Microsoft-Windows-SNMP-Agent-Service

12 events across 1 channel

Event	Title	Channel	Sample
1090454505	The SNMP Service has started successfully.	Operational	N
1090454507	The SNMP Service has stopped successfully.	Operational	N
1090454508	The SNMP Service configuration has been updated successfully.	Operational	N
1090455503	Event ID 1090455503	Operational	N
2164196428	The SNMP Service is ignoring the manager %1 because its name could not be …	Operational	N
2164196429	The SNMP Service is ignoring extension agent key %1 because it is missing or …	Operational	N
2164196430	The SNMP Service is ignoring extension agent dll %1 because it is missing or …	Operational	N
2164196431	The SNMP Service has reset the registry parameter sysObjectID to a default …	Operational	N
2164196432	The SNMP Service is unable to adjust privileges in the process's access token.	Operational	N
3237938652	The SNMP Service encountered an error while accessing the registry key %1.	Operational	N
3237938653	The SNMP Service encountered an error while setting up the incoming transports.	Operational	N
3237938654	The SNMP Service encountered an error while registering for registry …	Operational	N

Event ID 1090454505: The SNMP Service has started successfully.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service has started successfully.

Message #

The SNMP Service has started successfully.

Event ID 1090454507: The SNMP Service has stopped successfully.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service has stopped successfully.

Message #

The SNMP Service has stopped successfully.

Event ID 1090454508: The SNMP Service configuration has been updated successfully.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service configuration has been updated successfully.

Message #

The SNMP Service configuration has been updated successfully.

Event ID 1090455503

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Message #

%1

Event ID 2164196428: The SNMP Service is ignoring the manager %1 because its name could not be resolved.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service is ignoring the manager because its name could not be resolved.

Message #

The SNMP Service is ignoring the manager %1 because its name could not be resolved.

Event ID 2164196429: The SNMP Service is ignoring extension agent key %1 because it is missing or misconfigured.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service is ignoring extension agent key because it is missing or misconfigured.

Message #

The SNMP Service is ignoring extension agent key %1 because it is missing or misconfigured.

Event ID 2164196430: The SNMP Service is ignoring extension agent dll %1 because it is missing or misconfigured.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service is ignoring extension agent dll because it is missing or misconfigured.

Message #

The SNMP Service is ignoring extension agent dll %1 because it is missing or misconfigured.

Event ID 2164196431: The SNMP Service has reset the registry parameter sysObjectID to a default value.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service has reset the registry parameter sysObjectID to a default value. This is caused either by an invalid type or by an invalid string format of the registry value.

Message #

The SNMP Service has reset the registry parameter sysObjectID to a default value. This is caused either by an invalid type or by an invalid string format of the registry value.

Event ID 2164196432: The SNMP Service is unable to adjust privileges in the process's access token.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service is unable to adjust privileges in the process's access token. This error has been ignored.

Message #

The SNMP Service is unable to adjust privileges in the process's access token. This error has been ignored.

Event ID 3237938652: The SNMP Service encountered an error while accessing the registry key %1.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service encountered an error while accessing the registry key .

Message #

The SNMP Service encountered an error while accessing the registry key %1.

Event ID 3237938653: The SNMP Service encountered an error while setting up the incoming transports.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service encountered an error while setting up the incoming transports.\n The transport has been dropped out.

Message #

The SNMP Service encountered an error while setting up the incoming transports.\n The %1 transport has been dropped out.

Event ID 3237938654: The SNMP Service encountered an error while registering for registry notifications.

Provider: Microsoft-Windows-SNMP-Agent-Service
Channel: Operational

Description

The SNMP Service encountered an error while registering for registry notifications.\n Changes in the service's configuration will not be considered.

Message #

The SNMP Service encountered an error while registering for registry notifications.\n Changes in the service's configuration will not be considered.

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID 76661966-7798-48c4-afc5-67baa2e9a3fd

Defined in snmp.exe, which carries the event manifest.

Observed on:

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02

Downloads

Microsoft-Windows-SNMP-Agent-Service registered manifest XML (in the WS2022-20348.4893 manifest pack, 1.9 MB) manifest-xml

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`risk_score`	Numeric comparison on the Elastic risk score (0 to 100): `risk_score>50`, `risk_score<=20`, `risk_score=99` (alias `risk`; Elastic rules only)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)

Microsoft-Windows-SNMP-Agent-Service

Event ID 1090454505: The SNMP Service has started successfully.

Description

Message #

Event ID 1090454507: The SNMP Service has stopped successfully.

Description

Message #

Event ID 1090454508: The SNMP Service configuration has been updated successfully.

Description

Message #

Event ID 1090455503

Message #

Event ID 2164196428: The SNMP Service is ignoring the manager %1 because its name could not be resolved.

Description

Message #

Event ID 2164196429: The SNMP Service is ignoring extension agent key %1 because it is missing or misconfigured.

Description

Message #

Event ID 2164196430: The SNMP Service is ignoring extension agent dll %1 because it is missing or misconfigured.

Description

Message #

Event ID 2164196431: The SNMP Service has reset the registry parameter sysObjectID to a default value.

Description

Message #

Event ID 2164196432: The SNMP Service is unable to adjust privileges in the process's access token.

Description

Message #

Event ID 3237938652: The SNMP Service encountered an error while accessing the registry key %1.

Description

Message #

Event ID 3237938653: The SNMP Service encountered an error while setting up the incoming transports.

Description

Message #

Event ID 3237938654: The SNMP Service encountered an error while registering for registry notifications.

Description

Message #

Provenance

Downloads

Keyboard shortcuts

Search operators