Microsoft-Windows-RPC-Proxy-LBS

Event	Title	Channel	Sample	Rule
1	RPC/HTTP Load Balancing started arbitration for user UserName.	Debug	N	N
2	RPC/HTTP Load Balancing ended arbitration with status Status and will use server …	Debug	N	N
3	RPC/HTTP Load Balancing arbitration received conflicting results for user …	Debug	N	N
4	RPC/HTTP Load Balancing added server ServerName to the list of live servers.	Debug	N	N
5	RPC/HTTP Load Balancing removed server ServerName from the list of live servers.	Debug	N	N

Event ID 1: RPC/HTTP Load Balancing started arbitration for user UserName.

RPC/HTTP Load Balancing started arbitration for user %1.

Name	Description
`UserName` UnicodeString

RPC/HTTP Load Balancing ended arbitration with status %2 and will use server %1.

Name	Description
`ServerName` UnicodeString
`Status` UInt32	NTSTATUS reference

RPC/HTTP Load Balancing arbitration received conflicting results for user %1 from servers %2.

Name	Description
`UserName` UnicodeString
`ServerList` UnicodeString

RPC/HTTP Load Balancing added server %1 to the list of live servers.

Name	Description
`ServerName` UnicodeString

RPC/HTTP Load Balancing removed server %1 from the list of live servers.

Name	Description
`ServerName` UnicodeString

ETW provider GUID 272a979b-34b5-48ec-94f5-7225a59c85a0

Defined in rpchttp.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.2849, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB