Microsoft-Windows-UIAutomationCore

Event	Title	Channel	Sample	Rule
1	Error_ProviderErrors	Diagnostic	N	N
2	Error_IAccessibleErrors	Diagnostic	N	N
3	Error_OtherErrors	Diagnostic	N	N
4	Error_ClientApiErrors	Diagnostic	N	N
5	Error_ProcessErrors	Diagnostic	N	N
101	UIAutomationCoreAPI_UiaClientsAreListeningStart	Perf	Y	N
102	UIAutomationCoreAPI_UiaClientsAreListeningStop	Perf	Y	N
103	UIAutomationCoreAPI_UiaDisconnectAllProvidersStart	Perf	N	N
104	UIAutomationCoreAPI_UiaDisconnectAllProvidersStop	Perf	N	N
105	UIAutomationCoreAPI_UiaDisconnectProviderStart	Perf	N	N
106	UIAutomationCoreAPI_UiaDisconnectProviderStop	Perf	N	N
107	UIAutomationCoreAPI_UiaGetReservedMixedAttributeValueStart	Perf	Y	N
108	UIAutomationCoreAPI_UiaGetReservedMixedAttributeValueStop	Perf	Y	N
109	UIAutomationCoreAPI_UiaGetReservedNotSupportedValueStart	Perf	Y	N
110	UIAutomationCoreAPI_UiaGetReservedNotSupportedValueStop	Perf	Y	N
111	UIAutomationCoreAPI_UiaHostProviderFromHwndStart	Perf	N	N
112	UIAutomationCoreAPI_UiaHostProviderFromHwndStop	Perf	N	N
113	UIAutomationCoreAPI_UiaIAccessibleFromProviderStart	Perf	N	N
114	UIAutomationCoreAPI_UiaIAccessibleFromProviderStop	Perf	N	N
115	UIAutomationCoreAPI_UiaProviderForNonClientStart	Perf	N	N
116	UIAutomationCoreAPI_UiaProviderForNonClientStop	Perf	N	N
117	UIAutomationCoreAPI_UiaProviderFromIAccessibleStart	Perf	N	N
118	UIAutomationCoreAPI_UiaProviderFromIAccessibleStop	Perf	N	N
119	UIAutomationCoreAPI_UiaRaiseEventStart	Perf	N	N
120	UIAutomationCoreAPI_UiaRaiseEventStop	Perf	N	N
121	UIAutomationCoreAPI_UiaReturnRawElementProviderStart	Perf	N	N
122	UIAutomationCoreAPI_UiaReturnRawElementProviderStop	Perf	N	N
123	UIAutomationProviderApi_UiaReturnCrossMachineConnectionInfoStart	Perf	N	N
124	UIAutomationProviderApi_UiaReturnCrossMachineConnectionInfoStop	Perf	N	N
125	UIAutomationCoreAPI_UiaRaiseStructuredMarkupEventStart	Perf	N	N
126	UIAutomationCoreAPI_UiaRaiseStructuredMarkupEventStop	Perf	N	N
201	CUIAutomation_AddEventHandlerStart	Perf	N	N
202	CUIAutomation_AddEventHandlerStop	Perf	N	N
203	CUIAutomation_CompareElementsStart	Perf	N	N
204	CUIAutomation_CompareElementsStop	Perf	N	N
205	CUIAutomation_CompareRuntimeIdsStart	Perf	N	N
206	CUIAutomation_CompareRuntimeIdsStop	Perf	N	N
207	CUIAutomation_CreateConditionStart	Perf	N	N
208	CUIAutomation_CreateConditionStop	Perf	N	N
209	CUIAutomation_CreateCacheRequestStart	Perf	N	N
210	CUIAutomation_CreateCacheRequestStop	Perf	N	N
211	CUIAutomation_CreateProxyFactoryEntryStart	Perf	N	N
212	CUIAutomation_CreateProxyFactoryEntryStop	Perf	N	N
213	CUIAutomation_CreateTreeWalkerStart	Perf	N	N
214	CUIAutomation_CreateTreeWalkerStop	Perf	N	N
215	CUIAutomation_ElementFromHandleStart	Perf	N	N
216	CUIAutomation_ElementFromHandleStop	Perf	N	N
217	CUIAutomation_ElementFromHandleBuildCacheStart	Perf	N	N
218	CUIAutomation_ElementFromHandleBuildCacheStop	Perf	N	N
219	CUIAutomation_ElementFromIAccessibleStart	Perf	N	N
220	CUIAutomation_ElementFromIAccessibleStop	Perf	N	N
221	CUIAutomation_ElementFromIAccessibleBuildCacheStart	Perf	N	N
222	CUIAutomation_ElementFromIAccessibleBuildCacheStop	Perf	N	N
223	CUIAutomation_ElementFromPointStart	Perf	N	N
224	CUIAutomation_ElementFromPointStop	Perf	N	N
225	CUIAutomation_ElementFromPointBuildCacheStart	Perf	N	N
226	CUIAutomation_ElementFromPointBuildCacheStop	Perf	N	N
227	CUIAutomation_GetFocusedElementStart	Perf	N	N
228	CUIAutomation_GetFocusedElementStop	Perf	N	N
229	CUIAutomation_GetFocusedElementBuildCacheStart	Perf	N	N
230	CUIAutomation_GetFocusedElementBuildCacheStop	Perf	N	N
231	CUIAutomation_GetPatternProgrammaticNameStart	Perf	N	N
232	CUIAutomation_GetPatternProgrammaticNameStop	Perf	N	N
233	CUIAutomation_GetPropertyProgrammaticNameStart	Perf	N	N
234	CUIAutomation_GetPropertyProgrammaticNameStop	Perf	N	N
235	CUIAutomation_GetRootElementStart	Perf	N	N
236	CUIAutomation_GetRootElementStop	Perf	N	N
237	CUIAutomation_GetRootElementBuildCacheStart	Perf	N	N
238	CUIAutomation_GetRootElementBuildCacheStop	Perf	N	N
239	CUIAutomation_PollForPotentialSupportedPatternsStart	Perf	N	N
240	CUIAutomation_PollForPotentialSupportedPatternsStop	Perf	N	N
241	CUIAutomation_PollForPotentialSupportedPropertiesStart	Perf	N	N
242	CUIAutomation_PollForPotentialSupportedPropertiesStop	Perf	N	N
243	CUIAutomation_RemoveEventHandlerStart	Perf	N	N
244	CUIAutomation_RemoveEventHandlerStop	Perf	N	N
245	CUIAutomation_CreateEventHandlerGroupStart	Perf	N	N
246	CUIAutomation_CreateEventHandlerGroupStop	Perf	N	N
247	CUIAutomation_AddEventHandlerGroupStart	Perf	N	N
248	CUIAutomation_AddEventHandlerGroupStop	Perf	N	N
249	CUIAutomation_RemoveEventHandlerGroupStart	Perf	N	N
250	CUIAutomation_RemoveEventHandlerGroupStop	Perf	N	N
251	CUIAutomation_AddStructuredMarkupEventHandlerStart	Perf	N	N
252	CUIAutomation_AddStructuredMarkupEventHandlerStop	Perf	N	N
253	CUIAutomation_RemoveStructuredMarkupEventHandlerStart	Perf	N	N
254	CUIAutomation_RemoveStructuredMarkupEventHandlerStop	Perf	N	N
301	CAutomationElement_BuildUpdatedCacheStart	Perf	N	N
302	CAutomationElement_BuildUpdatedCacheStop	Perf	N	N
303	CAutomationElement_FindAllStart	Perf	N	N
304	CAutomationElement_FindAllStop	Perf	N	N
305	CAutomationElement_FindAllBuildCacheStart	Perf	N	N
306	CAutomationElement_FindAllBuildCacheStop	Perf	N	N
307	CAutomationElement_FindFirstStart	Perf	N	N
308	CAutomationElement_FindFirstStop	Perf	N	N
309	CAutomationElement_FindFirstBuildCacheStart	Perf	N	N
310	CAutomationElement_FindFirstBuildCacheStop	Perf	N	N
311	CAutomationElement_GetCachedChildrenStart	Perf	N	N
312	CAutomationElement_GetCachedChildrenStop	Perf	N	N
313	CAutomationElement_GetCachedParentStart	Perf	N	N
314	CAutomationElement_GetCachedParentStop	Perf	N	N
315	CAutomationElement_GetCachedPatternStart	Perf	N	N
316	CAutomationElement_GetCachedPatternStop	Perf	N	N
317	CAutomationElement_GetCachedPatternAsStart	Perf	N	N
318	CAutomationElement_GetCachedPatternAsStop	Perf	N	N
319	CAutomationElement_GetCachedPropertyValueStart	Perf	N	N
320	CAutomationElement_GetCachedPropertyValueStop	Perf	N	N
321	CAutomationElement_GetCachedPropertyValueExStart	Perf	N	N
322	CAutomationElement_GetCachedPropertyValueExStop	Perf	N	N
323	CAutomationElement_GetClickablePointStart	Perf	N	N
324	CAutomationElement_GetClickablePointStop	Perf	N	N
325	CAutomationElement_GetCurrentPatternStart	Perf	N	N
326	CAutomationElement_GetCurrentPatternStop	Perf	N	N
327	CAutomationElement_GetCurrentPatternAsStart	Perf	N	N
328	CAutomationElement_GetCurrentPatternAsStop	Perf	N	N
329	CAutomationElement_GetCurrentPropertyValueStart	Perf	N	N
330	CAutomationElement_GetCurrentPropertyValueStop	Perf	N	N
331	CAutomationElement_GetCurrentPropertyValueExStart	Perf	N	N
332	CAutomationElement_GetCurrentPropertyValueExStop	Perf	N	N
333	CAutomationElement_GetRuntimeIdStart	Perf	N	N
334	CAutomationElement_GetRuntimeIdStop	Perf	N	N
335	CAutomationElement_SetFocusStart	Perf	N	N
336	CAutomationElement_SetFocusStop	Perf	N	N
337	CAutomationElement_ShowContextMenuStart	Perf	N	N
338	CAutomationElement_ShowContextMenuStop	Perf	N	N
339	CAutomationElement_FindAllWithOptionsStart	Perf	N	N
340	CAutomationElement_FindAllWithOptionsStop	Perf	N	N
341	CAutomationElement_FindAllWithOptionsBuildCacheStart	Perf	N	N
342	CAutomationElement_FindAllWithOptionsBuildCacheStop	Perf	N	N
343	CAutomationElement_FindFirstWithOptionsStart	Perf	N	N
344	CAutomationElement_FindFirstWithOptionsStop	Perf	N	N
345	CAutomationElement_FindFirstWithOptionsBuildCacheStart	Perf	N	N
346	CAutomationElement_FindFirstWithOptionsBuildCacheStop	Perf	N	N
403	CTextRange_CloneStart	Perf	N	N
404	CTextRange_CloneStop	Perf	N	N
405	CTextRange_CompareStart	Perf	N	N
406	CTextRange_CompareStop	Perf	N	N
407	CTextRange_CompareEndpointsStart	Perf	N	N
408	CTextRange_CompareEndpointsStop	Perf	N	N
409	CTextRange_ExpandToEnclosingUnitStart	Perf	N	N
410	CTextRange_ExpandToEnclosingUnitStop	Perf	N	N
411	CTextRange_GetAttributeValueStart	Perf	N	N
412	CTextRange_GetAttributeValueStop	Perf	N	N
413	CTextRange_GetEnclosingElementStart	Perf	N	N
414	CTextRange_GetEnclosingElementStop	Perf	N	N
415	CTextRange_GetTextStart	Perf	N	N
416	CTextRange_GetTextStop	Perf	N	N
417	CTextRange_MoveStart	Perf	N	N
418	CTextRange_MoveStop	Perf	N	N
419	CTextRange_MoveEndpointByUnitStart	Perf	N	N
420	CTextRange_MoveEndpointByUnitStop	Perf	N	N
421	CTextRange_MoveEndpointByRangeStart	Perf	N	N
422	CTextRange_MoveEndpointByRangeStop	Perf	N	N
423	CTextRange_GetChildrenStart	Perf	N	N
424	CTextRange_GetChildrenStop	Perf	N	N
501	CTreeWalker_NavigateStart	Perf	N	N
502	CTreeWalker_NavigateStop	Perf	N	N
503	RichEditProxy_GetTextStart	Perf	N	N
504	RichEditProxy_GetTextStop	Perf	N	N
505	RichEditProxy_GetVisibleRangeStart	Perf	N	N
506	RichEditProxy_GetVisibleRangeStop	Perf	N	N
507	EditProxy_NextWordStart	Perf	N	N
508	EditProxy_NextWordStop	Perf	N	N
509	ClientConnection_CallWithReturnStart	Perf	N	N
510	ClientConnection_CallWithReturnStop	Perf	N	N
511	CSelectionPattern_GetCurrentSelectionStart	Perf	N	N
512	CSelectionPattern_GetCurrentSelectionStop	Perf	N	N
513	HandleWinEventStart	Perf	N	N
514	HandleWinEventStop	Perf	N	N
515	CoalesceWinEvent	Perf	N	N
517	UiaProviderCalloutStart	Perf	Y	N
518	UiaProviderCalloutStop	Perf	Y	N
519	MsaaProviderCalloutStart	Perf	N	N
520	MsaaProviderCalloutStop	Perf	N	N
521	ClientConnection_DispatchToProviderStart	Perf	N	N
522	ClientConnection_DispatchToProviderStop	Perf	N	N
523	ProcessIncomingRequestStart	Perf	N	N
524	ProcessIncomingRequestStop	Perf	N	N
525	ProcessIncomingRequest_ContextChangeStart	Perf	N	N
526	ProcessIncomingRequest_ContextChangeStop	Perf	N	N
527	ServerConnection_OnData_ForceFlush	Perf	N	N
528	ReleaseCollection_ObjectNotFound	Perf	N	N
529	ReleaseCollection_ReleaseObjects	Perf	N	N
530	ReleaseCollection_IncompatibleContext	Perf	N	N
531	ClientConnection_StateChange	Perf	N	N
532	IsProcessFrozenCheckStart	Perf	N	N
533	IsProcessFrozenCheckStop	Perf	N	N
534	ClientConnection_InactiveRequestResponse	Perf	N	N
535	ClientConnection_ConnectionTerminated	Perf	N	N
536	EventManager_DoCalldowns_UniversalStart	Perf	N	N
537	EventManager_DoCalldowns_UniversalStop	Perf	N	N
538	EventManager_DoCalldowns_ClientSideOptimizedStart	Perf	N	N
539	EventManager_DoCalldowns_ClientSideOptimizedStop	Perf	N	N
540	EventManager_CollectNodesToAdviseStart	Perf	N	N
541	EventManager_CollectNodesToAdviseStop	Perf	N	N
542	EventManager_CollectClientSideItemsToAdviseStart	Perf	N	N
543	EventManager_CollectClientSideItemsToAdviseStop	Perf	N	N
544	ClientConnection_RequestWritten	Perf	N	N
545	ServerConnection_RequestReceived	Perf	N	N
546	ServerConnection_ResponseWritten	Perf	N	N
547	ClientConnection_ResponseReceived	Perf	N	N
603	IA2TextRange_CloneStart	Perf	N	N
604	IA2TextRange_CloneStop	Perf	N	N
605	IA2TextRange_CompareStart	Perf	N	N
606	IA2TextRange_CompareStop	Perf	N	N
607	IA2TextRange_CompareEndpointsStart	Perf	N	N
608	IA2TextRange_CompareEndpointsStop	Perf	N	N
609	IA2TextRange_ExpandToEnclosingUnitStart	Perf	N	N
610	IA2TextRange_ExpandToEnclosingUnitStop	Perf	N	N
611	IA2TextRange_GetAttributeValueStart	Perf	N	N
612	IA2TextRange_GetAttributeValueStop	Perf	N	N
613	IA2TextRange_GetEnclosingElementStart	Perf	N	N
614	IA2TextRange_GetEnclosingElementStop	Perf	N	N
615	IA2TextRange_GetTextStart	Perf	N	N
616	IA2TextRange_GetTextStop	Perf	N	N
617	IA2TextRange_MoveStart	Perf	N	N
618	IA2TextRange_MoveStop	Perf	N	N
619	IA2TextRange_MoveEndpointByUnitStart	Perf	N	N
620	IA2TextRange_MoveEndpointByUnitStop	Perf	N	N
621	IA2TextRange_MoveEndpointByRangeStart	Perf	N	N
622	IA2TextRange_MoveEndpointByRangeStop	Perf	N	N
623	IA2TextRange_GetChildrenStart	Perf	N	N
624	IA2TextRange_GetChildrenStop	Perf	N	N
625	IA2TextRange_FindAttributeStart	Perf	N	N
626	IA2TextRange_FindAttributeStop	Perf	N	N
627	IA2TextRange_FindTextStart	Perf	N	N
628	IA2TextRange_FindTextStop	Perf	N	N
629	IA2TextRange_GetBoundingRectanglesStart	Perf	N	N
630	IA2TextRange_GetBoundingRectanglesStop	Perf	N	N
631	IA2TextRange_SelectStart	Perf	N	N
632	IA2TextRange_SelectStop	Perf	N	N
633	IA2TextRange_AddToSelectionStart	Perf	N	N
634	IA2TextRange_AddToSelectionStop	Perf	N	N
635	IA2TextRange_RemoveFromSelectionStart	Perf	N	N
636	IA2TextRange_RemoveFromSelectionStop	Perf	N	N
637	IA2TextRange_ScrollIntoViewStart	Perf	N	N
638	IA2TextRange_ScrollIntoViewStop	Perf	N	N
701	ClientConnectionTimeout	Perf	N	N
702	EventOverflow	Perf	N	N

Event ID 1: Error_ProviderErrors

Channel: Diagnostic
Task: Error_ProviderErrors

Fields #

Name	Description
`Method` UnicodeString
`Hresult` HexInt32
`Details` UnicodeString
`SourceHwnd` UnicodeString
`Provider` UnicodeString

Event ID 2: Error_IAccessibleErrors

Channel: Diagnostic
Task: Error_IAccessibleErrors

Fields #

Name	Description
`Method` UnicodeString
`Hresult` HexInt32
`Details` UnicodeString
`SourceHwnd` UnicodeString
`Provider` UnicodeString

Event ID 3: Error_OtherErrors

Channel: Diagnostic
Task: Error_OtherErrors

Fields #

Name	Description
`Method` UnicodeString
`ErrorCode` UInt32
`Details` UnicodeString

Event ID 4: Error_ClientApiErrors

Channel: Diagnostic
Task: Error_ClientApiErrors

Fields #

Name	Description
`Method` UnicodeString
`Parameter` UnicodeString
`Details` UnicodeString

Event ID 5: Error_ProcessErrors

Channel: Diagnostic
Task: Error_ProcessErrors

Fields #

Name	Description
`Method` UnicodeString
`Win32Error` UInt32
`HRESULT` HexInt32
`ProcessId` UInt32
`Details` UnicodeString

Event ID 101: UIAutomationCoreAPI_UiaClientsAreListeningStart

Channel: Perf
Level: Informational
Task: UIAutomationCoreAPI_UiaClientsAreListening
Opcode: Start

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-UIAutomationCore/Perf",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 101,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 9672
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-Windows-UIAutomationCore",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:18:00.497Z",
    "version": 0
  },
  "event_data": {},
  "message": ""
}

Event ID 102: UIAutomationCoreAPI_UiaClientsAreListeningStop

Channel: Perf
Level: Informational
Task: UIAutomationCoreAPI_UiaClientsAreListening
Opcode: Stop

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-UIAutomationCore/Perf",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 102,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 9672
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-Windows-UIAutomationCore",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:18:00.497Z",
    "version": 0
  },
  "event_data": {},
  "message": ""
}

Event ID 103: UIAutomationCoreAPI_UiaDisconnectAllProvidersStart

Channel: Perf
Task: UIAutomationCoreAPI_UiaDisconnectAllProviders
Opcode: Start

Event ID 104: UIAutomationCoreAPI_UiaDisconnectAllProvidersStop

Channel: Perf
Task: UIAutomationCoreAPI_UiaDisconnectAllProviders
Opcode: Stop

Event ID 105: UIAutomationCoreAPI_UiaDisconnectProviderStart

Channel: Perf
Task: UIAutomationCoreAPI_UiaDisconnectProvider
Opcode: Start

Event ID 106: UIAutomationCoreAPI_UiaDisconnectProviderStop

Channel: Perf
Task: UIAutomationCoreAPI_UiaDisconnectProvider
Opcode: Stop

Event ID 107: UIAutomationCoreAPI_UiaGetReservedMixedAttributeValueStart

Channel: Perf
Level: Informational
Task: UIAutomationCoreAPI_UiaGetReservedMixedAttributeValue
Opcode: Start

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-UIAutomationCore",
    "guid": "{820a42d8-38c4-465d-b64e-d7d56ea1d612}",
    "event_source_name": "",
    "event_id": 107,
    "version": 0,
    "level": 4,
    "task": 107,
    "opcode": 1,
    "keywords": "0x4000000000010000",
    "time_created": "2026-07-19T04:22:01.389024200+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "BF440000-0BF1-000D-13CE-4CBFF10BDD01"
    },
    "execution": {
      "process_id": 12448,
      "thread_id": 14096
    },
    "channel": "Microsoft-Windows-UIAutomationCore/Perf",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 108: UIAutomationCoreAPI_UiaGetReservedMixedAttributeValueStop

Channel: Perf
Level: Informational
Task: UIAutomationCoreAPI_UiaGetReservedMixedAttributeValue
Opcode: Stop

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-UIAutomationCore",
    "guid": "{820a42d8-38c4-465d-b64e-d7d56ea1d612}",
    "event_source_name": "",
    "event_id": 108,
    "version": 0,
    "level": 4,
    "task": 107,
    "opcode": 2,
    "keywords": "0x4000000000010000",
    "time_created": "2026-07-19T04:22:01.389039000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "BF440000-0BF1-000D-13CE-4CBFF10BDD01"
    },
    "execution": {
      "process_id": 12448,
      "thread_id": 14096
    },
    "channel": "Microsoft-Windows-UIAutomationCore/Perf",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 109: UIAutomationCoreAPI_UiaGetReservedNotSupportedValueStart

Channel: Perf
Level: Informational
Task: UIAutomationCoreAPI_UiaGetReservedNotSupportedValue
Opcode: Start

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-UIAutomationCore",
    "guid": "{820a42d8-38c4-465d-b64e-d7d56ea1d612}",
    "event_source_name": "",
    "event_id": 109,
    "version": 0,
    "level": 4,
    "task": 109,
    "opcode": 1,
    "keywords": "0x4000000000010000",
    "time_created": "2026-07-19T04:22:01.158217600+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "BF440000-0BF1-000D-13CE-4CBFF10BDD01"
    },
    "execution": {
      "process_id": 12448,
      "thread_id": 14096
    },
    "channel": "Microsoft-Windows-UIAutomationCore/Perf",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 110: UIAutomationCoreAPI_UiaGetReservedNotSupportedValueStop

Channel: Perf
Level: Informational
Task: UIAutomationCoreAPI_UiaGetReservedNotSupportedValue
Opcode: Stop

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-UIAutomationCore",
    "guid": "{820a42d8-38c4-465d-b64e-d7d56ea1d612}",
    "event_source_name": "",
    "event_id": 110,
    "version": 0,
    "level": 4,
    "task": 109,
    "opcode": 2,
    "keywords": "0x4000000000010000",
    "time_created": "2026-07-19T04:22:01.158235300+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "BF440000-0BF1-000D-13CE-4CBFF10BDD01"
    },
    "execution": {
      "process_id": 12448,
      "thread_id": 14096
    },
    "channel": "Microsoft-Windows-UIAutomationCore/Perf",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 111: UIAutomationCoreAPI_UiaHostProviderFromHwndStart

Channel: Perf
Task: UIAutomationCoreAPI_UiaHostProviderFromHwnd
Opcode: Start

Event ID 112: UIAutomationCoreAPI_UiaHostProviderFromHwndStop

Channel: Perf
Task: UIAutomationCoreAPI_UiaHostProviderFromHwnd
Opcode: Stop

Event ID 113: UIAutomationCoreAPI_UiaIAccessibleFromProviderStart

Channel: Perf
Task: UIAutomationCoreAPI_UiaIAccessibleFromProvider
Opcode: Start

Event ID 114: UIAutomationCoreAPI_UiaIAccessibleFromProviderStop

Channel: Perf
Task: UIAutomationCoreAPI_UiaIAccessibleFromProvider
Opcode: Stop

Event ID 115: UIAutomationCoreAPI_UiaProviderForNonClientStart

Channel: Perf
Task: UIAutomationCoreAPI_UiaProviderForNonClient
Opcode: Start

Event ID 116: UIAutomationCoreAPI_UiaProviderForNonClientStop

Channel: Perf
Task: UIAutomationCoreAPI_UiaProviderForNonClient
Opcode: Stop

Event ID 117: UIAutomationCoreAPI_UiaProviderFromIAccessibleStart

Channel: Perf
Task: UIAutomationCoreAPI_UiaProviderFromIAccessible
Opcode: Start

Event ID 118: UIAutomationCoreAPI_UiaProviderFromIAccessibleStop

Channel: Perf
Task: UIAutomationCoreAPI_UiaProviderFromIAccessible
Opcode: Stop

Event ID 119: UIAutomationCoreAPI_UiaRaiseEventStart

Channel: Perf
Task: UIAutomationCoreAPI_UiaRaiseEvent
Opcode: Start

Event ID 120: UIAutomationCoreAPI_UiaRaiseEventStop

Channel: Perf
Task: UIAutomationCoreAPI_UiaRaiseEvent
Opcode: Stop

Event ID 121: UIAutomationCoreAPI_UiaReturnRawElementProviderStart

Channel: Perf
Task: UIAutomationCoreAPI_UiaReturnRawElementProvider
Opcode: Start

Event ID 122: UIAutomationCoreAPI_UiaReturnRawElementProviderStop

Channel: Perf
Task: UIAutomationCoreAPI_UiaReturnRawElementProvider
Opcode: Stop

Event ID 123: UIAutomationProviderApi_UiaReturnCrossMachineConnectionInfoStart

Channel: Perf
Task: UIAutomationProviderApi_UiaReturnCrossMachineConnectionInfo
Opcode: Start

Event ID 124: UIAutomationProviderApi_UiaReturnCrossMachineConnectionInfoStop

Channel: Perf
Task: UIAutomationProviderApi_UiaReturnCrossMachineConnectionInfo
Opcode: Stop

Event ID 125: UIAutomationCoreAPI_UiaRaiseStructuredMarkupEventStart

Channel: Perf
Task: UIAutomationCoreAPI_UiaRaiseStructuredMarkupEvent
Opcode: Start

Event ID 126: UIAutomationCoreAPI_UiaRaiseStructuredMarkupEventStop

Channel: Perf
Task: UIAutomationCoreAPI_UiaRaiseStructuredMarkupEvent
Opcode: Stop

Event ID 201: CUIAutomation_AddEventHandlerStart

Channel: Perf
Task: CUIAutomation_AddEventHandler
Opcode: Start

Event ID 202: CUIAutomation_AddEventHandlerStop

Channel: Perf
Task: CUIAutomation_AddEventHandler
Opcode: Stop

Event ID 203: CUIAutomation_CompareElementsStart

Channel: Perf
Task: CUIAutomation_CompareElements
Opcode: Start

Event ID 204: CUIAutomation_CompareElementsStop

Channel: Perf
Task: CUIAutomation_CompareElements
Opcode: Stop

Event ID 205: CUIAutomation_CompareRuntimeIdsStart

Channel: Perf
Task: CUIAutomation_CompareRuntimeIds
Opcode: Start

Event ID 206: CUIAutomation_CompareRuntimeIdsStop

Channel: Perf
Task: CUIAutomation_CompareRuntimeIds
Opcode: Stop

Event ID 207: CUIAutomation_CreateConditionStart

Channel: Perf
Task: CUIAutomation_CreateCondition
Opcode: Start

Event ID 208: CUIAutomation_CreateConditionStop

Channel: Perf
Task: CUIAutomation_CreateCondition
Opcode: Stop

Event ID 209: CUIAutomation_CreateCacheRequestStart

Channel: Perf
Task: CUIAutomation_CreateCacheRequest
Opcode: Start

Event ID 210: CUIAutomation_CreateCacheRequestStop

Channel: Perf
Task: CUIAutomation_CreateCacheRequest
Opcode: Stop

Event ID 211: CUIAutomation_CreateProxyFactoryEntryStart

Channel: Perf
Task: CUIAutomation_CreateProxyFactoryEntry
Opcode: Start

Event ID 212: CUIAutomation_CreateProxyFactoryEntryStop

Channel: Perf
Task: CUIAutomation_CreateProxyFactoryEntry
Opcode: Stop

Event ID 213: CUIAutomation_CreateTreeWalkerStart

Channel: Perf
Task: CUIAutomation_CreateTreeWalker
Opcode: Start

Event ID 214: CUIAutomation_CreateTreeWalkerStop

Channel: Perf
Task: CUIAutomation_CreateTreeWalker
Opcode: Stop

Event ID 215: CUIAutomation_ElementFromHandleStart

Channel: Perf
Task: CUIAutomation_ElementFromHandle
Opcode: Start

Event ID 216: CUIAutomation_ElementFromHandleStop

Channel: Perf
Task: CUIAutomation_ElementFromHandle
Opcode: Stop

Event ID 217: CUIAutomation_ElementFromHandleBuildCacheStart

Channel: Perf
Task: CUIAutomation_ElementFromHandleBuildCache
Opcode: Start

Event ID 218: CUIAutomation_ElementFromHandleBuildCacheStop

Channel: Perf
Task: CUIAutomation_ElementFromHandleBuildCache
Opcode: Stop

Event ID 219: CUIAutomation_ElementFromIAccessibleStart

Channel: Perf
Task: CUIAutomation_ElementFromIAccessible
Opcode: Start

Event ID 220: CUIAutomation_ElementFromIAccessibleStop

Channel: Perf
Task: CUIAutomation_ElementFromIAccessible
Opcode: Stop

Event ID 221: CUIAutomation_ElementFromIAccessibleBuildCacheStart

Channel: Perf
Task: CUIAutomation_ElementFromIAccessibleBuildCache
Opcode: Start

Event ID 222: CUIAutomation_ElementFromIAccessibleBuildCacheStop

Channel: Perf
Task: CUIAutomation_ElementFromIAccessibleBuildCache
Opcode: Stop

Event ID 223: CUIAutomation_ElementFromPointStart

Channel: Perf
Task: CUIAutomation_ElementFromPoint
Opcode: Start

Event ID 224: CUIAutomation_ElementFromPointStop

Channel: Perf
Task: CUIAutomation_ElementFromPoint
Opcode: Stop

Event ID 225: CUIAutomation_ElementFromPointBuildCacheStart

Channel: Perf
Task: CUIAutomation_ElementFromPointBuildCache
Opcode: Start

Event ID 226: CUIAutomation_ElementFromPointBuildCacheStop

Channel: Perf
Task: CUIAutomation_ElementFromPointBuildCache
Opcode: Stop

Event ID 227: CUIAutomation_GetFocusedElementStart

Channel: Perf
Task: CUIAutomation_GetFocusedElement
Opcode: Start

Event ID 228: CUIAutomation_GetFocusedElementStop

Channel: Perf
Task: CUIAutomation_GetFocusedElement
Opcode: Stop

Event ID 229: CUIAutomation_GetFocusedElementBuildCacheStart

Channel: Perf
Task: CUIAutomation_GetFocusedElementBuildCache
Opcode: Start

Event ID 230: CUIAutomation_GetFocusedElementBuildCacheStop

Channel: Perf
Task: CUIAutomation_GetFocusedElementBuildCache
Opcode: Stop

Event ID 231: CUIAutomation_GetPatternProgrammaticNameStart

Channel: Perf
Task: CUIAutomation_GetPatternProgrammaticName
Opcode: Start

Event ID 232: CUIAutomation_GetPatternProgrammaticNameStop

Channel: Perf
Task: CUIAutomation_GetPatternProgrammaticName
Opcode: Stop

Event ID 233: CUIAutomation_GetPropertyProgrammaticNameStart

Channel: Perf
Task: CUIAutomation_GetPropertyProgrammaticName
Opcode: Start

Event ID 234: CUIAutomation_GetPropertyProgrammaticNameStop

Channel: Perf
Task: CUIAutomation_GetPropertyProgrammaticName
Opcode: Stop

Event ID 235: CUIAutomation_GetRootElementStart

Channel: Perf
Task: CUIAutomation_GetRootElement
Opcode: Start

Event ID 236: CUIAutomation_GetRootElementStop

Channel: Perf
Task: CUIAutomation_GetRootElement
Opcode: Stop

Event ID 237: CUIAutomation_GetRootElementBuildCacheStart

Channel: Perf
Task: CUIAutomation_GetRootElementBuildCache
Opcode: Start

Event ID 238: CUIAutomation_GetRootElementBuildCacheStop

Channel: Perf
Task: CUIAutomation_GetRootElementBuildCache
Opcode: Stop

Event ID 239: CUIAutomation_PollForPotentialSupportedPatternsStart

Channel: Perf
Task: CUIAutomation_PollForPotentialSupportedPatterns
Opcode: Start

Event ID 240: CUIAutomation_PollForPotentialSupportedPatternsStop

Channel: Perf
Task: CUIAutomation_PollForPotentialSupportedPatterns
Opcode: Stop

Event ID 241: CUIAutomation_PollForPotentialSupportedPropertiesStart

Channel: Perf
Task: CUIAutomation_PollForPotentialSupportedProperties
Opcode: Start

Event ID 242: CUIAutomation_PollForPotentialSupportedPropertiesStop

Channel: Perf
Task: CUIAutomation_PollForPotentialSupportedProperties
Opcode: Stop

Event ID 243: CUIAutomation_RemoveEventHandlerStart

Channel: Perf
Task: CUIAutomation_RemoveEventHandler
Opcode: Start

Event ID 244: CUIAutomation_RemoveEventHandlerStop

Channel: Perf
Task: CUIAutomation_RemoveEventHandler
Opcode: Stop

Event ID 245: CUIAutomation_CreateEventHandlerGroupStart

Channel: Perf
Task: CUIAutomation_CreateEventHandlerGroup
Opcode: Start

Event ID 246: CUIAutomation_CreateEventHandlerGroupStop

Channel: Perf
Task: CUIAutomation_CreateEventHandlerGroup
Opcode: Stop

Event ID 247: CUIAutomation_AddEventHandlerGroupStart

Channel: Perf
Task: CUIAutomation_AddEventHandlerGroup
Opcode: Start

Event ID 248: CUIAutomation_AddEventHandlerGroupStop

Channel: Perf
Task: CUIAutomation_AddEventHandlerGroup
Opcode: Stop

Event ID 249: CUIAutomation_RemoveEventHandlerGroupStart

Channel: Perf
Task: CUIAutomation_RemoveEventHandlerGroup
Opcode: Start

Event ID 250: CUIAutomation_RemoveEventHandlerGroupStop

Channel: Perf
Task: CUIAutomation_RemoveEventHandlerGroup
Opcode: Stop

Event ID 251: CUIAutomation_AddStructuredMarkupEventHandlerStart

Channel: Perf
Task: CUIAutomation_AddStructuredMarkupEventHandler
Opcode: Start

Event ID 252: CUIAutomation_AddStructuredMarkupEventHandlerStop

Channel: Perf
Task: CUIAutomation_AddStructuredMarkupEventHandler
Opcode: Stop

Event ID 253: CUIAutomation_RemoveStructuredMarkupEventHandlerStart

Channel: Perf
Task: CUIAutomation_RemoveStructuredMarkupEventHandler
Opcode: Start

Event ID 254: CUIAutomation_RemoveStructuredMarkupEventHandlerStop

Channel: Perf
Task: CUIAutomation_RemoveStructuredMarkupEventHandler
Opcode: Stop

Event ID 301: CAutomationElement_BuildUpdatedCacheStart

Channel: Perf
Task: CAutomationElement_BuildUpdatedCache
Opcode: Start

Event ID 302: CAutomationElement_BuildUpdatedCacheStop

Channel: Perf
Task: CAutomationElement_BuildUpdatedCache
Opcode: Stop

Event ID 303: CAutomationElement_FindAllStart

Channel: Perf
Task: CAutomationElement_FindAll
Opcode: Start

Event ID 304: CAutomationElement_FindAllStop

Channel: Perf
Task: CAutomationElement_FindAll
Opcode: Stop

Event ID 305: CAutomationElement_FindAllBuildCacheStart

Channel: Perf
Task: CAutomationElement_FindAllBuildCache
Opcode: Start

Event ID 306: CAutomationElement_FindAllBuildCacheStop

Channel: Perf
Task: CAutomationElement_FindAllBuildCache
Opcode: Stop

Event ID 307: CAutomationElement_FindFirstStart

Channel: Perf
Task: CAutomationElement_FindFirst
Opcode: Start

Event ID 308: CAutomationElement_FindFirstStop

Channel: Perf
Task: CAutomationElement_FindFirst
Opcode: Stop

Event ID 309: CAutomationElement_FindFirstBuildCacheStart

Channel: Perf
Task: CAutomationElement_FindFirstBuildCache
Opcode: Start

Event ID 310: CAutomationElement_FindFirstBuildCacheStop

Channel: Perf
Task: CAutomationElement_FindFirstBuildCache
Opcode: Stop

Event ID 311: CAutomationElement_GetCachedChildrenStart

Channel: Perf
Task: CAutomationElement_GetCachedChildren
Opcode: Start

Event ID 312: CAutomationElement_GetCachedChildrenStop

Channel: Perf
Task: CAutomationElement_GetCachedChildren
Opcode: Stop

Event ID 313: CAutomationElement_GetCachedParentStart

Channel: Perf
Task: CAutomationElement_GetCachedParent
Opcode: Start

Event ID 314: CAutomationElement_GetCachedParentStop

Channel: Perf
Task: CAutomationElement_GetCachedParent
Opcode: Stop

Event ID 315: CAutomationElement_GetCachedPatternStart

Channel: Perf
Task: CAutomationElement_GetCachedPattern
Opcode: Start

Event ID 316: CAutomationElement_GetCachedPatternStop

Channel: Perf
Task: CAutomationElement_GetCachedPattern
Opcode: Stop

Event ID 317: CAutomationElement_GetCachedPatternAsStart

Channel: Perf
Task: CAutomationElement_GetCachedPatternAs
Opcode: Start

Event ID 318: CAutomationElement_GetCachedPatternAsStop

Channel: Perf
Task: CAutomationElement_GetCachedPatternAs
Opcode: Stop

Event ID 319: CAutomationElement_GetCachedPropertyValueStart

Channel: Perf
Task: CAutomationElement_GetCachedPropertyValue
Opcode: Start

Event ID 320: CAutomationElement_GetCachedPropertyValueStop

Channel: Perf
Task: CAutomationElement_GetCachedPropertyValue
Opcode: Stop

Event ID 321: CAutomationElement_GetCachedPropertyValueExStart

Channel: Perf
Task: CAutomationElement_GetCachedPropertyValueEx
Opcode: Start

Event ID 322: CAutomationElement_GetCachedPropertyValueExStop

Channel: Perf
Task: CAutomationElement_GetCachedPropertyValueEx
Opcode: Stop

Event ID 323: CAutomationElement_GetClickablePointStart

Channel: Perf
Task: CAutomationElement_GetClickablePoint
Opcode: Start

Event ID 324: CAutomationElement_GetClickablePointStop

Channel: Perf
Task: CAutomationElement_GetClickablePoint
Opcode: Stop

Event ID 325: CAutomationElement_GetCurrentPatternStart

Channel: Perf
Task: CAutomationElement_GetCurrentPattern
Opcode: Start

Event ID 326: CAutomationElement_GetCurrentPatternStop

Channel: Perf
Task: CAutomationElement_GetCurrentPattern
Opcode: Stop

Event ID 327: CAutomationElement_GetCurrentPatternAsStart

Channel: Perf
Task: CAutomationElement_GetCurrentPatternAs
Opcode: Start

Event ID 328: CAutomationElement_GetCurrentPatternAsStop

Channel: Perf
Task: CAutomationElement_GetCurrentPatternAs
Opcode: Stop

Event ID 329: CAutomationElement_GetCurrentPropertyValueStart

Channel: Perf
Task: CAutomationElement_GetCurrentPropertyValue
Opcode: Start

Event ID 330: CAutomationElement_GetCurrentPropertyValueStop

Channel: Perf
Task: CAutomationElement_GetCurrentPropertyValue
Opcode: Stop

Event ID 331: CAutomationElement_GetCurrentPropertyValueExStart

Channel: Perf
Task: CAutomationElement_GetCurrentPropertyValueEx
Opcode: Start

Event ID 332: CAutomationElement_GetCurrentPropertyValueExStop

Channel: Perf
Task: CAutomationElement_GetCurrentPropertyValueEx
Opcode: Stop

Event ID 333: CAutomationElement_GetRuntimeIdStart

Channel: Perf
Task: CAutomationElement_GetRuntimeId
Opcode: Start

Event ID 334: CAutomationElement_GetRuntimeIdStop

Channel: Perf
Task: CAutomationElement_GetRuntimeId
Opcode: Stop

Event ID 335: CAutomationElement_SetFocusStart

Channel: Perf
Task: CAutomationElement_SetFocus
Opcode: Start

Event ID 336: CAutomationElement_SetFocusStop

Channel: Perf
Task: CAutomationElement_SetFocus
Opcode: Stop

Event ID 337: CAutomationElement_ShowContextMenuStart

Channel: Perf
Task: CAutomationElement_ShowContextMenu
Opcode: Start

Event ID 338: CAutomationElement_ShowContextMenuStop

Channel: Perf
Task: CAutomationElement_ShowContextMenu
Opcode: Stop

Event ID 339: CAutomationElement_FindAllWithOptionsStart

Channel: Perf
Task: CAutomationElement_FindAllWithOptions
Opcode: Start

Event ID 340: CAutomationElement_FindAllWithOptionsStop

Channel: Perf
Task: CAutomationElement_FindAllWithOptions
Opcode: Stop

Event ID 341: CAutomationElement_FindAllWithOptionsBuildCacheStart

Channel: Perf
Task: CAutomationElement_FindAllWithOptionsBuildCache
Opcode: Start

Event ID 342: CAutomationElement_FindAllWithOptionsBuildCacheStop

Channel: Perf
Task: CAutomationElement_FindAllWithOptionsBuildCache
Opcode: Stop

Event ID 343: CAutomationElement_FindFirstWithOptionsStart

Channel: Perf
Task: CAutomationElement_FindFirstWithOptions
Opcode: Start

Event ID 344: CAutomationElement_FindFirstWithOptionsStop

Channel: Perf
Task: CAutomationElement_FindFirstWithOptions
Opcode: Stop

Event ID 345: CAutomationElement_FindFirstWithOptionsBuildCacheStart

Channel: Perf
Task: CAutomationElement_FindFirstWithOptionsBuildCache
Opcode: Start

Event ID 346: CAutomationElement_FindFirstWithOptionsBuildCacheStop

Channel: Perf
Task: CAutomationElement_FindFirstWithOptionsBuildCache
Opcode: Stop

Event ID 403: CTextRange_CloneStart

Channel: Perf
Task: CTextRange_Clone
Opcode: Start

Event ID 404: CTextRange_CloneStop

Channel: Perf
Task: CTextRange_Clone
Opcode: Stop

Event ID 405: CTextRange_CompareStart

Channel: Perf
Task: CTextRange_Compare
Opcode: Start

Event ID 406: CTextRange_CompareStop

Channel: Perf
Task: CTextRange_Compare
Opcode: Stop

Event ID 407: CTextRange_CompareEndpointsStart

Channel: Perf
Task: CTextRange_CompareEndpoints
Opcode: Start

Event ID 408: CTextRange_CompareEndpointsStop

Channel: Perf
Task: CTextRange_CompareEndpoints
Opcode: Stop

Event ID 409: CTextRange_ExpandToEnclosingUnitStart

Channel: Perf
Task: CTextRange_ExpandToEnclosingUnit
Opcode: Start

Event ID 410: CTextRange_ExpandToEnclosingUnitStop

Channel: Perf
Task: CTextRange_ExpandToEnclosingUnit
Opcode: Stop

Event ID 411: CTextRange_GetAttributeValueStart

Channel: Perf
Task: CTextRange_GetAttributeValue
Opcode: Start

Event ID 412: CTextRange_GetAttributeValueStop

Channel: Perf
Task: CTextRange_GetAttributeValue
Opcode: Stop

Event ID 413: CTextRange_GetEnclosingElementStart

Channel: Perf
Task: CTextRange_GetEnclosingElement
Opcode: Start

Event ID 414: CTextRange_GetEnclosingElementStop

Channel: Perf
Task: CTextRange_GetEnclosingElement
Opcode: Stop

Event ID 415: CTextRange_GetTextStart

Channel: Perf
Task: CTextRange_GetText
Opcode: Start

Event ID 416: CTextRange_GetTextStop

Channel: Perf
Task: CTextRange_GetText
Opcode: Stop

Event ID 417: CTextRange_MoveStart

Channel: Perf
Task: CTextRange_Move
Opcode: Start

Event ID 418: CTextRange_MoveStop

Channel: Perf
Task: CTextRange_Move
Opcode: Stop

Event ID 419: CTextRange_MoveEndpointByUnitStart

Channel: Perf
Task: CTextRange_MoveEndpointByUnit
Opcode: Start

Event ID 420: CTextRange_MoveEndpointByUnitStop

Channel: Perf
Task: CTextRange_MoveEndpointByUnit
Opcode: Stop

Event ID 421: CTextRange_MoveEndpointByRangeStart

Channel: Perf
Task: CTextRange_MoveEndpointByRange
Opcode: Start

Event ID 422: CTextRange_MoveEndpointByRangeStop

Channel: Perf
Task: CTextRange_MoveEndpointByRange
Opcode: Stop

Event ID 423: CTextRange_GetChildrenStart

Channel: Perf
Task: CTextRange_GetChildren
Opcode: Start

Event ID 424: CTextRange_GetChildrenStop

Channel: Perf
Task: CTextRange_GetChildren
Opcode: Stop

Event ID 501: CTreeWalker_NavigateStart

Channel: Perf
Task: CTreeWalker_Navigate
Opcode: Start

Event ID 502: CTreeWalker_NavigateStop

Channel: Perf
Task: CTreeWalker_Navigate
Opcode: Stop

Event ID 503: RichEditProxy_GetTextStart

Channel: Perf
Task: RichEditProxy_GetText
Opcode: Start

Event ID 504: RichEditProxy_GetTextStop

Channel: Perf
Task: RichEditProxy_GetText
Opcode: Stop

Event ID 505: RichEditProxy_GetVisibleRangeStart

Channel: Perf
Task: RichEditProxy_GetVisibleRange
Opcode: Start

Event ID 506: RichEditProxy_GetVisibleRangeStop

Channel: Perf
Task: RichEditProxy_GetVisibleRange
Opcode: Stop

Event ID 507: EditProxy_NextWordStart

Channel: Perf
Task: EditProxy_NextWord
Opcode: Start

Event ID 508: EditProxy_NextWordStop

Channel: Perf
Task: EditProxy_NextWord
Opcode: Stop

Event ID 509: ClientConnection_CallWithReturnStart

Channel: Perf
Task: ClientConnection_CallWithReturn
Opcode: Start

Fields #

Name	Description
`MethodName` UnicodeString
`IsCrossMachine` Boolean
`ProcessId` UInt32
`ObjectReference` UInt32
`Duration` UInt64
`RequestId` UInt32

Event ID 510: ClientConnection_CallWithReturnStop

Channel: Perf
Task: ClientConnection_CallWithReturn
Opcode: Stop

Fields #

Name	Description
`MethodName` UnicodeString
`IsCrossMachine` Boolean
`ProcessId` UInt32
`ObjectReference` UInt32
`Duration` UInt64
`RequestId` UInt32

Event ID 511: CSelectionPattern_GetCurrentSelectionStart

Channel: Perf
Task: CSelectionPattern_GetCurrentSelection
Opcode: Start

Event ID 512: CSelectionPattern_GetCurrentSelectionStop

Channel: Perf
Task: CSelectionPattern_GetCurrentSelection
Opcode: Stop

Event ID 513: HandleWinEventStart

Channel: Perf
Task: HandleWinEvent
Opcode: Start

Fields #

Name	Description
`Method` UnicodeString
`HWND` HexInt32
`WindowClassName` UnicodeString
`EventId` HexInt32
`ObjectId` HexInt32
`ChildId` UInt32

Event ID 514: HandleWinEventStop

Channel: Perf
Task: HandleWinEvent
Opcode: Stop

Fields #

Name	Description
`Method` UnicodeString
`HWND` HexInt32
`WindowClassName` UnicodeString
`EventId` HexInt32
`ObjectId` HexInt32
`ChildId` UInt32

Event ID 515: CoalesceWinEvent

Channel: Perf
Task: CoalesceWinEvent

Fields #

Name	Description
`Method` UnicodeString
`HWND` HexInt32
`WindowClassName` UnicodeString
`EventId` HexInt32
`CoalescedEvents` UInt32

Event ID 517: UiaProviderCalloutStart

Channel: Perf
Level: Informational
Task: UiaProviderCallout
Opcode: Start

Fields #

Name	Description
`MethodName` UnicodeString
`Parameter1` UInt32
`Parameter2` UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-UIAutomationCore",
    "guid": "{820a42d8-38c4-465d-b64e-d7d56ea1d612}",
    "event_source_name": "",
    "event_id": 517,
    "version": 0,
    "level": 4,
    "task": 517,
    "opcode": 1,
    "keywords": "0x4000000000010000",
    "time_created": "2026-07-19T04:22:01.146367800+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "BF440000-0BF1-000D-13CE-4CBFF10BDD01"
    },
    "execution": {
      "process_id": 12448,
      "thread_id": 14096
    },
    "channel": "Microsoft-Windows-UIAutomationCore/Perf",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "MethodName": "IRawElementProviderFragment::Navigate",
    "Parameter1": "0",
    "Parameter2": "0"
  },
  "message": ""
}

Event ID 518: UiaProviderCalloutStop

Channel: Perf
Level: Informational
Task: UiaProviderCallout
Opcode: Stop

Fields #

Name	Description
`MethodName` UnicodeString
`Parameter1` UInt32
`Parameter2` UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-UIAutomationCore",
    "guid": "{820a42d8-38c4-465d-b64e-d7d56ea1d612}",
    "event_source_name": "",
    "event_id": 518,
    "version": 0,
    "level": 4,
    "task": 517,
    "opcode": 2,
    "keywords": "0x4000000000010000",
    "time_created": "2026-07-19T04:22:01.148389900+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "BF440000-0BF1-000D-13CE-4CBFF10BDD01"
    },
    "execution": {
      "process_id": 12448,
      "thread_id": 14096
    },
    "channel": "Microsoft-Windows-UIAutomationCore/Perf",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "MethodName": "IRawElementProviderFragment::Navigate",
    "Parameter1": "0",
    "Parameter2": "0"
  },
  "message": ""
}

Event ID 519: MsaaProviderCalloutStart

Channel: Perf
Task: MsaaProviderCallout
Opcode: Start

Fields #

Name	Description
`MethodName` UnicodeString
`HWND` HexInt32

Event ID 520: MsaaProviderCalloutStop

Channel: Perf
Task: MsaaProviderCallout
Opcode: Stop

Fields #

Name	Description
`MethodName` UnicodeString
`HWND` HexInt32

Event ID 521: ClientConnection_DispatchToProviderStart

Channel: Perf
Task: ClientConnection_DispatchToProvider
Opcode: Start

Fields #

Name	Description
`IsChannelConnection` Boolean
`IsCrossMachine` Boolean
`RequestId` UInt32

Event ID 522: ClientConnection_DispatchToProviderStop

Channel: Perf
Task: ClientConnection_DispatchToProvider
Opcode: Stop

Fields #

Name	Description
`IsChannelConnection` Boolean
`IsCrossMachine` Boolean
`RequestId` UInt32

Event ID 523: ProcessIncomingRequestStart

Channel: Perf
Task: ProcessIncomingRequest
Opcode: Start

Fields #

Name	Description
`MethodName` UnicodeString
`ObjectReference` UInt32
`RequestId` UInt32

Event ID 524: ProcessIncomingRequestStop

Channel: Perf
Task: ProcessIncomingRequest
Opcode: Stop

Fields #

Name	Description
`MethodName` UnicodeString
`ObjectReference` UInt32
`RequestId` UInt32

Event ID 525: ProcessIncomingRequest_ContextChangeStart

Channel: Perf
Task: ProcessIncomingRequest_ContextChange
Opcode: Start

Fields #

Name	Description
`InstanceId` UInt32

Event ID 526: ProcessIncomingRequest_ContextChangeStop

Channel: Perf
Task: ProcessIncomingRequest_ContextChange
Opcode: Stop

Fields #

Name	Description
`InstanceId` UInt32

Event ID 527: ServerConnection_OnData_ForceFlush

Channel: Perf
Task: ServerConnection_OnData_ForceFlush

Event ID 528: ReleaseCollection_ObjectNotFound

Channel: Perf
Task: ReleaseCollection_ObjectNotFound

Event ID 529: ReleaseCollection_ReleaseObjects

Channel: Perf
Task: ReleaseCollection_ReleaseObjects

Fields #

Name	Description
`ObjectCount` UInt32
`IsCombinedWithOtherMethod` Boolean

Event ID 530: ReleaseCollection_IncompatibleContext

Channel: Perf
Task: ReleaseCollection_IncompatibleContext

Event ID 531: ClientConnection_StateChange

Channel: Perf
Task: ClientConnection_StateChange

Fields #

Name	Description
`NewState` UnicodeString

Event ID 532: IsProcessFrozenCheckStart

Channel: Perf
Task: IsProcessFrozenCheck
Opcode: Start

Event ID 533: IsProcessFrozenCheckStop

Channel: Perf
Task: IsProcessFrozenCheck
Opcode: Stop

Event ID 534: ClientConnection_InactiveRequestResponse

Channel: Perf
Task: ClientConnection_InactiveRequestResponse

Fields #

Name	Description
`RequestId` UInt32

Event ID 535: ClientConnection_ConnectionTerminated

Channel: Perf
Task: ClientConnection_ConnectionTerminated

Fields #

Name	Description
`IsError` Boolean

Event ID 536: EventManager_DoCalldowns_UniversalStart

Channel: Perf
Task: EventManager_DoCalldowns_Universal
Opcode: Start

Event ID 537: EventManager_DoCalldowns_UniversalStop

Channel: Perf
Task: EventManager_DoCalldowns_Universal
Opcode: Stop

Fields #

Name	Description
`ProvidersToAdviseCount` UInt32
`RemoteNodesCount` UInt32
`PartialNodesCount` UInt32

Event ID 538: EventManager_DoCalldowns_ClientSideOptimizedStart

Channel: Perf
Task: EventManager_DoCalldowns_ClientSideOptimized
Opcode: Start

Event ID 539: EventManager_DoCalldowns_ClientSideOptimizedStop

Channel: Perf
Task: EventManager_DoCalldowns_ClientSideOptimized
Opcode: Stop

Event ID 540: EventManager_CollectNodesToAdviseStart

Channel: Perf
Task: EventManager_CollectNodesToAdvise
Opcode: Start

Event ID 541: EventManager_CollectNodesToAdviseStop

Channel: Perf
Task: EventManager_CollectNodesToAdvise
Opcode: Stop

Fields #

Name	Description
`ProvidersToAdviseCount` UInt32
`RemoteNodesCount` UInt32
`PartialNodesCount` UInt32

Event ID 542: EventManager_CollectClientSideItemsToAdviseStart

Channel: Perf
Task: EventManager_CollectClientSideItemsToAdvise
Opcode: Start

Event ID 543: EventManager_CollectClientSideItemsToAdviseStop

Channel: Perf
Task: EventManager_CollectClientSideItemsToAdvise
Opcode: Stop

Event ID 544: ClientConnection_RequestWritten

Channel: Perf
Task: ClientConnection_RequestWritten

Fields #

Name	Description
`RequestId` UInt32
`PeerProcessId` UInt32
`IsCrossMachine` Boolean
`BytesWritten` UInt32
`RequestTimeout` UInt32
`HRESULT` HexInt32

Event ID 545: ServerConnection_RequestReceived

Channel: Perf
Task: ServerConnection_RequestReceived

Fields #

Name	Description
`RequestId` UInt32
`PeerProcessId` UInt32
`BytesReceived` UInt32

Event ID 546: ServerConnection_ResponseWritten

Channel: Perf
Task: ServerConnection_ResponseWritten

Fields #

Name	Description
`RequestId` UInt32
`PeerProcessId` UInt32
`BytesWritten` UInt32
`HRESULT` HexInt32

Event ID 547: ClientConnection_ResponseReceived

Channel: Perf
Task: ClientConnection_ResponseReceived

Fields #

Name	Description
`RequestId` UInt32
`PeerProcessId` UInt32
`IsCrossMachine` Boolean
`BytesReceived` UInt32

Event ID 603: IA2TextRange_CloneStart

Channel: Perf
Task: IA2TextRange_Clone
Opcode: Start

Event ID 604: IA2TextRange_CloneStop

Channel: Perf
Task: IA2TextRange_Clone
Opcode: Stop

Event ID 605: IA2TextRange_CompareStart

Channel: Perf
Task: IA2TextRange_Compare
Opcode: Start

Event ID 606: IA2TextRange_CompareStop

Channel: Perf
Task: IA2TextRange_Compare
Opcode: Stop

Event ID 607: IA2TextRange_CompareEndpointsStart

Channel: Perf
Task: IA2TextRange_CompareEndpoints
Opcode: Start

Event ID 608: IA2TextRange_CompareEndpointsStop

Channel: Perf
Task: IA2TextRange_CompareEndpoints
Opcode: Stop

Event ID 609: IA2TextRange_ExpandToEnclosingUnitStart

Channel: Perf
Task: IA2TextRange_ExpandToEnclosingUnit
Opcode: Start

Event ID 610: IA2TextRange_ExpandToEnclosingUnitStop

Channel: Perf
Task: IA2TextRange_ExpandToEnclosingUnit
Opcode: Stop

Event ID 611: IA2TextRange_GetAttributeValueStart

Channel: Perf
Task: IA2TextRange_GetAttributeValue
Opcode: Start

Event ID 612: IA2TextRange_GetAttributeValueStop

Channel: Perf
Task: IA2TextRange_GetAttributeValue
Opcode: Stop

Event ID 613: IA2TextRange_GetEnclosingElementStart

Channel: Perf
Task: IA2TextRange_GetEnclosingElement
Opcode: Start

Event ID 614: IA2TextRange_GetEnclosingElementStop

Channel: Perf
Task: IA2TextRange_GetEnclosingElement
Opcode: Stop

Event ID 615: IA2TextRange_GetTextStart

Channel: Perf
Task: IA2TextRange_GetText
Opcode: Start

Event ID 616: IA2TextRange_GetTextStop

Channel: Perf
Task: IA2TextRange_GetText
Opcode: Stop

Event ID 617: IA2TextRange_MoveStart

Channel: Perf
Task: IA2TextRange_Move
Opcode: Start

Event ID 618: IA2TextRange_MoveStop

Channel: Perf
Task: IA2TextRange_Move
Opcode: Stop

Event ID 619: IA2TextRange_MoveEndpointByUnitStart

Channel: Perf
Task: IA2TextRange_MoveEndpointByUnit
Opcode: Start

Event ID 620: IA2TextRange_MoveEndpointByUnitStop

Channel: Perf
Task: IA2TextRange_MoveEndpointByUnit
Opcode: Stop

Event ID 621: IA2TextRange_MoveEndpointByRangeStart

Channel: Perf
Task: IA2TextRange_MoveEndpointByRange
Opcode: Start

Event ID 622: IA2TextRange_MoveEndpointByRangeStop

Channel: Perf
Task: IA2TextRange_MoveEndpointByRange
Opcode: Stop

Event ID 623: IA2TextRange_GetChildrenStart

Channel: Perf
Task: IA2TextRange_GetChildren
Opcode: Start

Event ID 624: IA2TextRange_GetChildrenStop

Channel: Perf
Task: IA2TextRange_GetChildren
Opcode: Stop

Event ID 625: IA2TextRange_FindAttributeStart

Channel: Perf
Task: IA2TextRange_FindAttribute
Opcode: Start

Event ID 626: IA2TextRange_FindAttributeStop

Channel: Perf
Task: IA2TextRange_FindAttribute
Opcode: Stop

Event ID 627: IA2TextRange_FindTextStart

Channel: Perf
Task: IA2TextRange_FindText
Opcode: Start

Event ID 628: IA2TextRange_FindTextStop

Channel: Perf
Task: IA2TextRange_FindText
Opcode: Stop

Event ID 629: IA2TextRange_GetBoundingRectanglesStart

Channel: Perf
Task: IA2TextRange_GetBoundingRectangles
Opcode: Start

Event ID 630: IA2TextRange_GetBoundingRectanglesStop

Channel: Perf
Task: IA2TextRange_GetBoundingRectangles
Opcode: Stop

Event ID 631: IA2TextRange_SelectStart

Channel: Perf
Task: IA2TextRange_Select
Opcode: Start

Event ID 632: IA2TextRange_SelectStop

Channel: Perf
Task: IA2TextRange_Select
Opcode: Stop

Event ID 633: IA2TextRange_AddToSelectionStart

Channel: Perf
Task: IA2TextRange_AddToSelection
Opcode: Start

Event ID 634: IA2TextRange_AddToSelectionStop

Channel: Perf
Task: IA2TextRange_AddToSelection
Opcode: Stop

Event ID 635: IA2TextRange_RemoveFromSelectionStart

Channel: Perf
Task: IA2TextRange_RemoveFromSelection
Opcode: Start

Event ID 636: IA2TextRange_RemoveFromSelectionStop

Channel: Perf
Task: IA2TextRange_RemoveFromSelection
Opcode: Stop

Event ID 637: IA2TextRange_ScrollIntoViewStart

Channel: Perf
Task: IA2TextRange_ScrollIntoView
Opcode: Start

Event ID 638: IA2TextRange_ScrollIntoViewStop

Channel: Perf
Task: IA2TextRange_ScrollIntoView
Opcode: Stop

Event ID 701: ClientConnectionTimeout

Channel: Perf
Task: ClientConnectionTimeout

Fields #

Name	Description
`ProcessName` UnicodeString
`HWND` HexInt32
`WindowClassName` UnicodeString
`RequestedMethod` UnicodeString
`RequestedTimeout` UInt32

Event ID 702: EventOverflow

Channel: Perf
Task: EventOverflow

Fields #

Name	Description
`ProcessName` UnicodeString
`HWND` HexInt32
`WindowClassName` UnicodeString
`TotalEvents` UInt32
`EventId` HexInt32
`EventCount` UInt32

Provenance

ETW provider GUID 820a42d8-38c4-465d-b64e-d7d56ea1d612

Defined in UIAutomationCore.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 7.2.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 7.2.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB
JD-WIN11-22H2-1-native-20260719, sample captured from a live trace, binary version 7.2.22621.1, captured 2026-07-19
Native ETL capture of controlled UI Automation tree queries and cache operations; identifiers were sanitized in catalog examples.