Microsoft-Windows-RasRoutingProtocols-BGP

Event	Title	Channel	Sample	Rule
1	Event ID 1	Operational	N	N
1	BGP peering manually started for peer Arg1.	Operational	N	N
2	Event ID 2	Operational	N	N
2	BGP peering manually started for peer Arg1 of routing domain Arg2.	Operational	N	N
3	Event ID 3	Operational	N	N
3	BGP peering manually stopped for peer Arg1.	Operational	N	N
4	Event ID 4	Operational	N	N
4	BGP peering manually stopped for peer Arg1 of routing domain Arg2.	Operational	N	N
5	Event ID 5	Operational	N	N
5	BGP peering established for peer Arg1.	Operational	N	N
6	Event ID 6	Operational	N	N
6	BGP peering established for peer Arg1 of routing domain Arg2.	Operational	N	N
7	Event ID 7	Operational	N	N
7	BGP peering session disconnected for peer Arg1 : Arg2.	Operational	N	N
8	Event ID 8	Operational	N	N
8	BGP peering session disconnected for peer Arg1 of routing domain Arg2 : Arg3.	Operational	N	N
9	Event ID 9	Operational	N	N
9	BGP peering state changed to Arg1 for peer Arg2.	Debug	N	N
10	Event ID 10	Operational	N	N
10	BGP peering state changed to Arg1 for peer Arg2 of routing domain Arg3.	Debug	N	N
11	Event ID 11	Operational	N	N
11	Maximum prefix limit reached for peer Arg1.	Operational	N	N
12	Event ID 12	Operational	N	N
12	Maximum prefix limit reached for peer Arg1 of routing domain Arg2.	Operational	N	N
13	Event ID 13	Operational	N	N
13	BGP peering attempt failed for peer Arg1 : Arg2.	Operational	N	N
14	Event ID 14	Operational	N	N
14	BGP peering attempt failed for peer Arg1 of routing domain Arg2 : Arg3.	Operational	N	N
15	Event ID 15	Operational	N	N
15	BGP peering collision detected for peer Arg1.	Operational	N	N
16	Event ID 16	Operational	N	N
16	BGP peering collision detected for peer Arg1 of routing domain Arg2.	Operational	N	N
17	Event ID 17	Operational	N	N
17	HoldTime set to Arg1 sec for peer Arg2.	Operational	N	N
18	Event ID 18	Operational	N	N
18	HoldTime set to Arg1 sec for peer Arg2 of routing domain Arg3.	Operational	N	N
19	Event ID 19	Operational	N	N
19	TCP connection attempt failed for BGP peer Arg1.	Debug	N	N
20	Event ID 20	Operational	N	N
20	TCP connection attempt failed for BGP peer Arg1 of routing domain Arg2.	Debug	N	N
21	Event ID 21	Operational	N	N
21	Cannot resolve next-hop Arg1 for destination Arg2, learned from peer Arg3.	Debug	N	N
22	Event ID 22	Operational	N	N
22	Cannot resolve next-hop Arg1 for destination Arg2, learned from peer Arg3 of …	Debug	N	N
23	Event ID 23	Operational	N	N
23	Routes to Arg1, learned from peer Arg2 were discarded because of ingress routing …	Debug	N	N
24	Event ID 24	Operational	N	N
24	Routes to Arg1, learned from peer Arg2 of routing domain Arg3 were discarded …	Debug	N	N
25	Event ID 25	Operational	N	N
25	Routes to Arg1, were suppressed from advertisement to peer Arg2 because of …	Debug	N	N
26	Event ID 26	Operational	N	N
26	Routes to Arg1, were suppressed from advertisement to peer Arg2 of routing …	Debug	N	N

Event ID 1

Channel: Operational

Description

BGP peering manually started for peer .

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 1: BGP peering manually started for peer Arg1.

Channel: Operational

Message #

BGP peering manually started for peer %1.

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 2

Channel: Operational

Description

BGP peering manually started for peer of routing domain .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 2: BGP peering manually started for peer Arg1 of routing domain Arg2.

Channel: Operational

Message #

BGP peering manually started for peer %1 of routing domain %2.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 3

Channel: Operational

Description

BGP peering manually stopped for peer .

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 3: BGP peering manually stopped for peer Arg1.

Channel: Operational

Message #

BGP peering manually stopped for peer %1.

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 4

Channel: Operational

Description

BGP peering manually stopped for peer of routing domain .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 4: BGP peering manually stopped for peer Arg1 of routing domain Arg2.

Channel: Operational

Message #

BGP peering manually stopped for peer %1 of routing domain %2.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 5

Channel: Operational

Description

BGP peering established for peer .

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 5: BGP peering established for peer Arg1.

Channel: Operational

Message #

BGP peering established for peer %1.

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 6

Channel: Operational

Description

BGP peering established for peer of routing domain .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 6: BGP peering established for peer Arg1 of routing domain Arg2.

Channel: Operational

Message #

BGP peering established for peer %1 of routing domain %2.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 7

Channel: Operational

Description

BGP peering session disconnected for peer : .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 7: BGP peering session disconnected for peer Arg1 : Arg2.

Channel: Operational

Message #

BGP peering session disconnected for peer %1 : %2.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 8

Channel: Operational

Description

BGP peering session disconnected for peer of routing domain : .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 8: BGP peering session disconnected for peer Arg1 of routing domain Arg2 : Arg3.

Channel: Operational

Message #

BGP peering session disconnected for peer %1 of routing domain %2 : %3.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 9

Channel: Operational

Description

BGP peering state changed to for peer .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 9: BGP peering state changed to Arg1 for peer Arg2.

Channel: Debug

Message #

BGP peering state changed to %1 for peer %2.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 10

Channel: Operational

Description

BGP peering state changed to for peer of routing domain .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 10: BGP peering state changed to Arg1 for peer Arg2 of routing domain Arg3.

Channel: Debug

Message #

BGP peering state changed to %1 for peer %2 of routing domain %3.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 11

Channel: Operational

Description

Maximum prefix limit reached for peer .

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 11: Maximum prefix limit reached for peer Arg1.

Channel: Operational

Message #

Maximum prefix limit reached for peer %1.

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 12

Channel: Operational

Description

Maximum prefix limit reached for peer of routing domain .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 12: Maximum prefix limit reached for peer Arg1 of routing domain Arg2.

Channel: Operational

Message #

Maximum prefix limit reached for peer %1 of routing domain %2.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 13

Channel: Operational

Description

BGP peering attempt failed for peer : .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 13: BGP peering attempt failed for peer Arg1 : Arg2.

Channel: Operational

Message #

BGP peering attempt failed for peer %1 : %2.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 14

Channel: Operational

Description

BGP peering attempt failed for peer of routing domain : .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 14: BGP peering attempt failed for peer Arg1 of routing domain Arg2 : Arg3.

Channel: Operational

Message #

BGP peering attempt failed for peer %1 of routing domain %2 : %3.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 15

Channel: Operational

Description

BGP peering collision detected for peer .

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 15: BGP peering collision detected for peer Arg1.

Channel: Operational

Message #

BGP peering collision detected for peer %1.

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 16

Channel: Operational

Description

BGP peering collision detected for peer of routing domain .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 16: BGP peering collision detected for peer Arg1 of routing domain Arg2.

Channel: Operational

Message #

BGP peering collision detected for peer %1 of routing domain %2.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 17

Channel: Operational

Description

HoldTime set to sec for peer .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 17: HoldTime set to Arg1 sec for peer Arg2.

Channel: Operational

Message #

HoldTime set to %1 sec for peer %2.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 18

Channel: Operational

Description

HoldTime set to sec for peer of routing domain .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 18: HoldTime set to Arg1 sec for peer Arg2 of routing domain Arg3.

Channel: Operational

Message #

HoldTime set to %1 sec for peer %2 of routing domain %3.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 19

Channel: Operational

Description

TCP connection attempt failed for BGP peer .

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 19: TCP connection attempt failed for BGP peer Arg1.

Channel: Debug

Message #

TCP connection attempt failed for BGP peer %1.

Fields #

Name	Description
`Arg1` UnicodeString

Event ID 20

Channel: Operational

Description

TCP connection attempt failed for BGP peer of routing domain .

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 20: TCP connection attempt failed for BGP peer Arg1 of routing domain Arg2.

Channel: Debug

Message #

TCP connection attempt failed for BGP peer %1 of routing domain %2.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 21

Channel: Operational

Description

Cannot resolve next-hop for destination , learned from peer . Skipping this route for BGP best path selection until the next-hop is resolvable.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 21: Cannot resolve next-hop Arg1 for destination Arg2, learned from peer Arg3.

Channel: Debug

Description

Cannot resolve next-hop Arg1 for destination Arg2, learned from peer Arg3. Skipping this route for BGP best path selection until the next-hop is resolvable.

Message #

Cannot resolve next-hop %1 for destination %2, learned from peer %3. Skipping this route for BGP best path selection until the next-hop is resolvable.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 22

Channel: Operational

Description

Cannot resolve next-hop for destination , learned from peer of routing domain . Skipping this route for BGP best path selection until the next-hop is resolvable.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString
`Arg4` UnicodeString

Event ID 22: Cannot resolve next-hop Arg1 for destination Arg2, learned from peer Arg3 of routing domain Arg4.

Channel: Debug

Description

Cannot resolve next-hop Arg1 for destination Arg2, learned from peer Arg3 of routing domain Arg4. Skipping this route for BGP best path selection until the next-hop is resolvable.

Message #

Cannot resolve next-hop %1 for destination %2, learned from peer %3 of routing domain %4. Skipping this route for BGP best path selection until the next-hop is resolvable.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString
`Arg4` UnicodeString

Event ID 23

Channel: Operational

Description

Routes to , learned from peer were discarded because of ingress routing policy.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 23: Routes to Arg1, learned from peer Arg2 were discarded because of ingress routing policy.

Channel: Debug

Message #

Routes to %1, learned from peer %2 were discarded because of ingress routing policy.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 24

Channel: Operational

Description

Routes to , learned from peer of routing domain were discarded because of ingress routing policy.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 24: Routes to Arg1, learned from peer Arg2 of routing domain Arg3 were discarded because of ingress routing policy.

Channel: Debug

Message #

Routes to %1, learned from peer %2 of routing domain %3 were discarded because of ingress routing policy.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 25

Channel: Operational

Description

Routes to , were suppressed from advertisement to peer because of egress routing policy.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 25: Routes to Arg1, were suppressed from advertisement to peer Arg2 because of egress routing policy.

Channel: Debug

Message #

Routes to %1, were suppressed from advertisement to peer %2 because of egress routing policy.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString

Event ID 26

Channel: Operational

Description

Routes to , were suppressed from advertisement to peer of routing domain because of egress routing policy.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Event ID 26: Routes to Arg1, were suppressed from advertisement to peer Arg2 of routing domain Arg3 because of egress routing policy.

Channel: Debug

Message #

Routes to %1, were suppressed from advertisement to peer %2 of routing domain %3 because of egress routing policy.

Fields #

Name	Description
`Arg1` UnicodeString
`Arg2` UnicodeString
`Arg3` UnicodeString

Provenance

ETW provider GUID 2e67fcf3-c48e-4b2d-a689-a91d07edb910

Defined in BgpRasMgmt.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB