Microsoft-Windows-Audit

6 events across 1 channel

Event ID 1001 — Audit.

Provider
Microsoft-Windows-Audit
Channel
Analytic

Message

Audit.exe launched with command line "%1".

Fields

NameDescription
CommandLine

Event ID 1002 — Audit.

Provider
Microsoft-Windows-Audit
Channel
Analytic

Message

Audit.exe exiting with status %1.

Fields

NameDescription
ErrorCode

Event ID 2001 — Executing unattend settings pass ".

Provider
Microsoft-Windows-Audit
Channel
Analytic

Message

Executing unattend settings pass "%1".

Fields

NameDescription
Pass

Event ID 2002 — Finished executing unattend pass with status %1.

Provider
Microsoft-Windows-Audit
Channel
Analytic

Message

Finished executing unattend pass with status %1.

Fields

NameDescription
ErrorCode

Event ID 2003 — Failed to execute unattend pass with status %1.

Provider
Microsoft-Windows-Audit
Channel
Analytic

Message

Failed to execute unattend pass with status %1.

Fields

NameDescription
ErrorCode

Event ID 2004 — Using unattend file ".

Provider
Microsoft-Windows-Audit
Channel
Analytic

Message

Using unattend file "%2" for pass "%1".

Fields

NameDescription
Pass
FilePath