Microsoft-Office-Events
91 events across 2 channels
Event ID 1 — CallStack event description message: cValue.
Description
CallStack event description message: cValue.
Message #
Fields #
| Name | Description |
|---|---|
cValue UInt32 | — |
Frame Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "1",
"version": "0",
"level": "4",
"task": "1",
"opcode": "10",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cValue": "0",
"Frame": "0x0"
},
"message": ""
}
Event ID 2 — CallStackModule event description message: BaseAddress.
Description
CallStackModule event description message: BaseAddress.
Message #
Fields #
| Name | Description |
|---|---|
BaseAddress Pointer | — |
TimeDateStamp UInt32 | — |
Size UInt32 | — |
wzName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "2",
"version": "0",
"level": "4",
"task": "1",
"opcode": "11",
"keywords": 9223372036854775809,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"BaseAddress": "0x0",
"TimeDateStamp": "0",
"Size": "0",
"wzName": ""
},
"message": ""
}
Event ID 3 — BudgetCreate event description message: dwTag.
Description
BudgetCreate event description message: dwTag.
Message #
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
dwID UInt32 | — |
dwBudgetType UInt32 | — |
dwFlags UInt32 | — |
Limit Int32 | — |
dwInterval UInt32 | — |
wzData UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "3",
"version": "0",
"level": "4",
"task": "2",
"opcode": "12",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"dwID": "0",
"dwBudgetType": "0",
"dwFlags": "0",
"Limit": "0",
"dwInterval": "0",
"wzData": ""
},
"message": ""
}
Event ID 4 — BudgetUpdate event description message: dwTag.
Description
BudgetUpdate event description message: dwTag.
Message #
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
dwID UInt32 | — |
dwBudgetType UInt32 | — |
Update Int32 | — |
dwTimeNow UInt32 | — |
wzData UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "4",
"version": "0",
"level": "4",
"task": "2",
"opcode": "13",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"dwID": "0",
"dwBudgetType": "0",
"Update": "0",
"dwTimeNow": "0",
"wzData": ""
},
"message": ""
}
Event ID 5 — BudgetDelete event description message: dwTag.
Description
BudgetDelete event description message: dwTag.
Message #
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
dwID UInt32 | — |
dwBudgetType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "5",
"version": "0",
"level": "4",
"task": "2",
"opcode": "14",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"dwID": "0",
"dwBudgetType": "0"
},
"message": ""
}
Event ID 6 — CodeMarker event description message: EventData.
Description
CodeMarker event description message: EventData.
Message #
Fields #
| Name | Description |
|---|---|
EventData | — |
dwCodeMarker HexInt32 | — |
dwModuleId Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "6",
"version": "0",
"level": "4",
"task": "2",
"opcode": "16",
"keywords": 9223372036854775812,
"time_created": "2026-03-14T21:43:16.796962700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"EventData": ""
},
"message": ""
}
Event ID 7 — SqmD event description message: dwDatapoint.
Description
SqmD event description message: dwDatapoint.
Message #
Fields #
| Name | Description |
|---|---|
dwDatapoint UInt32 | — |
dwTick UInt32 | — |
dwValue1 UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "7",
"version": "0",
"level": "4",
"task": "2",
"opcode": "17",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwDatapoint": "0",
"dwTick": "0",
"dwValue1": "0"
},
"message": ""
}
Event ID 8 — SqmDA event description message: dwDatapoint.
Description
SqmDA event description message: dwDatapoint.
Message #
Fields #
| Name | Description |
|---|---|
dwDatapoint UInt32 | — |
dwTick UInt32 | — |
dwValue1 UInt32 | — |
dwCount UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "8",
"version": "0",
"level": "4",
"task": "2",
"opcode": "18",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwDatapoint": "0",
"dwTick": "0",
"dwValue1": "0",
"dwCount": "0"
},
"message": ""
}
Event ID 9 — SqmS event description message: dwDatapoint.
Description
SqmS event description message: dwDatapoint.
Message #
Fields #
| Name | Description |
|---|---|
dwDatapoint UInt32 | — |
dwTick UInt32 | — |
cValue UInt32 | — |
dwValue UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "9",
"version": "0",
"level": "4",
"task": "2",
"opcode": "19",
"keywords": 9223372036854775816,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwDatapoint": "0",
"dwTick": "0",
"cValue": "0",
"dwValue": "0"
},
"message": ""
}
Event ID 10 — BudgetSetRate event description message: dwTag.
Description
BudgetSetRate event description message: dwTag.
Message #
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
dwID UInt32 | — |
dwBudgetType UInt32 | — |
Limit Int32 | — |
dwInterval UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "10",
"version": "0",
"level": "4",
"task": "2",
"opcode": "20",
"keywords": 9223372036854775810,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"dwID": "0",
"dwBudgetType": "0",
"Limit": "0",
"dwInterval": "0"
},
"message": ""
}
Event ID 11 — PCX Debug
Description
PCX Debug.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
dwLine UInt32 | — |
dwHResult Int32 | — |
wzMessage UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "11",
"version": "0",
"level": "4",
"task": "3",
"opcode": "21",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:34.413423300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "12836"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoIMManager::HrInitializeObjects",
"dwLine": " 2589",
"dwHResult": "0",
"wzMessage": "MAPI mode not set. FInOutlook()=0, FInLync()=0, FOutlookConfigured()=0"
},
"message": ""
}
Event ID 12 — PCX Infomation
Description
PCX Infomation.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
dwLine UInt32 | — |
dwHResult Int32 | — |
wzMessage UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "12",
"version": "0",
"level": "4",
"task": "3",
"opcode": "21",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:34.415729000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "12836"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoIMManager::SetMsoMode",
"dwLine": " 4300",
"dwHResult": "0",
"wzMessage": "Mso mode set to LDAP"
},
"message": ""
}
Event ID 13 — PCX Warning
Description
PCX Warning.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
dwLine UInt32 | — |
dwHResult Int32 | — |
wzMessage UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "13",
"version": "0",
"level": "3",
"task": "3",
"opcode": "21",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:34.417447800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "13428"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "PersonaIdentifiersForContact::HrGetEmsabpUIDFromPersonInfo",
"dwLine": " 463",
"dwHResult": "-2147418113",
"wzMessage": ""
},
"message": ""
}
Event ID 14 — PCX Error
Description
PCX Error.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
dwLine UInt32 | — |
dwHResult Int32 | — |
wzMessage UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "14",
"version": "0",
"level": "2",
"task": "3",
"opcode": "21",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T22:50:03.617933900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "10708",
"thread_id": "13712"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoIMProviderFactory::HrEnsureDefaultIMProcessRegKey",
"dwLine": " 913",
"dwHResult": "-2147467259",
"wzMessage": "Failed opening reg key (HKCU:SOFTWARE\\IM Providers\\Lync)"
},
"message": ""
}
Event ID 15 — PCX Call Start
Description
PCX Call Start.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
dwLine UInt32 | — |
szCall AnsiString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "15",
"version": "0",
"level": "4",
"task": "3",
"opcode": "1",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:52:15.030705500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "11984"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoIMNAbstractionLayer::HrADResolveQuery",
"dwLine": " 2599",
"szCall": "pldap->HrExecuteSearch(ssSearchSpec)"
},
"message": ""
}
Event ID 16 — PCX Call Stop
Description
PCX Call Stop.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
dwLine UInt32 | — |
szCall AnsiString | — |
dwHResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "16",
"version": "0",
"level": "4",
"task": "3",
"opcode": "2",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:52:15.030703600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "11984"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoIMNAbstractionLayer::HrADResolveQuery",
"dwLine": " 2592",
"szCall": "pldap->HrOpenSession(const_cast<LPWSTR>(csDomain.c_str()), fGlobalCatalogSearch)",
"dwHResult": "0"
},
"message": ""
}
Event ID 17 — PCX Function Start
Description
PCX Function Start.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
szTag AnsiString | — |
wzParameter UnicodeString | — |
pPointer Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "17",
"version": "0",
"level": "4",
"task": "3",
"opcode": "1",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:34.412760400+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "12836"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoIMManager::HrInitializeObjects",
"szTag": "",
"wzParameter": "",
"pPointer": "0x7FFD1B4D4ABC"
},
"message": ""
}
Event ID 18 — PCX Function Stop
Description
PCX Function Stop.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
dwHResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "18",
"version": "0",
"level": "4",
"task": "3",
"opcode": "2",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:34.413057700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "12836"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CPcxPersonCache::HrCreate",
"dwHResult": "0"
},
"message": ""
}
Event ID 19 — PCX Job Start
Description
PCX Job Start.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
wzJob UnicodeString | — |
szTag AnsiString | — |
wzParameter UnicodeString | — |
pPointer Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "19",
"version": "0",
"level": "4",
"task": "3",
"opcode": "1",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:34.417559300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "12836"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoIMNAbstractionLayer::HrPostJob",
"wzJob": "CMsoJobDoQueueJobProcessor",
"szTag": "",
"wzParameter": "",
"pPointer": "0x7FFD1B4D4ABC"
},
"message": ""
}
Event ID 20 — PCX Job Stop
Description
PCX Job Stop.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
wzJob UnicodeString | — |
dwHResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "20",
"version": "0",
"level": "4",
"task": "3",
"opcode": "2",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:34.417580900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "12836"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoIMNAbstractionLayer::HrPostJob",
"wzJob": "CMsoJobDoQueueJobProcessor",
"dwHResult": "0"
},
"message": ""
}
Event ID 21 — PCX Create Persona
Description
PCX Create Persona.
Message #
Fields #
| Name | Description |
|---|---|
wzFriendlyName UnicodeString | — |
wzAddressSMTP UnicodeString | — |
wzSip UnicodeString | — |
wzAlias UnicodeString | — |
wzUserInfoId UnicodeString | — |
wzPhoneNumber UnicodeString | — |
wzFlags UnicodeString | — |
wzEntryID UnicodeString | — |
wzMuid UnicodeString | — |
wzResID UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "21",
"version": "0",
"level": "4",
"task": "3",
"opcode": "22",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:34.415982000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "12836"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzFriendlyName": "Lab User",
"wzAddressSMTP": "labuser@contoso.onmicrosoft.com",
"wzSip": "labuser@contoso.onmicrosoft.com",
"wzAlias": "NULL",
"wzUserInfoId": "NULL",
"wzPhoneNumber": "NULL",
"wzFlags": " fMsoContactByResolutionId ",
"wzEntryID": "NULL",
"wzMuid": "NULL",
"wzResID": "<resolutionId provider=\"AD\"><localId O365id=\"S::labuser@contoso.onmicrosoft.com::00000000-0000-0000-0000-000000000000\"/></resolutionId>"
},
"message": ""
}
Event ID 22 — PCX Create New Persona
Description
PCX Create New Persona.
Message #
Fields #
| Name | Description |
|---|---|
wzSigninName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "22",
"version": "0",
"level": "4",
"task": "3",
"opcode": "22",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzSigninName": ""
},
"message": ""
}
Event ID 23 — PCX Create Persona Linked
Description
PCX Create Persona Linked.
Message #
Fields #
| Name | Description |
|---|---|
wzSigninName UnicodeString | — |
wzAltEmail UnicodeString | — |
dwStatus Int32 | — |
dwAvail Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "23",
"version": "0",
"level": "4",
"task": "3",
"opcode": "22",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzSigninName": "",
"wzAltEmail": "",
"dwStatus": "0",
"dwAvail": "0"
},
"message": ""
}
Event ID 24 — PCX PersonInfo
Description
PCX PersonInfo.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
szMessage AnsiString | — |
pPointer Pointer | — |
wzName UnicodeString | — |
wzSPUserId UnicodeString | — |
wzSPServerInfo UnicodeString | — |
wzDN UnicodeString | — |
wzManager UnicodeString | — |
wzEntryId UnicodeString | — |
wzMuid UnicodeString | — |
wzEmailAddress UnicodeString | — |
wzSignInAddress UnicodeString | — |
wzAlias UnicodeString | — |
wzHashKey UnicodeString | — |
wzResID UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "24",
"version": "0",
"level": "4",
"task": "3",
"opcode": "23",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:34.417727800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "13428"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoPersonInfo::OnJobStart",
"szMessage": "Resolve Person Started",
"pPointer": "0x2F449B41400",
"wzName": "Lab User",
"wzSPUserId": "",
"wzSPServerInfo": "",
"wzDN": "",
"wzManager": "",
"wzEntryId": "",
"wzMuid": "",
"wzEmailAddress": "labuser@contoso.onmicrosoft.com",
"wzSignInAddress": "labuser@contoso.onmicrosoft.com",
"wzAlias": "",
"wzHashKey": "PSO:<resolutionId provider=\"AD\"><localId O365id=\"S::labuser@contoso.onmicrosoft.com::00000000-0000-0000-0000-000000000000\"/></resolutionId>",
"wzResID": "<resolutionId provider=\"AD\"><localId O365id=\"S::labuser@contoso.onmicrosoft.com::00000000-0000-0000-0000-000000000000\"/></resolutionId>"
},
"message": ""
}
Event ID 25 — PCX Person Contact Type
Description
PCX Person Contact Type.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
szMessage AnsiString | — |
wzName UnicodeString | — |
pPointer Pointer | — |
wzContactType UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "25",
"version": "0",
"level": "4",
"task": "3",
"opcode": "23",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "",
"szMessage": "",
"wzName": "",
"pPointer": "0x0",
"wzContactType": ""
},
"message": ""
}
Event ID 26 — PCX Resolution Properties
Description
PCX Resolution Properties.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
szMessage AnsiString | — |
wzName UnicodeString | — |
pPointer Pointer | — |
wzSigninName UnicodeString | — |
bSetFromDL Boolean | — |
wzSMTPAddress UnicodeString | — |
wzFriendlyName UnicodeString | — |
wzTitle UnicodeString | — |
wzCompanyName UnicodeString | — |
wzDepartment UnicodeString | — |
wzOfficeLocation UnicodeString | — |
wzWorkPhone UnicodeString | — |
wzMobilePhone UnicodeString | — |
wzHomePhone UnicodeString | — |
wzDescription UnicodeString | — |
wzEntryID UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "26",
"version": "0",
"level": "4",
"task": "3",
"opcode": "23",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "",
"szMessage": "",
"wzName": "",
"pPointer": "0x0",
"wzSigninName": "",
"bSetFromDL": "false",
"wzSMTPAddress": "",
"wzFriendlyName": "",
"wzTitle": "",
"wzCompanyName": "",
"wzDepartment": "",
"wzOfficeLocation": "",
"wzWorkPhone": "",
"wzMobilePhone": "",
"wzHomePhone": "",
"wzDescription": "",
"wzEntryID": ""
},
"message": ""
}
Event ID 27 — PCX Person Property Update
Description
PCX Person Property Update.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
wzProperty UnicodeString | — |
wzOldValue UnicodeString | — |
wzNewValue UnicodeString | — |
wzKey UnicodeString | — |
pPointer Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "27",
"version": "0",
"level": "4",
"task": "3",
"opcode": "23",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "",
"wzProperty": "",
"wzOldValue": "",
"wzNewValue": "",
"wzKey": "",
"pPointer": "0x0"
},
"message": ""
}
Event ID 28 — PCX OutLook Contact Property Update
Description
PCX OutLook Contact Property Update.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
wzProperty UnicodeString | — |
wzOldValue UnicodeString | — |
wzNewValue UnicodeString | — |
wzKey UnicodeString | — |
pPointer Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "28",
"version": "0",
"level": "4",
"task": "3",
"opcode": "23",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "",
"wzProperty": "",
"wzOldValue": "",
"wzNewValue": "",
"wzKey": "",
"pPointer": "0x0"
},
"message": ""
}
Event ID 29 — PCX Contact Card Infomation
Description
PCX Contact Card Infomation.
Message #
Fields #
| Name | Description |
|---|---|
szString AnsiString | — |
szFunction AnsiString | — |
pCardHwnd Pointer | — |
pPersona Pointer | — |
pPersonInfo Pointer | — |
wzSigninName UnicodeString | — |
wzContactType UnicodeString | — |
wzCardType UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "29",
"version": "0",
"level": "4",
"task": "3",
"opcode": "26",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szString": "",
"szFunction": "",
"pCardHwnd": "0x0",
"pPersona": "0x0",
"pPersonInfo": "0x0",
"wzSigninName": "",
"wzContactType": "",
"wzCardType": ""
},
"message": ""
}
Event ID 30 — PCX Presence Infomation
Description
PCX Presence Infomation.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
szMessage AnsiString | — |
wzName UnicodeString | — |
wzSigninName UnicodeString | — |
wzEmail UnicodeString | — |
wzWPhone UnicodeString | — |
wzMPhone UnicodeString | — |
wzHPhone UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "30",
"version": "0",
"level": "4",
"task": "3",
"opcode": "24",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "",
"szMessage": "",
"wzName": "",
"wzSigninName": "",
"wzEmail": "",
"wzWPhone": "",
"wzMPhone": "",
"wzHPhone": ""
},
"message": ""
}
Event ID 31 — PCX Presence Property Update
Description
PCX Presence Property Update.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
wzProperty UnicodeString | — |
wzOldValue UnicodeString | — |
wzNewValue UnicodeString | — |
wzKey UnicodeString | — |
pPointer Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "31",
"version": "0",
"level": "4",
"task": "3",
"opcode": "24",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "",
"wzProperty": "",
"wzOldValue": "",
"wzNewValue": "",
"wzKey": "",
"pPointer": "0x0"
},
"message": ""
}
Event ID 32 — PCX Search Result
Description
PCX Search Result.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
dwRank UInt32 | — |
wzSIPAddress UnicodeString | — |
wzDataType UnicodeString | — |
wzEmailAddress UnicodeString | — |
wzDisplayName UnicodeString | — |
wzPhoneNumber UnicodeString | — |
wzTitle UnicodeString | — |
wzEntryId UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "32",
"version": "0",
"level": "4",
"task": "3",
"opcode": "24",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "",
"dwRank": "0",
"wzSIPAddress": "",
"wzDataType": "",
"wzEmailAddress": "",
"wzDisplayName": "",
"wzPhoneNumber": "",
"wzTitle": "",
"wzEntryId": ""
},
"message": ""
}
Event ID 33 — CallStack event description message: cValue.
Description
CallStack event description message: cValue.
Message #
Fields #
| Name | Description |
|---|---|
cValue UInt32 | — |
Frame Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "33",
"version": "0",
"level": "4",
"task": "3",
"opcode": "10",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cValue": "0",
"Frame": "0x0"
},
"message": ""
}
Event ID 34 — CallStackModule event description message: BaseAddress.
Description
CallStackModule event description message: BaseAddress.
Message #
Fields #
| Name | Description |
|---|---|
BaseAddress Pointer | — |
TimeDateStamp UInt32 | — |
Size UInt32 | — |
wzName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "34",
"version": "0",
"level": "4",
"task": "3",
"opcode": "11",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"BaseAddress": "0x0",
"TimeDateStamp": "0",
"Size": "0",
"wzName": ""
},
"message": ""
}
Event ID 35 — PerfWatson Debug
Description
PerfWatson Debug.
Message #
Fields #
| Name | Description |
|---|---|
wzMessage UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "35",
"version": "0",
"level": "4",
"task": "4",
"opcode": "27",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzMessage": ""
},
"message": ""
}
Event ID 36 — Register idle task 'cookie': priority dwID, scheduler wzName, flags priority, release scheduler, tolerable delay grfTaskFlags.
Description
Register idle task 'cookie': priority dwID, scheduler wzName, flags priority, release scheduler, tolerable delay grfTaskFlags.
Message #
Fields #
| Name | Description |
|---|---|
cookie UInt64 | — |
dwID UInt32 | — |
wzName UnicodeString | — |
priority UInt32 | — |
scheduler UInt32 | — |
grfTaskFlags UInt32 | — |
msecRelease UInt32 | — |
msecDeadline UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "36",
"version": "0",
"level": "4",
"task": "5",
"opcode": "28",
"keywords": 4611686018427387968,
"time_created": "2026-03-14T21:43:18.008779100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cookie": "1",
"dwID": "575545989",
"wzName": "NULL",
"priority": " 1",
"scheduler": " 1",
"grfTaskFlags": " 0",
"msecRelease": " 0",
"msecDeadline": " 300000"
},
"message": ""
}
Event ID 37 — Deregister idle task 'cookie'.
Description
Deregister idle task 'cookie'.
Message #
Fields #
| Name | Description |
|---|---|
cookie UInt64 | — |
dwID UInt32 | — |
wzName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "37",
"version": "0",
"level": "4",
"task": "5",
"opcode": "29",
"keywords": 4611686018427387968,
"time_created": "2026-03-14T21:43:18.008893600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cookie": "6",
"dwID": "508568842",
"wzName": "NULL"
},
"message": ""
}
Event ID 38 — Modify idle task 'cookie': change flags dwID, priority wzName, scheduler grfModifyFlags, flags priority, release scheduler, tolerable delay grfTaskFlags.
Description
Modify idle task 'cookie': change flags dwID, priority wzName, scheduler grfModifyFlags, flags priority, release scheduler, tolerable delay grfTaskFlags.
Message #
Fields #
| Name | Description |
|---|---|
cookie Int64 | — |
dwID UInt32 | — |
wzName UnicodeString | — |
grfModifyFlags UInt32 | — |
priority UInt32 | — |
scheduler UInt32 | — |
grfTaskFlags UInt32 | — |
msecRelease UInt32 | — |
msecDeadline UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "38",
"version": "0",
"level": "4",
"task": "5",
"opcode": "30",
"keywords": 4611686018427387968,
"time_created": "2026-03-14T21:43:32.468253800+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "12836"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cookie": "6",
"dwID": "504452934",
"wzName": "NULL",
"grfModifyFlags": " 16",
"priority": " 1",
"scheduler": " 0",
"grfTaskFlags": " 5",
"msecRelease": " 20000",
"msecDeadline": " 40000"
},
"message": ""
}
Event ID 39 — Idle execution starting: timer only fTimerOnly, tracking fTracking, resume fResuming.
Description
Idle execution starting: timer only fTimerOnly, tracking fTracking, resume fResuming.
Message #
Fields #
| Name | Description |
|---|---|
fTimerOnly Boolean | — |
fTracking Boolean | — |
fResuming Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "39",
"version": "0",
"level": "4",
"task": "5",
"opcode": "31",
"keywords": 4611686018427389952,
"time_created": "2026-03-14T21:43:18.008833600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fTimerOnly": "false",
"fTracking": "false",
"fResuming": "false"
},
"message": ""
}
Event ID 40 — Idle execution ending
Description
Idle execution ending.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "40",
"version": "0",
"level": "4",
"task": "5",
"opcode": "32",
"keywords": 4611686018427389952,
"time_created": "2026-03-14T21:43:18.010557500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 41 — Idle execution preempted
Description
Idle execution preempted.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "41",
"version": "0",
"level": "4",
"task": "5",
"opcode": "33",
"keywords": 4611686018427387968,
"time_created": "2026-03-14T21:43:21.727135600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 42 — Idle task 'cookie' moved to run queue.
Description
Idle task 'cookie' moved to run queue.
Message #
Fields #
| Name | Description |
|---|---|
cookie UInt64 | — |
dwID UInt32 | — |
wzName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "42",
"version": "0",
"level": "4",
"task": "5",
"opcode": "34",
"keywords": 4611686018427387968,
"time_created": "2026-03-14T21:43:18.008837600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cookie": "1",
"dwID": "575545989",
"wzName": "NULL"
},
"message": ""
}
Event ID 43 — Idle task 'cookie' demoted to wait queue.
Description
Idle task 'cookie' demoted to wait queue.
Message #
Fields #
| Name | Description |
|---|---|
cookie UInt64 | — |
dwID UInt32 | — |
wzName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "43",
"version": "0",
"level": "4",
"task": "5",
"opcode": "35",
"keywords": 9223372036854775872,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cookie": "0",
"dwID": "0",
"wzName": ""
},
"message": ""
}
Event ID 44 — Idle task 'cookie' executing.
Description
Idle task 'cookie' executing.
Message #
Fields #
| Name | Description |
|---|---|
cookie UInt64 | — |
dwID UInt32 | — |
wzName UnicodeString | — |
msecsRunIntervalAvg UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "44",
"version": "0",
"level": "4",
"task": "5",
"opcode": "36",
"keywords": 4611686018427387968,
"time_created": "2026-03-14T21:43:18.008849400+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cookie": "6",
"dwID": "508568842",
"wzName": "NULL",
"msecsRunIntervalAvg": "4294967295"
},
"message": ""
}
Event ID 45 — Idle timer message received
Description
Idle timer message received.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "45",
"version": "0",
"level": "4",
"task": "5",
"opcode": "37",
"keywords": 4611686018427387968,
"time_created": "2026-03-14T21:43:19.888287700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 46 — Idle timer scheduled to msecDelay ms for task 'msecsTolerableDelay'.
Description
Idle timer scheduled to msecDelay ms for task 'msecsTolerableDelay'.
Message #
Fields #
| Name | Description |
|---|---|
msecDelay UInt32 | — |
msecsTolerableDelay UInt32 | — |
dwID UInt32 | — |
wzFirstTaskName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "46",
"version": "0",
"level": "4",
"task": "5",
"opcode": "38",
"keywords": 4611686018427387968,
"time_created": "2026-03-14T21:43:18.008800900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"msecDelay": " 0",
"msecsTolerableDelay": " 500",
"dwID": "508568842",
"wzFirstTaskName": "NULL"
},
"message": ""
}
Event ID 47 — PCX Search Result Dedupped
Description
PCX Search Result Dedupped.
Message #
Fields #
| Name | Description |
|---|---|
wzC1Source UnicodeString | — |
wzC1EntryId UnicodeString | — |
wzC1PersonId UnicodeString | — |
wzC1StampedGalEId UnicodeString | — |
wzC1Email1 UnicodeString | — |
wzC1Email2 UnicodeString | — |
wzC1Email3 UnicodeString | — |
wzC1DisplayName UnicodeString | — |
wzC2Source UnicodeString | — |
wzC2EntryId UnicodeString | — |
wzC2PersonId UnicodeString | — |
wzC2StampedGalEId UnicodeString | — |
wzC2Email1 UnicodeString | — |
wzC2Email2 UnicodeString | — |
wzC2Email3 UnicodeString | — |
wzC2DisplayName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "47",
"version": "0",
"level": "4",
"task": "3",
"opcode": "25",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzC1Source": "",
"wzC1EntryId": "",
"wzC1PersonId": "",
"wzC1StampedGalEId": "",
"wzC1Email1": "",
"wzC1Email2": "",
"wzC1Email3": "",
"wzC1DisplayName": "",
"wzC2Source": "",
"wzC2EntryId": "",
"wzC2PersonId": "",
"wzC2StampedGalEId": "",
"wzC2Email1": "",
"wzC2Email2": "",
"wzC2Email3": "",
"wzC2DisplayName": ""
},
"message": ""
}
Event ID 48 — PCX Search Results Posted
Description
PCX Search Results Posted.
Message #
Fields #
| Name | Description |
|---|---|
dwJobSequence UInt32 | — |
dwJobCount Int32 | — |
dwHrResult Int32 | — |
dwResultCount Int32 | — |
fLastBatch Boolean | — |
fMoreResults Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "48",
"version": "0",
"level": "4",
"task": "3",
"opcode": "25",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwJobSequence": "0",
"dwJobCount": "0",
"dwHrResult": "0",
"dwResultCount": "0",
"fLastBatch": "false",
"fMoreResults": "false"
},
"message": ""
}
Event ID 49 — PCX ContactInfo
Description
PCX ContactInfo.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
wzMessage UnicodeString | — |
pPointer Pointer | — |
wzRootSourceType UnicodeString | — |
szSourceType AnsiString | — |
wzKey UnicodeString | — |
wzName UnicodeString | — |
wzEntryID UnicodeString | — |
wzUserID UnicodeString | — |
wzMuid UnicodeString | — |
wzProviderId UnicodeString | — |
wzCreationDate UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "49",
"version": "0",
"level": "4",
"task": "3",
"opcode": "39",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:39.519407000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "13688",
"thread_id": "13896"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoResIdContactInfo::~CMsoResIdContactInfo",
"wzMessage": "Destroying CMsoResIdContactInfo Contact",
"pPointer": "0x1B039954580",
"wzRootSourceType": "",
"szSourceType": "ResId Data",
"wzKey": "<resolutionId provider=\"AD\"><localId O365id=\"S::labuser@contoso.onmicrosoft.com::00000000-0000-0000-0000-000000000000\"/></resolutionId>",
"wzName": "Lab User",
"wzEntryID": "",
"wzUserID": "",
"wzMuid": "",
"wzProviderId": "",
"wzCreationDate": ""
},
"message": ""
}
Event ID 50 — Idle update queued for task 'cookie': type grfUpdateType.
Description
Idle update queued for task 'cookie': type grfUpdateType.
Message #
Fields #
| Name | Description |
|---|---|
cookie UInt64 | — |
grfUpdateType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "50",
"version": "0",
"level": "4",
"task": "5",
"opcode": "40",
"keywords": 4611686018427387968,
"time_created": "2026-03-14T21:43:17.264196600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "8376",
"thread_id": "9024"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cookie": "0",
"grfUpdateType": " 1"
},
"message": ""
}
Event ID 51 — SecureReader Debug
Description
SecureReader Debug.
Message #
Fields #
| Name | Description |
|---|---|
wzMessage UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "51",
"version": "0",
"level": "5",
"task": "6",
"opcode": "41",
"keywords": 9223372036854775936,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzMessage": ""
},
"message": ""
}
Event ID 52 — Window Message wzMessageName(dwValue) registered.
Description
Window Message wzMessageName(dwValue) registered.
Message #
Fields #
| Name | Description |
|---|---|
wzMessageName UnicodeString | — |
dwValue UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "52",
"version": "0",
"level": "4",
"task": "7",
"opcode": "42",
"keywords": 9223372036854776064,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzMessageName": "",
"dwValue": "0"
},
"message": ""
}
Event ID 53 — PCX Contact Linking
Description
PCX Contact Linking.
Message #
Fields #
| Name | Description |
|---|---|
szMessageName AnsiString | — |
wzPersonID UnicodeString | — |
wzEntryID UnicodeString | — |
wzEmail1 UnicodeString | — |
wzEmail2 UnicodeString | — |
wzEmail3 UnicodeString | — |
wzIM UnicodeString | — |
wzLastModified UnicodeString | — |
fLInked Boolean | — |
wzGALEntryID UnicodeString | — |
dwGALLinkState UInt32 | — |
wzLinkRejectHistory UnicodeString | — |
wzSMTPAddressCache UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "53",
"version": "0",
"level": "4",
"task": "3",
"opcode": "43",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szMessageName": "",
"wzPersonID": "",
"wzEntryID": "",
"wzEmail1": "",
"wzEmail2": "",
"wzEmail3": "",
"wzIM": "",
"wzLastModified": "",
"fLInked": "false",
"wzGALEntryID": "",
"dwGALLinkState": "0",
"wzLinkRejectHistory": "",
"wzSMTPAddressCache": ""
},
"message": ""
}
Event ID 54 — PCX Contact Linking Pair
Description
PCX Contact Linking Pair.
Message #
Fields #
| Name | Description |
|---|---|
szMessageName AnsiString | — |
wzEntryID1 UnicodeString | — |
wzEntryID2 UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "54",
"version": "0",
"level": "4",
"task": "3",
"opcode": "43",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szMessageName": "",
"wzEntryID1": "",
"wzEntryID2": ""
},
"message": ""
}
Event ID 55 — PCX Feed Item Info
Description
PCX Feed Item Info.
Message #
Fields #
| Name | Description |
|---|---|
szComment AnsiString | — |
szCallingFunction AnsiString | — |
wzFeedProviderName UnicodeString | — |
wzFeedHTML UnicodeString | — |
wzFeedData UnicodeString | — |
wzFeedPlainText UnicodeString | — |
wzFeedIcon UnicodeString | — |
wzTime UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "55",
"version": "0",
"level": "4",
"task": "3",
"opcode": "44",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szComment": "",
"szCallingFunction": "",
"wzFeedProviderName": "",
"wzFeedHTML": "",
"wzFeedData": "",
"wzFeedPlainText": "",
"wzFeedIcon": "",
"wzTime": ""
},
"message": ""
}
Event ID 56 — PCX Feed Provider Info
Description
PCX Feed Provider Info.
Message #
Fields #
| Name | Description |
|---|---|
szComment AnsiString | — |
szFunction AnsiString | — |
wzProviderXML UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "56",
"version": "0",
"level": "4",
"task": "3",
"opcode": "44",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szComment": "",
"szFunction": "",
"wzProviderXML": ""
},
"message": ""
}
Event ID 57 — PCX Feed Sanitized HTML Info
Description
PCX Feed Sanitized HTML Info.
Message #
Fields #
| Name | Description |
|---|---|
szComment AnsiString | — |
szFunction AnsiString | — |
wzUnSanitizedHTML UnicodeString | — |
wzSanitizedHTML UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "57",
"version": "0",
"level": "4",
"task": "3",
"opcode": "44",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szComment": "",
"szFunction": "",
"wzUnSanitizedHTML": "",
"wzSanitizedHTML": ""
},
"message": ""
}
Event ID 58 — PCX Contact Sync Friend Info
Description
PCX Contact Sync Friend Info.
Message #
Fields #
| Name | Description |
|---|---|
szComment AnsiString | — |
szFunction AnsiString | — |
wzFriendInfo UnicodeString | — |
wzRetrievalTime UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "58",
"version": "0",
"level": "4",
"task": "3",
"opcode": "45",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T22:50:14.250216600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "10708",
"thread_id": "11476"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szComment": "Contact Sync: Next contact sync check scheduled in minutes",
"szFunction": "CContactSyncRunTask::Run",
"wzFriendInfo": "Saturday, March 14, 2026 10:50:14 PM",
"wzRetrievalTime": "41"
},
"message": ""
}
Event ID 59 — PCX Contact Sync Schedule Info
Description
PCX Contact Sync Schedule Info.
Message #
Fields #
| Name | Description |
|---|---|
szComment AnsiString | — |
szFunction AnsiString | — |
wzCurrentTime UnicodeString | — |
wzTimeInMinutesForNextSync UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "59",
"version": "0",
"level": "4",
"task": "3",
"opcode": "45",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szComment": "",
"szFunction": "",
"wzCurrentTime": "",
"wzTimeInMinutesForNextSync": ""
},
"message": ""
}
Event ID 60 — PerfWatson Debug
Description
PerfWatson Debug.
Message #
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
dwId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "60",
"version": "0",
"level": "5",
"task": "4",
"opcode": "27",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"dwId": "0"
},
"message": ""
}
Event ID 61 — PerfWatson Debug
Description
PerfWatson Debug.
Message #
Fields #
| Name | Description |
|---|---|
dwTag UInt32 | — |
dwId UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "61",
"version": "0",
"level": "5",
"task": "4",
"opcode": "27",
"keywords": 9223372036854775840,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwTag": "0",
"dwId": "0"
},
"message": ""
}
Event ID 62 — Met Infomation
Description
Met Infomation.
Message #
Fields #
| Name | Description |
|---|---|
wzFunction UnicodeString | — |
dwLine UInt32 | — |
dwHResult Int32 | — |
wzMessage UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "62",
"version": "0",
"level": "4",
"task": "8",
"opcode": "46",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzFunction": "",
"dwLine": "0",
"dwHResult": "0",
"wzMessage": ""
},
"message": ""
}
Event ID 63 — Met Warning
Description
Met Warning.
Message #
Fields #
| Name | Description |
|---|---|
wzFunction UnicodeString | — |
dwLine UInt32 | — |
dwHResult Int32 | — |
wzMessage UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "63",
"version": "0",
"level": "3",
"task": "8",
"opcode": "46",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzFunction": "",
"dwLine": "0",
"dwHResult": "0",
"wzMessage": ""
},
"message": ""
}
Event ID 64 — Met Error
Description
Met Error.
Message #
Fields #
| Name | Description |
|---|---|
wzFunction UnicodeString | — |
dwLine UInt32 | — |
dwHResult Int32 | — |
wzMessage UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "64",
"version": "0",
"level": "2",
"task": "8",
"opcode": "46",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzFunction": "",
"dwLine": "0",
"dwHResult": "0",
"wzMessage": ""
},
"message": ""
}
Event ID 65 — Met Call Start
Description
Met Call Start.
Message #
Fields #
| Name | Description |
|---|---|
wzFunction UnicodeString | — |
dwLine UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "65",
"version": "0",
"level": "4",
"task": "8",
"opcode": "1",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzFunction": "",
"dwLine": "0"
},
"message": ""
}
Event ID 66 — Met Call Stop
Description
Met Call Stop.
Message #
Fields #
| Name | Description |
|---|---|
wzFunction UnicodeString | — |
dwLine UInt32 | — |
dwHResult Int32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "66",
"version": "0",
"level": "4",
"task": "8",
"opcode": "2",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzFunction": "",
"dwLine": "0",
"dwHResult": "0"
},
"message": ""
}
Event ID 67 — CallStack event description message: cValue.
Description
CallStack event description message: cValue.
Message #
Fields #
| Name | Description |
|---|---|
cValue UInt32 | — |
Frame Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "67",
"version": "0",
"level": "4",
"task": "8",
"opcode": "10",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"cValue": "0",
"Frame": "0x0"
},
"message": ""
}
Event ID 68 — CallStackModule event description message: BaseAddress.
Description
CallStackModule event description message: BaseAddress.
Message #
Fields #
| Name | Description |
|---|---|
BaseAddress Pointer | — |
TimeDateStamp UInt32 | — |
Size UInt32 | — |
wzName UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "68",
"version": "0",
"level": "4",
"task": "8",
"opcode": "11",
"keywords": 9223372036854776320,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"BaseAddress": "0x0",
"TimeDateStamp": "0",
"Size": "0",
"wzName": ""
},
"message": ""
}
Event ID 69 — PCX ContactInfoPropertyUpdate
Description
PCX ContactInfoPropertyUpdate.
Message #
Fields #
| Name | Description |
|---|---|
szFunction AnsiString | — |
wzProperty UnicodeString | — |
wzPrevValue UnicodeString | — |
wzNewValue UnicodeString | — |
wzUniqueKey UnicodeString | — |
pPointer Pointer | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-e8b2-47eb-8564-23e77e728cf3}",
"event_source_name": "",
"event_id": "69",
"version": "0",
"level": "4",
"task": "3",
"opcode": "47",
"keywords": 4611686018427387920,
"time_created": "2026-03-14T21:43:34.417263100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "7880",
"thread_id": "12836"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"szFunction": "CMsoContactInfo::HrSetContactProperty",
"wzProperty": "ResolutionId",
"wzPrevValue": "Empty Variant",
"wzNewValue": "<resolutionId provider=\"AD\"><localId O365id=\"S::labuser@contoso.onmicrosoft.com::00000000-0000-0000-0000-000000000000\"/></resolutionId>",
"wzUniqueKey": "",
"pPointer": "0x2F449B99A60"
},
"message": ""
}
Event ID 70 — MSO Logging
Description
MSO Logging.
Message #
Fields #
| Name | Description |
|---|---|
wzLogLine UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "70",
"version": "0",
"level": "4",
"task": "9",
"opcode": "48",
"keywords": 9223372036854776832,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"wzLogLine": ""
},
"message": ""
}
Event ID 71 — User requested opening of the New Unified Group dialog
Description
User requested opening of the New Unified Group dialog.
Message #
Fields #
| Name | Description |
|---|---|
dwEntrypoint UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "71",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwEntrypoint": "0"
},
"message": ""
}
Event ID 72 — User dismissed the New Unified Group dialog
Description
User dismissed the New Unified Group dialog.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "72",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 73 — User requested creation of a Unified Group
Description
User requested creation of a Unified Group.
Message #
Fields #
| Name | Description |
|---|---|
dwGroupNameLength UInt32 | — |
dwGroupIdLength UInt32 | — |
dwGroupType UInt32 | — |
fAliasChanged Boolean | — |
fAutoSubscribeChecked Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "73",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwGroupNameLength": "0",
"dwGroupIdLength": "0",
"dwGroupType": "0",
"fAliasChanged": "false",
"fAutoSubscribeChecked": "false"
},
"message": ""
}
Event ID 74 — Create unified group operation finished
Description
Create unified group operation finished.
Message #
Fields #
| Name | Description |
|---|---|
fResult Boolean | — |
dwErrorType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "74",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fResult": "false",
"dwErrorType": "0"
},
"message": ""
}
Event ID 75 — Started check for group ID availability
Description
Started check for group ID availability.
Message #
Fields #
| Name | Description |
|---|---|
dwGroupIdLength UInt32 | — |
fGroupIdManuallyEdited Boolean | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "75",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwGroupIdLength": "0",
"fGroupIdManuallyEdited": "false"
},
"message": ""
}
Event ID 76 — Started check for group ID availability
Description
Started check for group ID availability.
Message #
Fields #
| Name | Description |
|---|---|
fResult Boolean | — |
dwErrorType UInt32 | — |
dwAvailbilityResult UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "76",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fResult": "false",
"dwErrorType": "0",
"dwAvailbilityResult": "0"
},
"message": ""
}
Event ID 77 — User requested opening of the Edit Unified Group dialog
Description
User requested opening of the Edit Unified Group dialog.
Message #
Fields #
| Name | Description |
|---|---|
dwDialogType UInt32 | — |
dwEntrypoint UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "77",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwDialogType": "0",
"dwEntrypoint": "0"
},
"message": ""
}
Event ID 78 — User dismissed the Edit Unified Group dialog
Description
User dismissed the Edit Unified Group dialog.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "78",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 79 — User started edit of a Unified Group
Description
User started edit of a Unified Group.
Message #
Fields #
| Name | Description |
|---|---|
dwDialogType UInt32 | — |
dwAddedMembersCount UInt32 | — |
dwRemovedMembersCount UInt32 | — |
dwAddedAdminsCount UInt32 | — |
dwRemovedAdminsCount UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "79",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwDialogType": "0",
"dwAddedMembersCount": "0",
"dwRemovedMembersCount": "0",
"dwAddedAdminsCount": "0",
"dwRemovedAdminsCount": "0"
},
"message": ""
}
Event ID 80 — One of the operations involved in updating the group finished
Description
One of the operations involved in updating the group finished.
Message #
Fields #
| Name | Description |
|---|---|
operationType UInt32 | — |
fResult Boolean | — |
dwErrorType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "80",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"operationType": "0",
"fResult": "false",
"dwErrorType": "0"
},
"message": ""
}
Event ID 81 — Edit Unified Group operation finished
Description
Edit Unified Group operation finished.
Message #
Fields #
| Name | Description |
|---|---|
fResult Boolean | — |
dwErrorType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "81",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fResult": "false",
"dwErrorType": "0"
},
"message": ""
}
Event ID 82 — Edit group photo button was clicked
Description
Edit group photo button was clicked.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "82",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 83 — Group membership finished loading
Description
Group membership finished loading.
Message #
Fields #
| Name | Description |
|---|---|
fResult Boolean | — |
dwErrorType UInt32 | — |
dwMemberCount UInt32 | — |
dwAdminCount UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "83",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fResult": "false",
"dwErrorType": "0",
"dwMemberCount": "0",
"dwAdminCount": "0"
},
"message": ""
}
Event ID 84 — Group details finished loading
Description
Group details finished loading.
Message #
Fields #
| Name | Description |
|---|---|
fResult Boolean | — |
dwErrorType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "84",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fResult": "false",
"dwErrorType": "0"
},
"message": ""
}
Event ID 85 — User requested opening of the Edit Unified Group dialog
Description
User requested opening of the Edit Unified Group dialog.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "85",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 86 — User dismissed the Edit Unified Group dialog
Description
User dismissed the Edit Unified Group dialog.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "86",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 87 — User started edit of a Unified Group
Description
User started edit of a Unified Group.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "87",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 88 — Edit Unified Group operation finished
Description
Edit Unified Group operation finished.
Message #
Fields #
| Name | Description |
|---|---|
fResult Boolean | — |
dwErrorType UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "88",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fResult": "false",
"dwErrorType": "0"
},
"message": ""
}
Event ID 89 — Group card actions event, including open card, switch to members tab, and all actions on group cards
Description
Group card actions event, including open card, switch to members tab, and all actions on group cards.
Message #
Fields #
| Name | Description |
|---|---|
dwActionType UInt32 | — |
dwEnvironment UInt32 | — |
dwHResult UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "89",
"version": "0",
"level": "4",
"task": "3",
"opcode": "21",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"dwActionType": "0",
"dwEnvironment": "0",
"dwHResult": "0"
},
"message": ""
}
Event ID 90 — Group local folder creation finished
Description
Group local folder creation finished.
Message #
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "90",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 91 — Bulk add members
Description
Bulk add members.
Message #
Fields #
| Name | Description |
|---|---|
fResult Boolean | — |
dwErrorType UInt32 | — |
dwMemberCount UInt32 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Office-Events",
"guid": "{8736922d-E8B2-47eb-8564-23E77E728CF3}",
"event_source_name": "",
"event_id": "91",
"version": "0",
"level": "4",
"task": "3",
"opcode": "0",
"keywords": 9223372036854775824,
"time_created": "2026-03-15T00:00:00.0000000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "{00000000-0000-0000-0000-000000000000}"
},
"execution": {
"process_id": "0",
"thread_id": "0"
},
"channel": "OfficeDebugChannel",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fResult": "false",
"dwErrorType": "0",
"dwMemberCount": "0"
},
"message": ""
}