Microsoft-Windows-PortableWorkspaces-Creator-Tool

Event	Title	Channel	Sample	Rule
14	Finished provisioning a portable workspace.	Operational	N	N
1000	Selected device details: Friendly Name = {FriendlyName}; Name = {Name}; Drive …	Operational	N	N
1001	Selected image details: Path = {Path}; Architecture = {Architecture}; …	Operational	N	N
1003	Provision failed (HRESULT = {HRESULT}).	Operational	N	N
1006	The WIM file was not found at: {Path}.	Operational	N	N
1010	Validation of the WIM file failed (HRESULT: {HRESULT}).	Operational	N	N

Event ID 14: Finished provisioning a portable workspace.

Channel: Operational

Event ID 1000: Selected device details: Friendly Name = {FriendlyName}; Name = {Name}; Drive Letters = {DriveLetters}; Size = {Size}; MediaType = {MediaType}.

Channel: Operational

Fields #

Name	Description
`FriendlyName`
`Name`
`DriveLetters`
`Size`
`MediaType`

Event ID 1001: Selected image details: Path = {Path}; Architecture = {Architecture}; IsEnterprise = {IsEnterprise}.

Channel: Operational

Fields #

Name	Description
`Path`
`Architecture`
`IsEnterprise`

Event ID 1003: Provision failed (HRESULT = {HRESULT}).

Channel: Operational

Fields #

Name	Description
`HRESULT`

Event ID 1006: The WIM file was not found at: {Path}.

Channel: Operational

Fields #

Name	Description
`Path`

Event ID 1010: Validation of the WIM file failed (HRESULT: {HRESULT}).

Channel: Operational

Fields #

Name	Description
`HRESULT`