Prop_SuccessfulUpdates`
`Prop_TotalUpdates`
`Prop_ElapsedMilliseconds`

Event ID 307: Updated product '{Prop_ProductId}' to version '{Prop_ProductVersion}'.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`Prop_ProductId`
`Prop_ProductVersion`

Event ID 400: Failed to commit updates with error {HRESULT}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`HRESULT`

Event ID 500: Failed to clean up updates with error {HRESULT}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`HRESULT`

Event ID 600: Failed to cancel updates with error {HRESULT}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`HRESULT`

Event ID 601: Updates were cancelled with reason {HRESULT}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`HRESULT`

Event ID 700: Failed to merge updates with error {HRESULT}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`HRESULT`

Event ID 800: Failed to get update result post reboot with error {HRESULT}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`HRESULT`

Event ID 801: Updated product '{Prop_ProductId}' to last activated version '{Prop_ProductVersion}'.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`Prop_ProductId`
`Prop_ProductVersion`

Event ID 802: Product '{Prop_ProductId}' was not updated to last activated version '{Prop_ProductVersion}'.

Channel: Ocp Update Agent operational channel

Message #

Product '{Prop_ProductId}' was not updated to last activated version '{Prop_ProductVersion}'.Missing updates: {Prop_MissingUpdates}Missing drivers: {Prop_MissingDrivers}Unpublished drivers: {Prop_UnpublishedDrivers}Published drivers: {Prop_PublishedDrivers}Analysis errors: {Prop_AnalysisErrorDrivers}

Fields #

Name	Description
`Prop_ProductId`
`Prop_ProductVersion`
`Prop_MissingUpdates`
`Prop_MissingDrivers`
`Prop_UnpublishedDrivers`
`Prop_PublishedDrivers`
`Prop_AnalysisErrorDrivers`

Event ID 900: Failed to perform post download operation with error {HRESULT}.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`HRESULT`

Event ID 1000: Parsed manifest for product '{Prop_ProductId}' at version '{Prop_Version1}' is not greater than currently installed version '{Prop_Version2}'.

Channel: Ocp Update Agent operational channel

Fields #

Name	Description
`Prop_ProductId`
`Prop_Version1`
`Prop_Version2`