detection.wiki

Microsoft-Windows-SNMP-Agent-Service

EventTitleChannelSampleRule
1090454505The SNMP Service has started successfully.OperationalNN
1090454507The SNMP Service has stopped successfully.OperationalNN
1090454508The SNMP Service configuration has been updated successfully.OperationalNN
1090455503Event ID 1090455503OperationalNN
2164196428The SNMP Service is ignoring the manager %1 because its name could not be …OperationalNN
2164196429The SNMP Service is ignoring extension agent key %1 because it is missing or …OperationalNN
2164196430The SNMP Service is ignoring extension agent dll %1 because it is missing or …OperationalNN
2164196431The SNMP Service has reset the registry parameter sysObjectID to a default …OperationalNN
2164196432The SNMP Service is unable to adjust privileges in the process's access token.OperationalNN
3237938652The SNMP Service encountered an error while accessing the registry key %1.OperationalNN
3237938653The SNMP Service encountered an error while setting up the incoming transports.OperationalNN
3237938654The SNMP Service encountered an error while registering for registry …OperationalNN

Event ID 1090454505: The SNMP Service has started successfully.

#
Channel
Operational

Event ID 1090454507: The SNMP Service has stopped successfully.

#
Channel
Operational

Event ID 1090454508: The SNMP Service configuration has been updated successfully.

#
Channel
Operational

Event ID 1090455503

#
Channel
Operational

Message #

%1

Event ID 2164196428: The SNMP Service is ignoring the manager %1 because its name could not be resolved.

#
Channel
Operational

Description

The SNMP Service is ignoring the manager because its name could not be resolved.

Event ID 2164196429: The SNMP Service is ignoring extension agent key %1 because it is missing or misconfigured.

#
Channel
Operational

Description

The SNMP Service is ignoring extension agent key because it is missing or misconfigured.

Event ID 2164196430: The SNMP Service is ignoring extension agent dll %1 because it is missing or misconfigured.

#
Channel
Operational

Description

The SNMP Service is ignoring extension agent dll because it is missing or misconfigured.

Event ID 2164196431: The SNMP Service has reset the registry parameter sysObjectID to a default value.

#
Channel
Operational

Description

The SNMP Service has reset the registry parameter sysObjectID to a default value. This is caused either by an invalid type or by an invalid string format of the registry value.

Message #

The SNMP Service has reset the registry parameter sysObjectID to a default value. This is caused either by an invalid type or by an invalid string format of the registry value.

Event ID 2164196432: The SNMP Service is unable to adjust privileges in the process's access token.

#
Channel
Operational

Description

The SNMP Service is unable to adjust privileges in the process's access token. This error has been ignored.

Message #

The SNMP Service is unable to adjust privileges in the process's access token. This error has been ignored.

Event ID 3237938652: The SNMP Service encountered an error while accessing the registry key %1.

#
Channel
Operational

Description

The SNMP Service encountered an error while accessing the registry key .

Event ID 3237938653: The SNMP Service encountered an error while setting up the incoming transports.

#
Channel
Operational

Description

The SNMP Service encountered an error while setting up the incoming transports.\n The transport has been dropped out.

Message #

The SNMP Service encountered an error while setting up the incoming transports.\n The %1 transport has been dropped out.

Event ID 3237938654: The SNMP Service encountered an error while registering for registry notifications.

#
Channel
Operational

Description

The SNMP Service encountered an error while registering for registry notifications.\n Changes in the service's configuration will not be considered.

Message #

The SNMP Service encountered an error while registering for registry notifications.\n Changes in the service's configuration will not be considered.

Provenance

ETW provider GUID 76661966-7798-48c4-afc5-67baa2e9a3fd

Defined in snmp.exe, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB