Microsoft-Windows-W3LOGSVC

Event	Title	Channel	Sample	Rule
6001	W3C Logging Service failed to start	Operational	N	N
6002	W3C Logging Service failed to create the log file directory 'LogDirectoryName' …	Operational	N	N
6003	W3C Logging Service failed to create log file 'LogFileName' for site id 'SiteID'	Operational	N	N
6004	W3C Logging Service failed to write to the log file 'LogFileName' for site id …	Operational	N	N
6005	W3C Logging Service failed to connect to the pipe server in the worker process …	Operational	N	N
6006	W3C Logging Service failed to write message to the pipe server in the worker …	Operational	N	N
6007	W3C Logging Service failed to stop	Operational	N	N
6008	W3C Logging Service is stopping because it encountered an error	Operational	N	N
6009	Owner of log file or directory 'LogFileName' for site id 'SiteID' is invalid	Operational	N	N
6010	W3C Logging Service failed to read config for site id 'SiteID'	Operational	N	N
6011	'DroppedEvents' ETW session events to W3C Logging Service were dropped	Operational	N	N
3221231473	W3C Logging Service failed to start.	Operational	N	N
3221231474	W3C Logging Service failed to create the log file directory 'LogDirectoryName' …	Operational	N	N
3221231475	W3C Logging Service failed to create log file 'LogFileName' for site id …	Operational	N	N
3221231476	W3C Logging Service failed to write to the log file 'LogFileName' for site id …	Operational	N	N
3221231477	W3C Logging Service failed to connect to the pipe server in the worker process …	Operational	N	N
3221231478	W3C Logging Service failed to write message to the pipe server in the worker …	Operational	N	N
3221231479	W3C Logging Service failed to stop.	Operational	N	N
3221231480	W3C Logging Service is stopping because it encountered an error.	Operational	N	N
3221231481	Owner of log file or directory 'LogFileName' for site id 'SiteID' is invalid.	Operational	N	N
3221231482	W3C Logging Service failed to read config for site id 'SiteID'.	Operational	N	N
3221231483	'.	Operational	N	N

Event ID 6001: W3C Logging Service failed to start

Channel: Operational

Fields #

Name	Description
`__binLength` UInt32
`binary` Binary

Event ID 6002: W3C Logging Service failed to create the log file directory 'LogDirectoryName' for site id 'SiteID'

Channel: Operational

Fields #

Name	Description
`SiteID` UnicodeString
`LogDirectoryName` UnicodeString
`__binLength` UInt32
`binary` Binary

Event ID 6003: W3C Logging Service failed to create log file 'LogFileName' for site id 'SiteID'

Channel: Operational

Fields #

Name	Description
`SiteID` UnicodeString
`LogFileName` UnicodeString
`__binLength` UInt32
`binary` Binary

Event ID 6004: W3C Logging Service failed to write to the log file 'LogFileName' for site id 'SiteID'

Channel: Operational

Fields #

Name	Description
`SiteID` UnicodeString
`LogFileName` UnicodeString
`__binLength` UInt32
`binary` Binary

Event ID 6005: W3C Logging Service failed to connect to the pipe server in the worker process with pipe name 'PipeName'

Channel: Operational

Fields #

Name	Description
`PipeName` UnicodeString
`__binLength` UInt32
`binary` Binary

Event ID 6006: W3C Logging Service failed to write message to the pipe server in the worker process with id 'PID'

Channel: Operational

Fields #

Name	Description
`PID` UnicodeString
`__binLength` UInt32
`binary` Binary

Event ID 6007: W3C Logging Service failed to stop

Channel: Operational

Fields #

Name	Description
`__binLength` UInt32
`binary` Binary

Event ID 6008: W3C Logging Service is stopping because it encountered an error

Channel: Operational

Fields #

Name	Description
`__binLength` UInt32
`binary` Binary

Event ID 6009: Owner of log file or directory 'LogFileName' for site id 'SiteID' is invalid

Channel: Operational

Fields #

Name	Description
`SiteID` UnicodeString
`LogFileName` UnicodeString
`__binLength` UInt32
`binary` Binary

Event ID 6010: W3C Logging Service failed to read config for site id 'SiteID'

Channel: Operational

Fields #

Name	Description
`SiteID` UnicodeString
`__binLength` UInt32
`binary` Binary

Event ID 6011: 'DroppedEvents' ETW session events to W3C Logging Service were dropped

Channel: Operational

Fields #

Name	Description
`DroppedEvents` UnicodeString
`__binLength` UInt32
`binary` Binary

Event ID 3221231473: W3C Logging Service failed to start.

Channel: Operational

Fields #

Name	Description
`__binLength`
`binary`

Event ID 3221231474: W3C Logging Service failed to create the log file directory 'LogDirectoryName' for site id 'SiteID'.

Channel: Operational

Message #

W3C Logging Service failed to create the log file directory '%2' for site id '%1'.

Fields #

Name	Description
`SiteID`
`LogDirectoryName`
`__binLength`
`binary`

Event ID 3221231475: W3C Logging Service failed to create log file 'LogFileName' for site id 'SiteID'.

Channel: Operational

Message #

W3C Logging Service failed to create log file '%2' for site id '%1'.

Fields #

Name	Description
`SiteID`
`LogFileName`
`__binLength`
`binary`

Event ID 3221231476: W3C Logging Service failed to write to the log file 'LogFileName' for site id 'SiteID'.

Channel: Operational

Message #

W3C Logging Service failed to write to the log file '%2' for site id '%1'.

Fields #

Name	Description
`SiteID`
`LogFileName`
`__binLength`
`binary`

Event ID 3221231477: W3C Logging Service failed to connect to the pipe server in the worker process with pipe name 'PipeName'.

Channel: Operational

Message #

W3C Logging Service failed to connect to the pipe server in the worker process with pipe name '%1'.

Fields #

Name	Description
`PipeName`
`__binLength`
`binary`

Event ID 3221231478: W3C Logging Service failed to write message to the pipe server in the worker process with id 'PID'.

Channel: Operational

Message #

W3C Logging Service failed to write message to the pipe server in the worker process with id '%1'.

Fields #

Name	Description
`PID`
`__binLength`
`binary`

Event ID 3221231479: W3C Logging Service failed to stop.

Channel: Operational

Fields #

Name	Description
`__binLength`
`binary`

Event ID 3221231480: W3C Logging Service is stopping because it encountered an error.

Channel: Operational

Description

W3C Logging Service is stopping because it encountered an error. The data field contains the error number.

Message #

W3C Logging Service is stopping because it encountered an error. The data field contains the error number.

Fields #

Name	Description
`__binLength`
`binary`

Event ID 3221231481: Owner of log file or directory 'LogFileName' for site id 'SiteID' is invalid.

Channel: Operational

Message #

Owner of log file or directory '%2' for site id '%1' is invalid.

Fields #

Name	Description
`SiteID`
`LogFileName`
`__binLength`
`binary`

Event ID 3221231482: W3C Logging Service failed to read config for site id 'SiteID'.

Channel: Operational

Message #

W3C Logging Service failed to read config for site id '%1'.

Fields #

Name	Description
`SiteID`
`__binLength`
`binary`

Event ID 3221231483: '.

Channel: Operational

Description

'DroppedEvents' ETW session events to W3C Logging Service were dropped. You will not find some entries in the log file.

Message #

'%1' ETW session events to W3C Logging Service were dropped. You will not find some entries in the log file.

Fields #

Name	Description
`DroppedEvents`
`__binLength`
`binary`