Microsoft-Office-Word3

450 events across 1 channel

Event IDTitleChannel
0WordChannel
1WordChannel
2WordChannel
3WordChannel
4WordChannel
5WordChannel
6WordChannel
7WordChannel
8WordChannel
9WordChannel
10WordChannel
11WordChannel
12WordChannel
13WordChannel
14WordChannel
15WordChannel
16WordChannel
18WordChannel
20WordChannel
21WordChannel
22WordChannel
23WordChannel
24WordChannel
25WordChannel
26WordChannel
27WordChannel
28WordChannel
30WordChannel
31WordChannel
100WordChannel
101WordChannel
102WordChannel
103WordChannel
104WordChannel
105WordChannel
150WordChannel
151WordChannel
152WordChannel
153WordChannel
154WordChannel
155WordChannel
156WordChannel
250WordChannel
251WordChannel
300WordChannel
301WordChannel
302WordChannel
303WordChannel
304WordChannel
305WordChannel
306WordChannel
307WordChannel
308WordChannel
309WordChannel
310WordChannel
311WordChannel
312WordChannel
313WordChannel
351WordChannel
352WordChannel
361WordChannel
362WordChannel
363WordChannel
364WordChannel
365WordChannel
366WordChannel
367WordChannel
368WordChannel
369WordChannel
370WordChannel
371WordChannel
372WordChannel
373WordChannel
374WordChannel
375WordChannel
376WordChannel
377WordChannel
378WordChannel
379WordChannel
380WordChannel
381WordChannel
441WordChannel
451WordChannel
461WordChannel
462WordChannel
463WordChannel
464WordChannel
471WordChannel
472WordChannel
481WordChannel
2000WordChannel
2001WordChannel
2002WordChannel
2003WordChannel
2004WordChannel
2005WordChannel
2006WordChannel
2007WordChannel
2008WordChannel
2009WordChannel
2010WordChannel
2011WordChannel
2012WordChannel
2013WordChannel
2014WordChannel
2015WordChannel
2016WordChannel
2017WordChannel
2018WordChannel
2019WordChannel
2020WordChannel
2021WordChannel
2022WordChannel
2023WordChannel
2024WordChannel
2025WordChannel
2026WordChannel
2027WordChannel
2028WordChannel
2029WordChannel
2032WordChannel
2033WordChannel
2034WordChannel
2035WordChannel
2036WordChannel
2037WordChannel
2038WordChannel
2039WordChannel
2040WordChannel
2041WordChannel
2042WordChannel
2043WordChannel
2044WordChannel
2045WordChannel
2046WordChannel
2047WordChannel
2048WordChannel
2049WordChannel
2050WordChannel
2051WordChannel
2052WordChannel
2053WordChannel
2054WordChannel
2055WordChannel
2056WordChannel
2057WordChannel
2058WordChannel
2059WordChannel
2060WordChannel
2061WordChannel
2064WordChannel
2065WordChannel
2066WordChannel
2067WordChannel
2068WordChannel
2069WordChannel
2070WordChannel
2071WordChannel
2072WordChannel
2073WordChannel
2074WordChannel
2075WordChannel
2076WordChannel
2077WordChannel
2078WordChannel
2079WordChannel
2080WordChannel
2081WordChannel
2082WordChannel
2083WordChannel
2084WordChannel
2085WordChannel
2086WordChannel
2087WordChannel
2088WordChannel
2089WordChannel
2090WordChannel
2091WordChannel
2092WordChannel
2093WordChannel
30579WordChannel
30580WordChannel
30581WordChannel
30582WordChannel
30583WordChannel
30584WordChannel
30585WordChannel
30586WordChannel
30587WordChannel
30588WordChannel
30589WordChannel
30590WordChannel
30591WordChannel
30592WordChannel
30593WordChannel
30594WordChannel
30595WordChannel
30596WordChannel
30597WordChannel
30598WordChannel
30599WordChannel
30600WordChannel
30601WordChannel
30602WordChannel
30603WordChannel
30604WordChannel
30605WordChannel
30606WordChannel
30607WordChannel
30608WordChannel
30609WordChannel
30610WordChannel
30611WordChannel
30612WordChannel
30613WordChannel
30614WordChannel
30615WordChannel
30616WordChannel
30617WordChannel
30618WordChannel
30619WordChannel
30620WordChannel
30621WordChannel
30622WordChannel
30623WordChannel
30624WordChannel
30625WordChannel
30626WordChannel
30627WordChannel
30628WordChannel
30629WordChannel
30630WordChannel
30631WordChannel
30632WordChannel
30633WordChannel
30634WordChannel
30635WordChannel
30636WordChannel
30637WordChannel
30638WordChannel
30639WordChannel
30640WordChannel
30641WordChannel
30642WordChannel
30643WordChannel
30644WordChannel
30645WordChannel
30646WordChannel
30647WordChannel
30648WordChannel
30649WordChannel
30650WordChannel
30651WordChannel
30652WordChannel
30653WordChannel
30654WordChannel
30655WordChannel
30656WordChannel
30657WordChannel
30658WordChannel
30659WordChannel
30660WordChannel
30661WordChannel
30662WordChannel
30663WordChannel
30664WordChannel
30665WordChannel
30666WordChannel
30667WordChannel
30668WordChannel
30669WordChannel
30670WordChannel
30671WordChannel
30672WordChannel
30673WordChannel
30674WordChannel
30675WordChannel
30676WordChannel
30677WordChannel
30678WordChannel
30679WordChannel
30680WordChannel
30681WordChannel
30682WordChannel
30683WordChannel
30684WordChannel
30685WordChannel
30686WordChannel
30687WordChannel
30688WordChannel
30689WordChannel
30690WordChannel
30691WordChannel
30692WordChannel
30693WordChannel
30694WordChannel
30695WordChannel
30696WordChannel
30697WordChannel
30698WordChannel
30699WordChannel
30700WordChannel
30701WordChannel
30702WordChannel
30703WordChannel
30704WordChannel
30705WordChannel
30706WordChannel
30707WordChannel
30708WordChannel
30709WordChannel
30710WordChannel
30711WordChannel
30712WordChannel
30713WordChannel
30714WordChannel
30715WordChannel
30716WordChannel
30717WordChannel
30718WordChannel
30719WordChannel
30720WordChannel
30721WordChannel
30722WordChannel
30723WordChannel
30724WordChannel
30725WordChannel
30726WordChannel
30727WordChannel
30728WordChannel
30729WordChannel
30730WordChannel
30731WordChannel
30732WordChannel
30733WordChannel
30734WordChannel
30735WordChannel
30736WordChannel
30737WordChannel
30738WordChannel
30739WordChannel
30740WordChannel
30741WordChannel
30742WordChannel
30743WordChannel
30744WordChannel
30745WordChannel
30746WordChannel
30747WordChannel
30748WordChannel
30749WordChannel
30750WordChannel
30751WordChannel
30752WordChannel
30753WordChannel
30754WordChannel
30755WordChannel
30756WordChannel
30757WordChannel
30758WordChannel
30759WordChannel
30760WordChannel
30761WordChannel
30762WordChannel
30763WordChannel
30764WordChannel
30765WordChannel
30766WordChannel
30767WordChannel
30768WordChannel
30769WordChannel
30770WordChannel
30771WordChannel
30772WordChannel
30773WordChannel
30774WordChannel
30775WordChannel
30776WordChannel
30777WordChannel
30778WordChannel
30779WordChannel
30780WordChannel
30781WordChannel
30782WordChannel
30783WordChannel
30784WordChannel
30785WordChannel
30786WordChannel
30787WordChannel
30788WordChannel
30789WordChannel
30790WordChannel
30791WordChannel
30792WordChannel
30793WordChannel
30794WordChannel
30795WordChannel
30796WordChannel
30797WordChannel
30798WordChannel
30799WordChannel
30800WordChannel
30801WordChannel
30802WordChannel
30803WordChannel
30804WordChannel
30805WordChannel
30806WordChannel
30807WordChannel
30808WordChannel
30809WordChannel
30810WordChannel
30811WordChannel
30812WordChannel
30813WordChannel
30814WordChannel
30815WordChannel
30816WordChannel
30817WordChannel
30818WordChannel
30819WordChannel
30820WordChannel
30821WordChannel
30822WordChannel
30823WordChannel
30824WordChannel
30825WordChannel
30826WordChannel
30827WordChannel
30828WordChannel
30829WordChannel
30830WordChannel
30831WordChannel
30832WordChannel
30833WordChannel
30834WordChannel
30835WordChannel
30836WordChannel
30837WordChannel
30838WordChannel
30839WordChannel
30840WordChannel
30841WordChannel
30842WordChannel
30843WordChannel
30844WordChannel
30845WordChannel
30846WordChannel
30847WordChannel
30848WordChannel

Event ID 0 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskVclok
Opcode
Info

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "0",
    "version": "0",
    "level": "4",
    "task": "1",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 1 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskVclok
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
receivingClientVclokId GUID
sendingClientVclokId GUID
senderSaveActionGuid GUID
sendingClientVclokValueMin UInt32
sendingClientVclokValueMax UInt32
uploadDuration UInt64
rtcPacketArrivalToMergeDuration UInt64
rtcPacketArrivalToDownloadStartDuration UInt64
downloadStartToEndDuration UInt64
downloadEndToMergeDuration UInt64
mergeToDisplayDuration UInt64
e2eDuration UInt64
deepSleepDuration UInt64
mergeStartToEndDuration UInt64
downloadBranchNotificationDuration UInt64
idleDuration UInt64
loadDuration UInt64
fMergedContent Boolean
rtcBrkSenderDuration UInt64
rtcBrkE2EDuration UInt64
idleDocLoadEndToMergeStartDuration UInt64

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "1",
    "version": "8",
    "level": "4",
    "task": "1",
    "opcode": "11",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "receivingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
    "sendingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
    "senderSaveActionGuid": "{00000000-0000-0000-0000-000000000000}",
    "sendingClientVclokValueMin": "0",
    "sendingClientVclokValueMax": "0",
    "uploadDuration": "0",
    "rtcPacketArrivalToMergeDuration": "0",
    "rtcPacketArrivalToDownloadStartDuration": "0",
    "downloadStartToEndDuration": "0",
    "downloadEndToMergeDuration": "0",
    "mergeToDisplayDuration": "0",
    "e2eDuration": "0",
    "deepSleepDuration": "0",
    "mergeStartToEndDuration": "0",
    "downloadBranchNotificationDuration": "0",
    "idleDuration": "0",
    "loadDuration": "0",
    "fMergedContent": "false",
    "rtcBrkSenderDuration": "0",
    "rtcBrkE2EDuration": "0",
    "idleDocLoadEndToMergeStartDuration": "0"
  },
  "message": ""
}

Event ID 2 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskVclok
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
receivingClientVclokId GUID
sendingClientVclokId GUID
sendingClientVclokValue UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2",
    "version": "0",
    "level": "4",
    "task": "1",
    "opcode": "12",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "receivingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
    "sendingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
    "sendingClientVclokValue": "0"
  },
  "message": ""
}

Event ID 3 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskVclok
Opcode
Info

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "3",
    "version": "0",
    "level": "4",
    "task": "1",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 4 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskVclok
Opcode
AddinMonitorInit

Fields #

NameDescription
savingClientVclokId GUID
savingClientVclokValueMin UInt32
savingClientVclokValueMax UInt32
uploadDuration UInt64
editToUploadTimeMicroseconds UInt64
rtcBrkEditToUploadTimeMicroseconds UInt64
saveToUploadInitTimeMicroseconds UInt64

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "4",
    "version": "1",
    "level": "4",
    "task": "1",
    "opcode": "14",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "savingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
    "savingClientVclokValueMin": "0",
    "savingClientVclokValueMax": "0",
    "uploadDuration": "0",
    "editToUploadTimeMicroseconds": "0",
    "rtcBrkEditToUploadTimeMicroseconds": "0",
    "saveToUploadInitTimeMicroseconds": "0"
  },
  "message": ""
}

Event ID 5 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskHashtags
Opcode
QMUnsafeProperty

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "5",
    "version": "0",
    "level": "5",
    "task": "2",
    "opcode": "10",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 6 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskHashtags
Opcode
AddinMonitorIdleStop

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "6",
    "version": "0",
    "level": "5",
    "task": "2",
    "opcode": "11",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 7 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskHashtags
Opcode
AddinMonitorNotifyUserResult

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "7",
    "version": "0",
    "level": "5",
    "task": "2",
    "opcode": "12",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 8 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskHashtags
Opcode
AddinMonitorShowNotificationResult

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "8",
    "version": "0",
    "level": "5",
    "task": "2",
    "opcode": "13",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 9 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskHashtags
Opcode
AddinMonitorInit

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "9",
    "version": "0",
    "level": "5",
    "task": "2",
    "opcode": "14",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 10 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskHashtags
Opcode
AddinMonitorInitLoadBoot

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "10",
    "version": "0",
    "level": "5",
    "task": "2",
    "opcode": "15",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 11 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskHashtags
Opcode
AddinMonitorInitLoadBoot

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "11",
    "version": "0",
    "level": "5",
    "task": "2",
    "opcode": "15",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 12 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskHashtags
Opcode
AddinMonitorInitLoadConnect

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "12",
    "version": "0",
    "level": "5",
    "task": "2",
    "opcode": "16",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 13 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskHashtags
Opcode
AddinMonitorEnumReg

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "13",
    "version": "0",
    "level": "5",
    "task": "2",
    "opcode": "17",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 14 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskEmojis
Opcode
QMUnsafeProperty

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "14",
    "version": "0",
    "level": "5",
    "task": "3",
    "opcode": "10",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 15 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskEmojis
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Dismissal Reason UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "15",
    "version": "0",
    "level": "5",
    "task": "3",
    "opcode": "11",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Dismissal Reason": "0"
  },
  "message": ""
}

Event ID 16 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskVclok
Opcode
AddinMonitorInitLoadBoot

Fields #

NameDescription
savingClientVclokId GUID
savingClientVclokValue UInt32
saveTimeMicroseconds UInt64
rtcBrkEditToSaveTimeMicroseconds UInt64
editToSaveTimeMicroseconds UInt64
firstRtcBrkEditId GUID
firstEditId GUID
minOcsAutoSaveIntervalMicroseconds UInt64
idleAutoSaveDelayTimeMicroseconds UInt64
autoSaveIdleToSaveTimeMicroseconds UInt64
deepSleepDurationMicroseconds UInt64
saveActionGuid GUID

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "16",
    "version": "5",
    "level": "4",
    "task": "1",
    "opcode": "15",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "savingClientVclokId": "{00000000-0000-0000-0000-000000000000}",
    "savingClientVclokValue": "0",
    "saveTimeMicroseconds": "0",
    "rtcBrkEditToSaveTimeMicroseconds": "0",
    "editToSaveTimeMicroseconds": "0",
    "firstRtcBrkEditId": "{00000000-0000-0000-0000-000000000000}",
    "firstEditId": "{00000000-0000-0000-0000-000000000000}",
    "minOcsAutoSaveIntervalMicroseconds": "0",
    "idleAutoSaveDelayTimeMicroseconds": "0",
    "autoSaveIdleToSaveTimeMicroseconds": "0",
    "deepSleepDurationMicroseconds": "0",
    "saveActionGuid": "{00000000-0000-0000-0000-000000000000}"
  },
  "message": ""
}

Event ID 18 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskForms
Opcode
QMUnsafeProperty

Fields #

NameDescription
fDocHasFormsField Boolean

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "18",
    "version": "0",
    "level": "4",
    "task": "41",
    "opcode": "10",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "fDocHasFormsField": "false"
  },
  "message": ""
}

Event ID 20 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskInval
Opcode
QMUnsafeProperty

Fields #

NameDescription
pwwd Pointer
pdod Pointer
dk UnicodeString
cpFirst Int32
cpLim Int32
grftr UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
    "event_source_name": "",
    "event_id": "20",
    "version": "1",
    "level": "5",
    "task": "6",
    "opcode": "10",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-14T21:52:32.892257500+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "8376",
      "thread_id": "9024"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "pwwd": "0x1FF3BF2B670",
    "pdod": "0x1FF3C67AD60",
    "dk": "Doc",
    "cpFirst": "-1",
    "cpLim": "-1",
    "grftr": "       1"
  },
  "message": ""
}

Event ID 21 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskInval
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
pdod Pointer
dk UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "21",
    "version": "0",
    "level": "5",
    "task": "6",
    "opcode": "11",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "pdod": "0x0",
    "dk": ""
  },
  "message": ""
}

Event ID 22 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskInval
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
pdod Pointer
dk UnicodeString
cpFirst Int32
dcp Int32
grfef_low UInt32
grfef_high UInt32
grfef2_low UInt32
grfef2_high UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "22",
    "version": "0",
    "level": "5",
    "task": "6",
    "opcode": "12",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "pdod": "0x0",
    "dk": "",
    "cpFirst": "0",
    "dcp": "0",
    "grfef_low": "0",
    "grfef_high": "0",
    "grfef2_low": "0",
    "grfef2_high": "0"
  },
  "message": ""
}

Event ID 23 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskInval
Opcode
AddinMonitorShowNotificationResult

Fields #

NameDescription
drk UnicodeString
Bounding Box UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "23",
    "version": "0",
    "level": "5",
    "task": "6",
    "opcode": "13",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "drk": "",
    "Bounding Box": ""
  },
  "message": ""
}

Event ID 24 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskInval
Opcode
AddinMonitorInit

Fields #

NameDescription
drk UnicodeString
Bounding Box UnicodeString
Rectangles UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
    "event_source_name": "",
    "event_id": "24",
    "version": "0",
    "level": "50",
    "task": "6",
    "opcode": "14",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-14T21:51:50.468738700+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "8376",
      "thread_id": "9024"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "drk": "DirtyAll DR",
    "Bounding Box": "(733, 163)+[83 x 33]\n",
    "Rectangles": "(733, 163)+[83 x 33]\n"
  },
  "message": ""
}

Event ID 25 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskInval
Opcode
AddinMonitorInitLoadBoot

Fields #

NameDescription
pwwd Pointer
pdod Pointer
dk UnicodeString
cpFirst Int32
dcp Int32
fNoLayoutChange Boolean
fSelectionChange Boolean
fUpdateArtvNVersion Boolean
fDirtyMtxi Boolean
grfef_low UInt32
grfef_high UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
    "event_source_name": "",
    "event_id": "25",
    "version": "1",
    "level": "50",
    "task": "6",
    "opcode": "15",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-14T21:56:14.893026300+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "8376",
      "thread_id": "9024"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "pwwd": "0x0",
    "pdod": "0x1FF3C67AD60",
    "dk": "Doc",
    "cpFirst": "287",
    "dcp": "4",
    "fNoLayoutChange": "false",
    "fSelectionChange": "false",
    "fUpdateArtvNVersion": "false",
    "fDirtyMtxi": "false",
    "grfef_low": "       0",
    "grfef_high": "       0"
  },
  "message": ""
}

Event ID 26 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFileNew
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Tag UInt32
pdod Pointer
AutoCreateEventHandler UInt32
tSucceeded Int32
fDocRenamed Boolean

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "26",
    "version": "2",
    "level": "4",
    "task": "5",
    "opcode": "11",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Tag": "0",
    "pdod": "0x0",
    "AutoCreateEventHandler": "0",
    "tSucceeded": "0",
    "fDocRenamed": "false"
  },
  "message": ""
}

Event ID 27 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFileNew
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
Tag UInt32
pdod Pointer
AutoCreateEventHandler UInt32
tSucceeded Int32
fDocRenamed Boolean

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "27",
    "version": "2",
    "level": "4",
    "task": "5",
    "opcode": "12",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Tag": "0",
    "pdod": "0x0",
    "AutoCreateEventHandler": "0",
    "tSucceeded": "0",
    "fDocRenamed": "false"
  },
  "message": ""
}

Event ID 28 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFileNew
Opcode
AddinMonitorShowNotificationResult

Fields #

NameDescription
Tag UInt32
pdod Pointer
AutoCreateEventHandler UInt32
tSucceeded Int32
fDocRenamed Boolean

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "28",
    "version": "2",
    "level": "4",
    "task": "5",
    "opcode": "13",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Tag": "0",
    "pdod": "0x0",
    "AutoCreateEventHandler": "0",
    "tSucceeded": "0",
    "fDocRenamed": "false"
  },
  "message": ""
}

Event ID 30 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskCoauthUndo
Opcode
QMUnsafeProperty

Fields #

NameDescription
Reason for Conflict UInt32
fciUser UInt32
fciCoauth UInt32
User CA type UInt32
camoUser.cp UInt32
camoUser.dcpOld UInt32
camoUser.dcpNew UInt32
camoCoauth.cp UInt32
camoCoauth.dcpOld UInt32
camoCoauth.dcpNew UInt32
fUndo Boolean
fRepeat Boolean

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30",
    "version": "1",
    "level": "4",
    "task": "4",
    "opcode": "10",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Reason for Conflict": "0",
    "fciUser": "0",
    "fciCoauth": "0",
    "User CA type": "0",
    "camoUser.cp": "0",
    "camoUser.dcpOld": "0",
    "camoUser.dcpNew": "0",
    "camoCoauth.cp": "0",
    "camoCoauth.dcpOld": "0",
    "camoCoauth.dcpNew": "0",
    "fUndo": "false",
    "fRepeat": "false"
  },
  "message": ""
}

Event ID 31 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskCoauthUndo
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
ETW_TrackbackTag UInt32
IdomoMacUsk UInt32
idomoUndoLim UInt32
idomoRedoLim UInt32
idomoFirst UInt32
cdomo UInt32
UAD.fci UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "31",
    "version": "0",
    "level": "2",
    "task": "4",
    "opcode": "11",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "ETW_TrackbackTag": "0",
    "IdomoMacUsk": "0",
    "idomoUndoLim": "0",
    "idomoRedoLim": "0",
    "idomoFirst": "0",
    "cdomo": "0",
    "UAD.fci": "0"
  },
  "message": ""
}

Event ID 100 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskInval
Opcode
AddinMonitorInitLoadConnect

Fields #

NameDescription
pwwd Pointer
fPrivateInvalRgn Boolean
Sum of Pixel Count for Rects UInt32
Bounding Box Pixel Count UInt32
Rectangles UnicodeString
Bounding Box UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{a1b69d49-2195-4f59-9d33-bdf30c0fe473}",
    "event_source_name": "",
    "event_id": "100",
    "version": "1",
    "level": "50",
    "task": "6",
    "opcode": "16",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-14T21:51:50.468726700+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "8376",
      "thread_id": "9024"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "pwwd": "0x1FF3BF2B670",
    "fPrivateInvalRgn": "true",
    "Sum of Pixel Count for Rects": "0xAB3",
    "Bounding Box Pixel Count": "0xAB3",
    "Rectangles": "(661, 180)+[83 x 33]\n",
    "Bounding Box": "(661, 180)+[83 x 33]\n"
  },
  "message": ""
}

Event ID 101 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskInval
Opcode
AddinMonitorEnumReg

Fields #

NameDescription
pwwd Pointer
ppr Pointer
grfrpu UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "101",
    "version": "1",
    "level": "5",
    "task": "6",
    "opcode": "17",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "pwwd": "0x0",
    "ppr": "0x0",
    "grfrpu": "0"
  },
  "message": ""
}

Event ID 102 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
pdod Pointer
LinkedInResumeClassification UInt32
JobTitleMatch Boolean
JobCityMatch Boolean
JobStateMatch Boolean
JobZipCodeMatch Boolean
AuthorMatch Boolean

Event ID 103 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
LinkedInUserEnabled Boolean

Event ID 104 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskMailMerge
Opcode
QMUnsafeProperty

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "104",
    "version": "0",
    "level": "4",
    "task": "8",
    "opcode": "10",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 105 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskMailMerge
Opcode
AddinMonitorIdleStop

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "105",
    "version": "0",
    "level": "4",
    "task": "8",
    "opcode": "11",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 150 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
FlyoutType UInt32

Event ID 151 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
fAppend Boolean
cpInsertFirst Int32
cpInsertLim Int32

Event ID 152 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
cpInsertFirst Int32
cpInsertLim Int32

Event ID 153 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
cpInsertFirst Int32
cpInsertLim Int32

Event ID 154 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
fRegionContainsE2O Boolean

Event ID 155 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Event ID 156 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Event ID 250 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFastCoauth
Opcode
QMUnsafeProperty

Fields #

NameDescription
xszText UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "250",
    "version": "0",
    "level": "4",
    "task": "64",
    "opcode": "10",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "xszText": ""
  },
  "message": ""
}

Event ID 251 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFastCoauth
Opcode
AddinMonitorIdleStop

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "251",
    "version": "0",
    "level": "4",
    "task": "64",
    "opcode": "11",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 300 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
QMUnsafeProperty

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "300",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "10",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 301 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorIdleStop

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "301",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "11",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 302 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorNotifyUserResult

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "302",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "12",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 303 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorShowNotificationResult

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "303",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "13",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 304 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorInit

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "304",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "14",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 305 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorInitLoadBoot

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "305",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "15",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 306 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorInitLoadConnect

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "306",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "16",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 307 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorEnumReg

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "307",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "17",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 308 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorDeserializeCValue

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "308",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "18",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 309 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorDeserializeValue

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "309",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "19",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 310 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorGateBizbar

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "310",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "20",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 311 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorGateOM

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "311",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "21",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 312 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorShouldNotify

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "312",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "22",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 313 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBibCallout
Opcode
AddinMonitorDisplayBizbar

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "313",
    "version": "0",
    "level": "4",
    "task": "65",
    "opcode": "23",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 351 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFocusModeEntryPoint
Opcode
QMUnsafeProperty

Fields #

NameDescription
pdod Pointer
EntryType UInt32
ViewType UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "351",
    "version": "0",
    "level": "4",
    "task": "66",
    "opcode": "10",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "pdod": "0x0",
    "EntryType": "0",
    "ViewType": ""
  },
  "message": ""
}

Event ID 352 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFocusModeExitPoint
Opcode
QMUnsafeProperty

Fields #

NameDescription
pdod Pointer
ExitType UInt32
BackgroundColor UInt32
BackgroundType UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "352",
    "version": "0",
    "level": "4",
    "task": "67",
    "opcode": "10",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "pdod": "0x0",
    "ExitType": "0",
    "BackgroundColor": "0",
    "BackgroundType": "0"
  },
  "message": ""
}

Event ID 361 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
QMUnsafeProperty

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "361",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "10",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 362 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorIdleStop

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "362",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "11",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 363 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskAddinMonitor
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
NotifyUserResult UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "363",
    "version": "0",
    "level": "4",
    "task": "68",
    "opcode": "12",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "NotifyUserResult": "0"
  },
  "message": ""
}

Event ID 364 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskAddinMonitor
Opcode
AddinMonitorShowNotificationResult

Fields #

NameDescription
ShowNotificationResult UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "364",
    "version": "0",
    "level": "4",
    "task": "68",
    "opcode": "13",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "ShowNotificationResult": "0"
  },
  "message": ""
}

Event ID 365 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskAddinMonitor
Opcode
AddinMonitorInit

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "365",
    "version": "0",
    "level": "4",
    "task": "68",
    "opcode": "14",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 366 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorInitLoadBoot

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "366",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "15",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 367 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorInitLoadConnect

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "367",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "16",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 368 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorEnumReg

Fields #

NameDescription
dwIndex UInt32
name UnicodeString
dwType UInt32
cb UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "368",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "17",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "dwIndex": "0",
    "name": "",
    "dwType": "0",
    "cb": "0"
  },
  "message": ""
}

Event ID 369 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorDeserializeCValue

Fields #

NameDescription
dwCValue UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "369",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "18",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "dwCValue": "0"
  },
  "message": ""
}

Event ID 370 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorDeserializeValue

Fields #

NameDescription
dwValue UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "370",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "19",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "dwValue": "0"
  },
  "message": ""
}

Event ID 371 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorGateBizbar

Fields #

NameDescription
GateValue Boolean

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "371",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "20",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "GateValue": "false"
  },
  "message": ""
}

Event ID 372 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorGateOM

Fields #

NameDescription
GateValue Boolean

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "372",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "21",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "GateValue": "false"
  },
  "message": ""
}

Event ID 373 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskAddinMonitor
Opcode
AddinMonitorShouldNotify

Fields #

NameDescription
secBootLengthThreshold UInt32
pctBootPercentageThreshold UInt32
AddinScenario UInt32
time UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "373",
    "version": "0",
    "level": "4",
    "task": "68",
    "opcode": "22",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "secBootLengthThreshold": "0",
    "pctBootPercentageThreshold": "0",
    "AddinScenario": "0",
    "time": "0"
  },
  "message": ""
}

Event ID 374 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorDisplayBizbar

Fields #

NameDescription
name UnicodeString
fDisplay Boolean

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "374",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "23",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "name": "",
    "fDisplay": "false"
  },
  "message": ""
}

Event ID 375 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorSlowest

Fields #

NameDescription
name UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "375",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "24",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "name": ""
  },
  "message": ""
}

Event ID 376 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskAddinMonitor
Opcode
AddinMonitorDialogShow

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "376",
    "version": "0",
    "level": "4",
    "task": "68",
    "opcode": "25",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 377 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorDialogAddPadii

Fields #

NameDescription
name UnicodeString
FIsCOMAddin Boolean
FIsGroupPolicyDisabled Boolean

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "377",
    "version": "1",
    "level": "5",
    "task": "68",
    "opcode": "26",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "name": "",
    "FIsCOMAddin": "false",
    "FIsGroupPolicyDisabled": "false"
  },
  "message": ""
}

Event ID 378 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskAddinMonitor
Opcode
AddinMonitorDialogOnEvent

Fields #

NameDescription
name UnicodeString
SelectedAction UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "378",
    "version": "0",
    "level": "4",
    "task": "68",
    "opcode": "27",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "name": "",
    "SelectedAction": ""
  },
  "message": ""
}

Event ID 379 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorDwConnect

Fields #

NameDescription
dwConnect UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "379",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "28",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "dwConnect": "0"
  },
  "message": ""
}

Event ID 380 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorDwPolicy

Fields #

NameDescription
dwPolicy UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "380",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "29",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "dwPolicy": "0"
  },
  "message": ""
}

Event ID 381 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
AddinMonitorGateVBA

Fields #

NameDescription
GateValue Boolean

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "381",
    "version": "0",
    "level": "5",
    "task": "68",
    "opcode": "30",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "GateValue": "false"
  },
  "message": ""
}

Event ID 441 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskDragDrop
Opcode
QMUnsafeProperty

Fields #

NameDescription
areaPoints Float

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "441",
    "version": "0",
    "level": "4",
    "task": "70",
    "opcode": "10",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "areaPoints": "0.0"
  },
  "message": ""
}

Event ID 451 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskOleAutoActivation
Opcode
QMUnsafeProperty

Fields #

NameDescription
pdod Pointer
fRTF Boolean
callType UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "451",
    "version": "0",
    "level": "4",
    "task": "71",
    "opcode": "10",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "pdod": "0x0",
    "fRTF": "false",
    "callType": "0"
  },
  "message": ""
}

Event ID 461 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEditAggregationFromSave
Opcode
QMUnsafeProperty

Fields #

NameDescription
changes UInt64

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "461",
    "version": "0",
    "level": "4",
    "task": "72",
    "opcode": "10",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "changes": "0"
  },
  "message": ""
}

Event ID 462 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEditAggregationFromMerge
Opcode
QMUnsafeProperty

Fields #

NameDescription
changes UInt64

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "462",
    "version": "0",
    "level": "4",
    "task": "73",
    "opcode": "10",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "changes": "0"
  },
  "message": ""
}

Event ID 463 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskQMUnsafeOpSource
Opcode
QMUnsafeProperty

Fields #

NameDescription
mrtTag UInt32
source UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "463",
    "version": "0",
    "level": "4",
    "task": "74",
    "opcode": "10",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "mrtTag": "0",
    "source": "0"
  },
  "message": ""
}

Event ID 464 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskQMUnsafeProperty
Opcode
QMUnsafeProperty

Fields #

NameDescription
property UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "464",
    "version": "0",
    "level": "4",
    "task": "75",
    "opcode": "10",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "property": "0"
  },
  "message": ""
}

Event ID 471 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
Info

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "471",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 472 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
Info

Fields #

NameDescription
CountOfRecipients UInt64
LinkPermissionType UInt32
CountOfRecipientsOptimizedAway UInt64

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "472",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "CountOfRecipients": "0",
    "LinkPermissionType": "0",
    "CountOfRecipientsOptimizedAway": "0"
  },
  "message": ""
}

Event ID 481 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskPerformance
Opcode
QMUnsafeProperty

Fields #

NameDescription
featureDwTag UInt32
ProfilerModules UnicodeString
ProfilerSamples UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "481",
    "version": "0",
    "level": "5",
    "task": "9",
    "opcode": "10",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "featureDwTag": "0",
    "ProfilerModules": "",
    "ProfilerSamples": ""
  },
  "message": ""
}

Event ID 2000 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2000",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2001 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2001",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2002 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2002",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2003 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2003",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2004 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2004",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2005 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2005",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2006 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2006",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2007 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2007",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2008 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2008",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2009 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2009",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2010 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2010",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2011 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2011",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2012 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2012",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2013 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2013",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2014 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2014",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2015 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2015",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2016 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2016",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2017 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2017",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2018 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2018",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2019 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2019",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2020 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2020",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2021 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2021",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2022 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2022",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2023 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2023",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2024 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2024",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2025 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2025",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2026 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2026",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2027 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Opcode
QMUnsafeProperty

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2027",
    "version": "1",
    "level": "2",
    "task": "0",
    "opcode": "10",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "Pdod": "0x0",
    "VoidPtr": "0x0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2028 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Event ID 2029 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
Pdod Pointer
VoidPtr Pointer
ETW_TrackbackTag UInt32

Event ID 2032 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2032",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2033 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2033",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2034 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2034",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2035 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2035",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2036 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2036",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2037 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2037",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2038 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2038",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2039 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2039",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2040 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2040",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2041 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2041",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2042 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2042",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2043 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2043",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2044 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2044",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2045 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2045",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2046 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2046",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2047 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2047",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2048 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2048",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2049 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2049",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2050 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2050",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2051 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2051",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2052 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2052",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2053 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2053",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2054 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2054",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2055 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2055",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2056 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2056",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2057 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2057",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2058 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2058",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2059 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Opcode
AddinMonitorIdleStop

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2059",
    "version": "0",
    "level": "3",
    "task": "0",
    "opcode": "11",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Message": "",
    "InfoString": "",
    "ErrIdOptional": "0",
    "HROptional": "0",
    "InfoOptDeci": "0",
    "InfoOptHex": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2060 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Event ID 2061 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
Message UnicodeString
InfoString UnicodeString
ErrIdOptional Int32
HROptional Int32
InfoOptDeci UInt64
InfoOptHex UInt64
ETW_TrackbackTag UInt32

Event ID 2064 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2064",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2065 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2065",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2066 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2066",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2067 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2067",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2068 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2068",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2069 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2069",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2070 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2070",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2071 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2071",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2072 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2072",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2073 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2073",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2074 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2074",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2075 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2075",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2076 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2076",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2077 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2077",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2078 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2078",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2079 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2079",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2080 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2080",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2081 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2081",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2082 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2082",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2083 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2083",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2084 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2084",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2085 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2085",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2086 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2086",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2087 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2087",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2088 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2088",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2089 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2089",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2090 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2090",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2091 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Opcode
AddinMonitorNotifyUserResult

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "2091",
    "version": "0",
    "level": "4",
    "task": "0",
    "opcode": "12",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "InfoOptional1": "0",
    "InfoOptional2": "0",
    "InfoOptional3": "0",
    "InfoOptional4": "0",
    "ETW_TrackbackTag": "0"
  },
  "message": ""
}

Event ID 2092 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Event ID 2093 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
InfoOptional1 UInt64
InfoOptional2 UInt64
InfoOptional3 UInt64
InfoOptional4 UInt64
ETW_TrackbackTag UInt32

Event ID 30579 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskOCSB
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30579",
    "version": "1",
    "level": "1",
    "task": "1065",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30580 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskOCSB
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30580",
    "version": "1",
    "level": "2",
    "task": "1065",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30581 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskOCSB
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30581",
    "version": "1",
    "level": "3",
    "task": "1065",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30582 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskOCSB
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30582",
    "version": "1",
    "level": "4",
    "task": "1065",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30583 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskOCSB
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30583",
    "version": "1",
    "level": "5",
    "task": "1065",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30584 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskOCSB
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30584",
    "version": "1",
    "level": "16",
    "task": "1065",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30585 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskOCSB
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30585",
    "version": "1",
    "level": "50",
    "task": "1065",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30586 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskOCSB
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30586",
    "version": "1",
    "level": "100",
    "task": "1065",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30587 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskOCSB
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30587",
    "version": "1",
    "level": "200",
    "task": "1065",
    "opcode": "0",
    "keywords": 9223372036854775809,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30588 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskCoauthUndo
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30588",
    "version": "1",
    "level": "1",
    "task": "4",
    "opcode": "0",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30589 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskCoauthUndo
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30589",
    "version": "1",
    "level": "2",
    "task": "4",
    "opcode": "0",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30590 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskCoauthUndo
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30590",
    "version": "1",
    "level": "3",
    "task": "4",
    "opcode": "0",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30591 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskCoauthUndo
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30591",
    "version": "1",
    "level": "4",
    "task": "4",
    "opcode": "0",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30592 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskCoauthUndo
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30592",
    "version": "1",
    "level": "5",
    "task": "4",
    "opcode": "0",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30593 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskCoauthUndo
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30593",
    "version": "1",
    "level": "16",
    "task": "4",
    "opcode": "0",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30594 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskCoauthUndo
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30594",
    "version": "1",
    "level": "50",
    "task": "4",
    "opcode": "0",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30595 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskCoauthUndo
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30595",
    "version": "1",
    "level": "100",
    "task": "4",
    "opcode": "0",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30596 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskCoauthUndo
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30596",
    "version": "1",
    "level": "200",
    "task": "4",
    "opcode": "0",
    "keywords": 9223372036854775810,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30597 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskHashtags
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30597",
    "version": "1",
    "level": "1",
    "task": "2",
    "opcode": "0",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30598 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskHashtags
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30598",
    "version": "1",
    "level": "2",
    "task": "2",
    "opcode": "0",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30599 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskHashtags
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30599",
    "version": "1",
    "level": "3",
    "task": "2",
    "opcode": "0",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30600 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskHashtags
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30600",
    "version": "1",
    "level": "4",
    "task": "2",
    "opcode": "0",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30601 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskHashtags
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30601",
    "version": "1",
    "level": "5",
    "task": "2",
    "opcode": "0",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30602 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskHashtags
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30602",
    "version": "1",
    "level": "16",
    "task": "2",
    "opcode": "0",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30603 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskHashtags
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30603",
    "version": "1",
    "level": "50",
    "task": "2",
    "opcode": "0",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30604 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskHashtags
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30604",
    "version": "1",
    "level": "100",
    "task": "2",
    "opcode": "0",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30605 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskHashtags
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30605",
    "version": "1",
    "level": "200",
    "task": "2",
    "opcode": "0",
    "keywords": 9223372036854775812,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30606 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskEmojis
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30606",
    "version": "1",
    "level": "1",
    "task": "3",
    "opcode": "0",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30607 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskEmojis
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30607",
    "version": "1",
    "level": "2",
    "task": "3",
    "opcode": "0",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30608 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskEmojis
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30608",
    "version": "1",
    "level": "3",
    "task": "3",
    "opcode": "0",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30609 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEmojis
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30609",
    "version": "1",
    "level": "4",
    "task": "3",
    "opcode": "0",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30610 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskEmojis
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30610",
    "version": "1",
    "level": "5",
    "task": "3",
    "opcode": "0",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30611 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskEmojis
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30611",
    "version": "1",
    "level": "16",
    "task": "3",
    "opcode": "0",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30612 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskEmojis
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30612",
    "version": "1",
    "level": "50",
    "task": "3",
    "opcode": "0",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30613 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskEmojis
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30613",
    "version": "1",
    "level": "100",
    "task": "3",
    "opcode": "0",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30614 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskEmojis
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30614",
    "version": "1",
    "level": "200",
    "task": "3",
    "opcode": "0",
    "keywords": 9223372036854775816,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30615 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskAsyncEdit
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30615",
    "version": "1",
    "level": "1",
    "task": "1069",
    "opcode": "0",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30616 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskAsyncEdit
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30616",
    "version": "1",
    "level": "2",
    "task": "1069",
    "opcode": "0",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30617 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskAsyncEdit
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30617",
    "version": "1",
    "level": "3",
    "task": "1069",
    "opcode": "0",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30618 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskAsyncEdit
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30618",
    "version": "1",
    "level": "4",
    "task": "1069",
    "opcode": "0",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30619 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAsyncEdit
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30619",
    "version": "1",
    "level": "5",
    "task": "1069",
    "opcode": "0",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30620 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskAsyncEdit
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30620",
    "version": "1",
    "level": "16",
    "task": "1069",
    "opcode": "0",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30621 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskAsyncEdit
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30621",
    "version": "1",
    "level": "50",
    "task": "1069",
    "opcode": "0",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30622 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskAsyncEdit
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30622",
    "version": "1",
    "level": "100",
    "task": "1069",
    "opcode": "0",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30623 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskAsyncEdit
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30623",
    "version": "1",
    "level": "200",
    "task": "1069",
    "opcode": "0",
    "keywords": 9223372036854775824,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30624 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskForms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30624",
    "version": "1",
    "level": "1",
    "task": "41",
    "opcode": "0",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30625 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskForms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30625",
    "version": "1",
    "level": "2",
    "task": "41",
    "opcode": "0",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30626 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskForms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30626",
    "version": "1",
    "level": "3",
    "task": "41",
    "opcode": "0",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30627 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskForms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30627",
    "version": "1",
    "level": "4",
    "task": "41",
    "opcode": "0",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30628 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskForms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30628",
    "version": "1",
    "level": "5",
    "task": "41",
    "opcode": "0",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30629 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskForms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30629",
    "version": "1",
    "level": "16",
    "task": "41",
    "opcode": "0",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30630 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskForms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30630",
    "version": "1",
    "level": "50",
    "task": "41",
    "opcode": "0",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30631 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskForms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30631",
    "version": "1",
    "level": "100",
    "task": "41",
    "opcode": "0",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30632 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskForms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30632",
    "version": "1",
    "level": "200",
    "task": "41",
    "opcode": "0",
    "keywords": 9223372036854775840,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30633 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskFileNew
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30633",
    "version": "1",
    "level": "1",
    "task": "5",
    "opcode": "0",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30634 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskFileNew
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30634",
    "version": "1",
    "level": "2",
    "task": "5",
    "opcode": "0",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30635 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskFileNew
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30635",
    "version": "1",
    "level": "3",
    "task": "5",
    "opcode": "0",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30636 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFileNew
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30636",
    "version": "1",
    "level": "4",
    "task": "5",
    "opcode": "0",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30637 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskFileNew
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30637",
    "version": "1",
    "level": "5",
    "task": "5",
    "opcode": "0",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30638 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskFileNew
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30638",
    "version": "1",
    "level": "16",
    "task": "5",
    "opcode": "0",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30639 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskFileNew
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30639",
    "version": "1",
    "level": "50",
    "task": "5",
    "opcode": "0",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30640 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskFileNew
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30640",
    "version": "1",
    "level": "100",
    "task": "5",
    "opcode": "0",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30641 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskFileNew
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30641",
    "version": "1",
    "level": "200",
    "task": "5",
    "opcode": "0",
    "keywords": 9223372036854775872,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30642 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskInval
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30642",
    "version": "1",
    "level": "1",
    "task": "6",
    "opcode": "0",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30643 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskInval
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30643",
    "version": "1",
    "level": "2",
    "task": "6",
    "opcode": "0",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30644 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskInval
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30644",
    "version": "1",
    "level": "3",
    "task": "6",
    "opcode": "0",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30645 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskInval
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30645",
    "version": "1",
    "level": "4",
    "task": "6",
    "opcode": "0",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30646 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskInval
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30646",
    "version": "1",
    "level": "5",
    "task": "6",
    "opcode": "0",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30647 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskInval
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30647",
    "version": "1",
    "level": "16",
    "task": "6",
    "opcode": "0",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30648 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskInval
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30648",
    "version": "1",
    "level": "50",
    "task": "6",
    "opcode": "0",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30649 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskInval
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30649",
    "version": "1",
    "level": "100",
    "task": "6",
    "opcode": "0",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30650 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskInval
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30650",
    "version": "1",
    "level": "200",
    "task": "6",
    "opcode": "0",
    "keywords": 9223372036854775936,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30651 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskSuggestionService
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30651",
    "version": "1",
    "level": "1",
    "task": "1073",
    "opcode": "0",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30652 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskSuggestionService
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30652",
    "version": "1",
    "level": "2",
    "task": "1073",
    "opcode": "0",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30653 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskSuggestionService
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30653",
    "version": "1",
    "level": "3",
    "task": "1073",
    "opcode": "0",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30654 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskSuggestionService
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30654",
    "version": "1",
    "level": "4",
    "task": "1073",
    "opcode": "0",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30655 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskSuggestionService
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30655",
    "version": "1",
    "level": "5",
    "task": "1073",
    "opcode": "0",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30656 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskSuggestionService
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30656",
    "version": "1",
    "level": "16",
    "task": "1073",
    "opcode": "0",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30657 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskSuggestionService
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30657",
    "version": "1",
    "level": "50",
    "task": "1073",
    "opcode": "0",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30658 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskSuggestionService
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30658",
    "version": "1",
    "level": "100",
    "task": "1073",
    "opcode": "0",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30659 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskSuggestionService
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30659",
    "version": "1",
    "level": "200",
    "task": "1073",
    "opcode": "0",
    "keywords": 9223372036854776064,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30660 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskDocTiling
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30660",
    "version": "1",
    "level": "1",
    "task": "1074",
    "opcode": "0",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30661 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskDocTiling
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30661",
    "version": "1",
    "level": "2",
    "task": "1074",
    "opcode": "0",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30662 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskDocTiling
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30662",
    "version": "1",
    "level": "3",
    "task": "1074",
    "opcode": "0",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30663 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskDocTiling
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30663",
    "version": "1",
    "level": "4",
    "task": "1074",
    "opcode": "0",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30664 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskDocTiling
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30664",
    "version": "1",
    "level": "5",
    "task": "1074",
    "opcode": "0",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30665 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskDocTiling
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30665",
    "version": "1",
    "level": "16",
    "task": "1074",
    "opcode": "0",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30666 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskDocTiling
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30666",
    "version": "1",
    "level": "50",
    "task": "1074",
    "opcode": "0",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30667 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskDocTiling
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30667",
    "version": "1",
    "level": "100",
    "task": "1074",
    "opcode": "0",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30668 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskDocTiling
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30668",
    "version": "1",
    "level": "200",
    "task": "1074",
    "opcode": "0",
    "keywords": 9223372036854776320,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30669 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskOLE
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30669",
    "version": "1",
    "level": "1",
    "task": "1075",
    "opcode": "0",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30670 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskOLE
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30670",
    "version": "1",
    "level": "2",
    "task": "1075",
    "opcode": "0",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30671 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskOLE
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30671",
    "version": "1",
    "level": "3",
    "task": "1075",
    "opcode": "0",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30672 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskOLE
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30672",
    "version": "1",
    "level": "4",
    "task": "1075",
    "opcode": "0",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30673 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskOLE
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30673",
    "version": "1",
    "level": "5",
    "task": "1075",
    "opcode": "0",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30674 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskOLE
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30674",
    "version": "1",
    "level": "16",
    "task": "1075",
    "opcode": "0",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30675 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskOLE
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30675",
    "version": "1",
    "level": "50",
    "task": "1075",
    "opcode": "0",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30676 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskOLE
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30676",
    "version": "1",
    "level": "100",
    "task": "1075",
    "opcode": "0",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30677 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskOLE
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30677",
    "version": "1",
    "level": "200",
    "task": "1075",
    "opcode": "0",
    "keywords": 9223372036854776832,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30678 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskMailMerge
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30678",
    "version": "1",
    "level": "1",
    "task": "8",
    "opcode": "0",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30679 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskMailMerge
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30679",
    "version": "1",
    "level": "2",
    "task": "8",
    "opcode": "0",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30680 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskMailMerge
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30680",
    "version": "1",
    "level": "3",
    "task": "8",
    "opcode": "0",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30681 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskMailMerge
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30681",
    "version": "1",
    "level": "4",
    "task": "8",
    "opcode": "0",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30682 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskMailMerge
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30682",
    "version": "1",
    "level": "5",
    "task": "8",
    "opcode": "0",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30683 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskMailMerge
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30683",
    "version": "1",
    "level": "16",
    "task": "8",
    "opcode": "0",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30684 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskMailMerge
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30684",
    "version": "1",
    "level": "50",
    "task": "8",
    "opcode": "0",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30685 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskMailMerge
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30685",
    "version": "1",
    "level": "100",
    "task": "8",
    "opcode": "0",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30686 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskMailMerge
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30686",
    "version": "1",
    "level": "200",
    "task": "8",
    "opcode": "0",
    "keywords": 9223372036854779904,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30687 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskLanguage
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30687",
    "version": "1",
    "level": "1",
    "task": "1077",
    "opcode": "0",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30688 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskLanguage
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30688",
    "version": "1",
    "level": "2",
    "task": "1077",
    "opcode": "0",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30689 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskLanguage
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30689",
    "version": "1",
    "level": "3",
    "task": "1077",
    "opcode": "0",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30690 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskLanguage
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30690",
    "version": "1",
    "level": "4",
    "task": "1077",
    "opcode": "0",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30691 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskLanguage
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30691",
    "version": "1",
    "level": "5",
    "task": "1077",
    "opcode": "0",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30692 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskLanguage
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30692",
    "version": "1",
    "level": "16",
    "task": "1077",
    "opcode": "0",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30693 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskLanguage
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30693",
    "version": "1",
    "level": "50",
    "task": "1077",
    "opcode": "0",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30694 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskLanguage
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30694",
    "version": "1",
    "level": "100",
    "task": "1077",
    "opcode": "0",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30695 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskLanguage
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30695",
    "version": "1",
    "level": "200",
    "task": "1077",
    "opcode": "0",
    "keywords": 9223372036854784000,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30696 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskFlashEdits
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30696",
    "version": "1",
    "level": "1",
    "task": "1078",
    "opcode": "0",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30697 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskFlashEdits
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30697",
    "version": "1",
    "level": "2",
    "task": "1078",
    "opcode": "0",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30698 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskFlashEdits
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30698",
    "version": "1",
    "level": "3",
    "task": "1078",
    "opcode": "0",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30699 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFlashEdits
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30699",
    "version": "1",
    "level": "4",
    "task": "1078",
    "opcode": "0",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30700 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskFlashEdits
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30700",
    "version": "1",
    "level": "5",
    "task": "1078",
    "opcode": "0",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30701 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskFlashEdits
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30701",
    "version": "1",
    "level": "16",
    "task": "1078",
    "opcode": "0",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30702 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskFlashEdits
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30702",
    "version": "1",
    "level": "50",
    "task": "1078",
    "opcode": "0",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30703 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskFlashEdits
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30703",
    "version": "1",
    "level": "100",
    "task": "1078",
    "opcode": "0",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30704 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskFlashEdits
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30704",
    "version": "1",
    "level": "200",
    "task": "1078",
    "opcode": "0",
    "keywords": 9223372036854808576,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30705 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskEasyBib
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30705",
    "version": "1",
    "level": "1",
    "task": "1079",
    "opcode": "0",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30706 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskEasyBib
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30706",
    "version": "1",
    "level": "2",
    "task": "1079",
    "opcode": "0",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30707 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskEasyBib
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30707",
    "version": "1",
    "level": "3",
    "task": "1079",
    "opcode": "0",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30708 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskEasyBib
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30708",
    "version": "1",
    "level": "4",
    "task": "1079",
    "opcode": "0",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30709 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskEasyBib
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30709",
    "version": "1",
    "level": "5",
    "task": "1079",
    "opcode": "0",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30710 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskEasyBib
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30710",
    "version": "1",
    "level": "16",
    "task": "1079",
    "opcode": "0",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30711 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskEasyBib
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30711",
    "version": "1",
    "level": "50",
    "task": "1079",
    "opcode": "0",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30712 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskEasyBib
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30712",
    "version": "1",
    "level": "100",
    "task": "1079",
    "opcode": "0",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30713 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskEasyBib
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30713",
    "version": "1",
    "level": "200",
    "task": "1079",
    "opcode": "0",
    "keywords": 9223372036854841344,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30714 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskFastCoauth
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30714",
    "version": "1",
    "level": "1",
    "task": "64",
    "opcode": "0",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30715 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskFastCoauth
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30715",
    "version": "1",
    "level": "2",
    "task": "64",
    "opcode": "0",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30716 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskFastCoauth
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30716",
    "version": "1",
    "level": "3",
    "task": "64",
    "opcode": "0",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30717 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFastCoauth
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30717",
    "version": "1",
    "level": "4",
    "task": "64",
    "opcode": "0",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30718 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskFastCoauth
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30718",
    "version": "1",
    "level": "5",
    "task": "64",
    "opcode": "0",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30719 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskFastCoauth
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30719",
    "version": "1",
    "level": "16",
    "task": "64",
    "opcode": "0",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30720 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskFastCoauth
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30720",
    "version": "1",
    "level": "50",
    "task": "64",
    "opcode": "0",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30721 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskFastCoauth
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30721",
    "version": "1",
    "level": "100",
    "task": "64",
    "opcode": "0",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30722 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskFastCoauth
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30722",
    "version": "1",
    "level": "200",
    "task": "64",
    "opcode": "0",
    "keywords": 9223372036854906880,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30723 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskDigitalPrint
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30723",
    "version": "1",
    "level": "1",
    "task": "1081",
    "opcode": "0",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30724 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskDigitalPrint
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30724",
    "version": "1",
    "level": "2",
    "task": "1081",
    "opcode": "0",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30725 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskDigitalPrint
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30725",
    "version": "1",
    "level": "3",
    "task": "1081",
    "opcode": "0",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30726 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskDigitalPrint
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30726",
    "version": "1",
    "level": "4",
    "task": "1081",
    "opcode": "0",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30727 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskDigitalPrint
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30727",
    "version": "1",
    "level": "5",
    "task": "1081",
    "opcode": "0",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30728 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskDigitalPrint
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30728",
    "version": "1",
    "level": "16",
    "task": "1081",
    "opcode": "0",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30729 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskDigitalPrint
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30729",
    "version": "1",
    "level": "50",
    "task": "1081",
    "opcode": "0",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30730 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskDigitalPrint
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30730",
    "version": "1",
    "level": "100",
    "task": "1081",
    "opcode": "0",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30731 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskDigitalPrint
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30731",
    "version": "1",
    "level": "200",
    "task": "1081",
    "opcode": "0",
    "keywords": 9223372036855037952,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30732 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskFocusMode
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30732",
    "version": "1",
    "level": "1",
    "task": "1082",
    "opcode": "0",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30733 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskFocusMode
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30733",
    "version": "1",
    "level": "2",
    "task": "1082",
    "opcode": "0",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30734 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskFocusMode
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30734",
    "version": "1",
    "level": "3",
    "task": "1082",
    "opcode": "0",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30735 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskFocusMode
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30735",
    "version": "1",
    "level": "4",
    "task": "1082",
    "opcode": "0",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30736 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskFocusMode
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30736",
    "version": "1",
    "level": "5",
    "task": "1082",
    "opcode": "0",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30737 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskFocusMode
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30737",
    "version": "1",
    "level": "16",
    "task": "1082",
    "opcode": "0",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30738 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskFocusMode
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30738",
    "version": "1",
    "level": "50",
    "task": "1082",
    "opcode": "0",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30739 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskFocusMode
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30739",
    "version": "1",
    "level": "100",
    "task": "1082",
    "opcode": "0",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30740 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskFocusMode
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30740",
    "version": "1",
    "level": "200",
    "task": "1082",
    "opcode": "0",
    "keywords": 9223372036855300096,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30741 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskAsyncCoAuthoring
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30741",
    "version": "1",
    "level": "1",
    "task": "1083",
    "opcode": "0",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30742 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskAsyncCoAuthoring
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30742",
    "version": "1",
    "level": "2",
    "task": "1083",
    "opcode": "0",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30743 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskAsyncCoAuthoring
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30743",
    "version": "1",
    "level": "3",
    "task": "1083",
    "opcode": "0",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30744 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskAsyncCoAuthoring
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30744",
    "version": "1",
    "level": "4",
    "task": "1083",
    "opcode": "0",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30745 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAsyncCoAuthoring
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30745",
    "version": "1",
    "level": "5",
    "task": "1083",
    "opcode": "0",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30746 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskAsyncCoAuthoring
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30746",
    "version": "1",
    "level": "16",
    "task": "1083",
    "opcode": "0",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30747 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskAsyncCoAuthoring
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30747",
    "version": "1",
    "level": "50",
    "task": "1083",
    "opcode": "0",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30748 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskAsyncCoAuthoring
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30748",
    "version": "1",
    "level": "100",
    "task": "1083",
    "opcode": "0",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30749 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskAsyncCoAuthoring
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30749",
    "version": "1",
    "level": "200",
    "task": "1083",
    "opcode": "0",
    "keywords": 9223372036856872960,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30750 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskAddinMonitor
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30750",
    "version": "1",
    "level": "1",
    "task": "68",
    "opcode": "0",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30751 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskAddinMonitor
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30751",
    "version": "1",
    "level": "2",
    "task": "68",
    "opcode": "0",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30752 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskAddinMonitor
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30752",
    "version": "1",
    "level": "3",
    "task": "68",
    "opcode": "0",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30753 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskAddinMonitor
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30753",
    "version": "1",
    "level": "4",
    "task": "68",
    "opcode": "0",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30754 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAddinMonitor
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30754",
    "version": "1",
    "level": "5",
    "task": "68",
    "opcode": "0",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30755 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskAddinMonitor
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30755",
    "version": "1",
    "level": "16",
    "task": "68",
    "opcode": "0",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30756 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskAddinMonitor
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30756",
    "version": "1",
    "level": "50",
    "task": "68",
    "opcode": "0",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30757 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskAddinMonitor
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30757",
    "version": "1",
    "level": "100",
    "task": "68",
    "opcode": "0",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30758 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskAddinMonitor
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30758",
    "version": "1",
    "level": "200",
    "task": "68",
    "opcode": "0",
    "keywords": 9223372036858970112,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30759 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskAcronyms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30759",
    "version": "1",
    "level": "1",
    "task": "1085",
    "opcode": "0",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30760 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskAcronyms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30760",
    "version": "1",
    "level": "2",
    "task": "1085",
    "opcode": "0",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30761 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskAcronyms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30761",
    "version": "1",
    "level": "3",
    "task": "1085",
    "opcode": "0",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30762 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskAcronyms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30762",
    "version": "1",
    "level": "4",
    "task": "1085",
    "opcode": "0",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30763 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskAcronyms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30763",
    "version": "1",
    "level": "5",
    "task": "1085",
    "opcode": "0",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30764 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskAcronyms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30764",
    "version": "1",
    "level": "16",
    "task": "1085",
    "opcode": "0",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30765 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskAcronyms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30765",
    "version": "1",
    "level": "50",
    "task": "1085",
    "opcode": "0",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30766 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskAcronyms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30766",
    "version": "1",
    "level": "100",
    "task": "1085",
    "opcode": "0",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30767 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskAcronyms
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30767",
    "version": "1",
    "level": "200",
    "task": "1085",
    "opcode": "0",
    "keywords": 9223372036863164416,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30768 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskRewrite
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30768",
    "version": "1",
    "level": "1",
    "task": "1086",
    "opcode": "0",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30769 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskRewrite
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30769",
    "version": "1",
    "level": "2",
    "task": "1086",
    "opcode": "0",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30770 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskRewrite
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30770",
    "version": "1",
    "level": "3",
    "task": "1086",
    "opcode": "0",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30771 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskRewrite
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30771",
    "version": "1",
    "level": "4",
    "task": "1086",
    "opcode": "0",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30772 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskRewrite
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30772",
    "version": "1",
    "level": "5",
    "task": "1086",
    "opcode": "0",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30773 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskRewrite
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30773",
    "version": "1",
    "level": "16",
    "task": "1086",
    "opcode": "0",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30774 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskRewrite
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30774",
    "version": "1",
    "level": "50",
    "task": "1086",
    "opcode": "0",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30775 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskRewrite
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30775",
    "version": "1",
    "level": "100",
    "task": "1086",
    "opcode": "0",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30776 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskRewrite
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30776",
    "version": "1",
    "level": "200",
    "task": "1086",
    "opcode": "0",
    "keywords": 9223372036871553024,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30777 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskSmartLinks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30777",
    "version": "1",
    "level": "1",
    "task": "1087",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30778 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskSmartLinks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30778",
    "version": "1",
    "level": "2",
    "task": "1087",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30779 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskSmartLinks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30779",
    "version": "1",
    "level": "3",
    "task": "1087",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30780 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskSmartLinks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30780",
    "version": "1",
    "level": "4",
    "task": "1087",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30781 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskSmartLinks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30781",
    "version": "1",
    "level": "5",
    "task": "1087",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30782 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskSmartLinks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30782",
    "version": "1",
    "level": "16",
    "task": "1087",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30783 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskSmartLinks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30783",
    "version": "1",
    "level": "50",
    "task": "1087",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30784 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskSmartLinks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30784",
    "version": "1",
    "level": "100",
    "task": "1087",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30785 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskSmartLinks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30785",
    "version": "1",
    "level": "200",
    "task": "1087",
    "opcode": "0",
    "keywords": 9223372036888330240,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30786 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskDocumentTasks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30786",
    "version": "1",
    "level": "1",
    "task": "1088",
    "opcode": "0",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30787 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskDocumentTasks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30787",
    "version": "1",
    "level": "2",
    "task": "1088",
    "opcode": "0",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30788 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskDocumentTasks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30788",
    "version": "1",
    "level": "3",
    "task": "1088",
    "opcode": "0",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30789 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskDocumentTasks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30789",
    "version": "1",
    "level": "4",
    "task": "1088",
    "opcode": "0",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30790 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskDocumentTasks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30790",
    "version": "1",
    "level": "5",
    "task": "1088",
    "opcode": "0",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30791 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskDocumentTasks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30791",
    "version": "1",
    "level": "16",
    "task": "1088",
    "opcode": "0",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30792 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskDocumentTasks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30792",
    "version": "1",
    "level": "50",
    "task": "1088",
    "opcode": "0",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30793 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskDocumentTasks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30793",
    "version": "1",
    "level": "100",
    "task": "1088",
    "opcode": "0",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30794 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskDocumentTasks
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30794",
    "version": "1",
    "level": "200",
    "task": "1088",
    "opcode": "0",
    "keywords": 9223372036921884672,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30795 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskShutdown
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30795",
    "version": "1",
    "level": "1",
    "task": "1089",
    "opcode": "0",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30796 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskShutdown
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30796",
    "version": "1",
    "level": "2",
    "task": "1089",
    "opcode": "0",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30797 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskShutdown
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30797",
    "version": "1",
    "level": "3",
    "task": "1089",
    "opcode": "0",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30798 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskShutdown
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30798",
    "version": "1",
    "level": "4",
    "task": "1089",
    "opcode": "0",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30799 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskShutdown
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30799",
    "version": "1",
    "level": "5",
    "task": "1089",
    "opcode": "0",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30800 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskShutdown
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30800",
    "version": "1",
    "level": "16",
    "task": "1089",
    "opcode": "0",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30801 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskShutdown
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30801",
    "version": "1",
    "level": "50",
    "task": "1089",
    "opcode": "0",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30802 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskShutdown
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30802",
    "version": "1",
    "level": "100",
    "task": "1089",
    "opcode": "0",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30803 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskShutdown
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30803",
    "version": "1",
    "level": "200",
    "task": "1089",
    "opcode": "0",
    "keywords": 9223372036988993536,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30804 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskSidetrack
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30804",
    "version": "1",
    "level": "1",
    "task": "1090",
    "opcode": "0",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30805 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskSidetrack
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30805",
    "version": "1",
    "level": "2",
    "task": "1090",
    "opcode": "0",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30806 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskSidetrack
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30806",
    "version": "1",
    "level": "3",
    "task": "1090",
    "opcode": "0",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30807 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskSidetrack
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30807",
    "version": "1",
    "level": "4",
    "task": "1090",
    "opcode": "0",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30808 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskSidetrack
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30808",
    "version": "1",
    "level": "5",
    "task": "1090",
    "opcode": "0",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30809 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskSidetrack
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30809",
    "version": "1",
    "level": "16",
    "task": "1090",
    "opcode": "0",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30810 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskSidetrack
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30810",
    "version": "1",
    "level": "50",
    "task": "1090",
    "opcode": "0",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30811 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskSidetrack
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30811",
    "version": "1",
    "level": "100",
    "task": "1090",
    "opcode": "0",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30812 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskSidetrack
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30812",
    "version": "1",
    "level": "200",
    "task": "1090",
    "opcode": "0",
    "keywords": 9223372037123211264,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30813 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskPerformance
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30813",
    "version": "1",
    "level": "1",
    "task": "9",
    "opcode": "0",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30814 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskPerformance
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30814",
    "version": "1",
    "level": "2",
    "task": "9",
    "opcode": "0",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30815 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskPerformance
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30815",
    "version": "1",
    "level": "3",
    "task": "9",
    "opcode": "0",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30816 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskPerformance
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30816",
    "version": "1",
    "level": "4",
    "task": "9",
    "opcode": "0",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30817 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskPerformance
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30817",
    "version": "1",
    "level": "5",
    "task": "9",
    "opcode": "0",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30818 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskPerformance
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30818",
    "version": "1",
    "level": "16",
    "task": "9",
    "opcode": "0",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30819 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskPerformance
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30819",
    "version": "1",
    "level": "50",
    "task": "9",
    "opcode": "0",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30820 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskPerformance
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30820",
    "version": "1",
    "level": "100",
    "task": "9",
    "opcode": "0",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30821 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskPerformance
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30821",
    "version": "1",
    "level": "200",
    "task": "9",
    "opcode": "0",
    "keywords": 9223372037391646720,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30822 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Critical
Task
tskInfoProtection
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30822",
    "version": "1",
    "level": "1",
    "task": "1092",
    "opcode": "0",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30823 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Error
Task
tskInfoProtection
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30823",
    "version": "1",
    "level": "2",
    "task": "1092",
    "opcode": "0",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30824 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Warning
Task
tskInfoProtection
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30824",
    "version": "1",
    "level": "3",
    "task": "1092",
    "opcode": "0",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30825 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Informational
Task
tskInfoProtection
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30825",
    "version": "1",
    "level": "4",
    "task": "1092",
    "opcode": "0",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30826 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
Verbose
Task
tskInfoProtection
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30826",
    "version": "1",
    "level": "5",
    "task": "1092",
    "opcode": "0",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30827 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
16
Task
tskInfoProtection
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30827",
    "version": "1",
    "level": "16",
    "task": "1092",
    "opcode": "0",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30828 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
50
Task
tskInfoProtection
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30828",
    "version": "1",
    "level": "50",
    "task": "1092",
    "opcode": "0",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30829 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
100
Task
tskInfoProtection
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30829",
    "version": "1",
    "level": "100",
    "task": "1092",
    "opcode": "0",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30830 —

Provider
Microsoft-Office-Word3
Channel
WordChannel
Level
200
Task
tskInfoProtection
Opcode
Info

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Office-Word3",
    "guid": "{A1B69D49-2195-4F59-9D33-BDF30C0FE473}",
    "event_source_name": "",
    "event_id": "30830",
    "version": "1",
    "level": "200",
    "task": "1092",
    "opcode": "0",
    "keywords": 9223372037928517632,
    "time_created": "2026-03-15T00:00:00.0000000+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "{00000000-0000-0000-0000-000000000000}"
    },
    "execution": {
      "process_id": "0",
      "thread_id": "0"
    },
    "channel": "WordChannel",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "tag": "",
    "xsz": ""
  },
  "message": ""
}

Event ID 30831 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30832 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30833 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30834 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30835 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30836 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30837 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30838 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30839 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30840 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30841 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30842 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30843 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30844 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30845 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30846 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30847 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString

Event ID 30848 —

Provider
Microsoft-Office-Word3
Channel
WordChannel

Fields #

NameDescription
tag UnicodeString
xsz UnicodeString