IIS: WWW Server

57 events across 1 channel

Event ID	Title	Channel
1		ETW Trace
2		ETW Trace
3		ETW Trace
4		ETW Trace
5		ETW Trace
6		ETW Trace
7		ETW Trace
8		ETW Trace
9		ETW Trace
10		ETW Trace
11		ETW Trace
12		ETW Trace
13		ETW Trace
14		ETW Trace
15		ETW Trace
16		ETW Trace
17		ETW Trace
18		ETW Trace
19		ETW Trace
20		ETW Trace
21		ETW Trace
22		ETW Trace
23		ETW Trace
24		ETW Trace
25		ETW Trace
26		ETW Trace
27		ETW Trace
28		ETW Trace
29		ETW Trace
30		ETW Trace
31		ETW Trace
32		ETW Trace
33		ETW Trace
34		ETW Trace
35		ETW Trace
36		ETW Trace
37		ETW Trace
38		ETW Trace
39		ETW Trace
40		ETW Trace
41		ETW Trace
42		ETW Trace
43		ETW Trace
44		ETW Trace
45		ETW Trace
46		ETW Trace
47		ETW Trace
48		ETW Trace
49		ETW Trace
50		ETW Trace
51		ETW Trace
52		ETW Trace
53		ETW Trace
54		ETW Trace
55		ETW Trace
56		ETW Trace
57		ETW Trace

Event ID 1 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`SiteId` mof:UInt32	—
`AppPoolId` mof:String	—
`ConnId` mof:UInt64	—
`RawConnId` mof:UInt64	—
`RequestURL` mof:String	—
`RequestVerb` mof:String	—

Event ID 2 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ModuleName` mof:String	—
`Notification` mof:UInt32	—
`fIsPostNotificationEvent` mof:Boolean	—
`NotificationStatus` mof:UInt32	—

Event ID 3 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ModuleName` mof:String	—
`Notification` mof:UInt32	—
`fIsPostNotificationEvent` mof:Boolean	—
`CompletionBytes` mof:UInt32	—
`ErrorCode` mof:UInt32	—

Event ID 4 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ModuleName` mof:String	—
`Data1` mof:String	—
`Data2` mof:String	—
`ErrorCode` mof:UInt32	—

Event ID 5 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ErrorCode` mof:UInt32	—
`OriginalFileName` mof:String	—
`OriginalFileSize` mof:UInt32	—
`CompressedFileName` mof:String	—
`CompressedFileSize` mof:UInt32	—

Event ID 6 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ModuleName` mof:String	—
`Data1` mof:String	—
`Data2` mof:String	—
`ErrorCode` mof:UInt32	—

Event ID 7 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ModuleName` mof:String	—
`Data1` mof:String	—
`Data2` mof:String	—
`ErrorCode` mof:UInt32	—

Event ID 8 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ErrorCode` mof:UInt32	—

Event ID 9 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`DataType` mof:UInt32	—
`DataSize` mof:UInt32	—

Event ID 10 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`FileName` mof:String	—
`UserName` mof:String	—
`DomainName` mof:String	—

Event ID 11 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`Successful` mof:Boolean	—
`FileFromCache` mof:Boolean	—
`FileAddedToCache` mof:Boolean	—
`FileDirmoned` mof:Boolean	—
`LastModCheckErrorIgnored` mof:Boolean	—
`ErrorCode` mof:UInt32	—
`LastModifiedTime` mof:String	—

Event ID 12 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ErrorCode` mof:UInt32	—

Event ID 13 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`PhysicalPath` mof:String	—
`URLInfoFromCache` mof:Boolean	—
`URLInfoAddedToCache` mof:Boolean	—
`ErrorCode` mof:UInt32	—

Event ID 14 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`HttpsysCacheable` mof:Boolean	—
`Reason` mof:UInt32	—
`CachePolicy` mof:UInt32	—
`TimeToLive` mof:UInt32	—

Event ID 15 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`OrigURL` mof:String	—
`OrigPath` mof:String	—
`AccessPerms` mof:UInt32	—
`MatchingPath` mof:UInt32	—
`MatchingURL` mof:UInt32	—
`ScriptMapEntry` mof:String	—

Event ID 16 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ModuleName` mof:String	—
`Notification` mof:UInt32	—
`HttpStatus` mof:UInt32	—
`HttpReason` mof:String	—
`HttpSubStatus` mof:UInt16	—
`ErrorCode` mof:UInt32	—
`ConfigExceptionInfo` mof:String	—

Event ID 17 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ModuleName` mof:String	—
`Notification` mof:UInt32	—
`HttpStatus` mof:UInt32	—
`HttpReason` mof:String	—

Event ID 18 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`FinalUserName` mof:String	—
`PasswordChanged` mof:Boolean	—

Event ID 19 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ErrorCode` mof:UInt32	—

Event ID 20 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`FileName` mof:String	—
`UserName` mof:String	—
`DomainName` mof:String	—

Event ID 21 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`HttpStatus` mof:UInt32	—

Event ID 22 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—

Event ID 23 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`PackageName` mof:String	—

Event ID 24 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—

Event ID 25 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`OrigClientHostName` mof:String	—
`OrigClientUserName` mof:String	—
`OrigServerName` mof:String	—
`OrigOperation` mof:String	—
`OrigTarget` mof:String	—
`OrigParameters` mof:String	—
`OrigHttpStatus` mof:UInt32	—
`OrigWin32Status` mof:UInt32	—

Event ID 26 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`FinalClientHostName` mof:String	—
`FinalClientUserName` mof:String	—
`FinalServerName` mof:String	—
`FinalOperation` mof:String	—
`FinalTarget` mof:String	—
`FinalParameters` mof:String	—
`FinalHttpStatus` mof:UInt32	—
`FinalWin32Status` mof:UInt32	—

Event ID 27 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`RequestAuthType` mof:UInt32	—

Event ID 28 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—

Event ID 29 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`RequestedURL` mof:String	—
`PhysicalPath` mof:String	—
`DenialReason` mof:UInt32	—

Event ID 30 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`PhysicalPath` mof:String	—
`AccessPerms` mof:UInt32	—

Event ID 31 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`SiteId` mof:UInt32	—
`RequestURL` mof:String	—
`RequestVerb` mof:String	—
`RecursiveLevel` mof:UInt32	—

Event ID 32 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`BytesSent` mof:UInt32	—
`HttpStatus` mof:UInt32	—
`HttpSubStatus` mof:UInt16	—

Event ID 33 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`HttpStatus` mof:UInt32	—
`HttpSubStatus` mof:UInt16	—
`FileNameOrURL` mof:String	—

Event ID 34 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`HeaderName` mof:String	—
`HeaderValue` mof:String	—

Event ID 35 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—

Event ID 36 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`BytesSent` mof:UInt32	—
`ErrorCode` mof:UInt32	—

Event ID 37 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—

Event ID 38 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`BytesReceived` mof:UInt32	—
`ErrorCode` mof:UInt32	—

Event ID 39 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`FilePath` mof:String	—

Event ID 40 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ConfigPath` mof:String	—

Event ID 41 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`Name` mof:String	—
`Type` mof:String	—

Event ID 42 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`OldUrl` mof:String	—
`NewUrl` mof:String	—

Event ID 43 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`OldHandlerName` mof:String	—
`NewHandlerName` mof:String	—
`NewHandlerModules` mof:String	—
`NewHandlerScriptProcessor` mof:String	—
`NewHandlerType` mof:String	—

Event ID 44 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`AuthType` mof:String	—
`UserName` mof:String	—
`SupportsIsInRole` mof:Boolean	—

Event ID 45 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`Name` mof:String	—
`Precondition` mof:String	—

Event ID 46 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`Name` mof:String	—
`Precondition` mof:String	—

Event ID 47 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`Headers` mof:String	—

Event ID 48 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`FileName` mof:String	—
`Offset` mof:UInt64	—
`Size` mof:UInt64	—

Event ID 49 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`Buffer` mof:String	—

Event ID 50 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`Headers` mof:String	—

Event ID 51 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`Buffer` mof:String	—

Event ID 52 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`Reason` mof:UInt32	—

Event ID 53 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`HeaderName` mof:String	—
`HeaderValue` mof:String	—
`Replace` mof:Boolean	—

Event ID 54 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`ModuleName` mof:String	—
`ErrorCode` mof:UInt32	—

Event ID 55 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`KMUsed` mof:Boolean	—
`APUserName` mof:String	—
`SPNName` mof:String	—
`ADConfigIsOK` mof:Boolean	—
`KerberosInfo` mof:String	—

Event ID 56 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`HeaderName` mof:String	—
`HeaderValue` mof:String	—
`Replace` mof:Boolean	—

Event ID 57 —

Provider: IIS: WWW Server
Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object	—
`HeaderName` mof:String	—
`HeaderValue` mof:String	—
`Replace` mof:Boolean	—