Microsoft-Windows-ESE
140 events across 2 channels
Event ID 100 — ESE TraceBaseId Trace
Description
ESE TraceBaseId Trace.
Message #
Event ID 101 — ESE BF Trace
Description
ESE BF Trace.
Message #
Event ID 102 — ESE Block Trace
Description
ESE Block Trace.
Message #
Event ID 103 — ESE CacheNewPage Trace
Description
ESE CacheNewPage Trace.
Message #
Fields #
| Name | Description |
|---|---|
ifmp UInt32 | — |
pgno UInt32 | — |
LatchFlags UInt32 | — |
objid UInt32 | — |
PageFlags UInt32 | — |
UserId UInt32 | — |
OperationId UInt8 | — |
OperationType UInt8 | — Known values
|
ClientType UInt8 | — |
Flags UInt8 | — |
CorrelationId UInt32 | — |
Iorp UInt8 | — |
Iors UInt8 | — |
Iort UInt8 | — |
Ioru UInt8 | — |
Iorf UInt8 | — |
ParentObjectClass UInt8 | — |
dbtimeDirtied UInt64 | — |
itagMicFree UInt16 | — |
cbFree UInt16 | — |
Event ID 104 — ESE CacheReadPage Trace
Description
ESE CacheReadPage Trace.
Message #
Fields #
| Name | Description |
|---|---|
ifmp UInt32 | — |
pgno UInt32 | — |
LatchFlags UInt32 | — |
objid UInt32 | — |
PageFlags UInt32 | — |
UserId UInt32 | — |
OperationId UInt8 | — |
OperationType UInt8 | — Known values
|
ClientType UInt8 | — |
Flags UInt8 | — |
CorrelationId UInt32 | — |
Iorp UInt8 | — |
Iors UInt8 | — |
Iort UInt8 | — |
Ioru UInt8 | — |
Iorf UInt8 | — |
ParentObjectClass UInt8 | — |
dbtimeDirtied UInt64 | — |
itagMicFree UInt16 | — |
cbFree UInt16 | — |
Event ID 105 — ESE CachePrereadPage Trace
Description
ESE CachePrereadPage Trace.
Message #
Fields #
| Name | Description |
|---|---|
ifmp UInt32 | — |
pgno UInt32 | — |
UserId UInt32 | — |
OperationId UInt8 | — |
OperationType UInt8 | — Known values
|
ClientType UInt8 | — |
Flags UInt8 | — |
CorrelationId UInt32 | — |
Iorp UInt8 | — |
Iors UInt8 | — |
Iort UInt8 | — |
Ioru UInt8 | — |
Iorf UInt8 | — |
ParentObjectClass UInt8 | — |
Event ID 106 — ESE CacheWritePage Trace
Description
ESE CacheWritePage Trace.
Message #
Fields #
| Name | Description |
|---|---|
tick UInt32 | — |
ifmp UInt32 | — |
pgno UInt32 | — |
objid UInt32 | — |
PageFlags UInt32 | — |
DirtyLevel UInt32 | — |
UserId UInt32 | — |
OperationId UInt8 | — |
OperationType UInt8 | — Known values
|
ClientType UInt8 | — |
Flags UInt8 | — |
CorrelationId UInt32 | — |
Iorp UInt8 | — |
Iors UInt8 | — |
Iort UInt8 | — |
Ioru UInt8 | — |
Iorf UInt8 | — |
ParentObjectClass UInt8 | — |
Event ID 107 — ESE CacheEvictPage Trace
Event ID 108 — ESE CacheRequestPage Trace
Event ID 109 — ESE LatchPageDeprecated Trace
Description
ESE LatchPageDeprecated Trace.
Message #
Event ID 110 — ESE CacheDirtyPage Trace
Description
ESE CacheDirtyPage Trace.
Message #
Fields #
| Name | Description |
|---|---|
tick UInt32 | — |
ifmp UInt32 | — |
pgno UInt32 | — |
objid UInt32 | — |
PageFlags UInt32 | — |
DirtyLevel UInt32 | — |
LgposModify UInt64 | — |
UserId UInt32 | — |
OperationId UInt8 | — |
OperationType UInt8 | — Known values
|
ClientType UInt8 | — |
Flags UInt8 | — |
CorrelationId UInt32 | — |
Iorp UInt8 | — |
Iors UInt8 | — |
Iort UInt8 | — |
Ioru UInt8 | — |
Iorf UInt8 | — |
ParentObjectClass UInt8 | — |
ClientComponent AnsiString | — |
ClientAction AnsiString | — |
ClientActionContext AnsiString | — |
GuidActivityId GUID | — |
Event ID 111 — ESE TransactionBegin Trace
Event ID 112 — ESE TransactionCommit Trace
Event ID 113 — ESE TransactionRollback Trace
Event ID 114 — ESE SpaceAllocExt Trace
Event ID 115 — ESE SpaceFreeExt Trace
Event ID 116 — ESE SpaceAllocPage Trace
Event ID 117 — ESE SpaceFreePage Trace
Event ID 118 — ESE IorunEnqueue Trace
Event ID 119 — ESE IorunDequeue Trace
Description
ESE IorunDequeue Trace.
Message #
Fields #
| Name | Description |
|---|---|
iFile UInt64 | — |
ibOffset UInt64 | — |
cbData UInt32 | — |
tidAlloc UInt32 | — |
fHeapA UInt32 | — |
fWrite UInt32 | — |
Iorp UInt32 | — |
Iors UInt32 | — |
Ioru UInt32 | — |
Iorf UInt32 | — |
grbitQos UInt32 | — |
cmsecTimeInQueue UInt64 | — |
EngineFileType UInt32 | — |
EngineFileId UInt64 | — |
cDispatchPass UInt64 | — |
cIorunCombined UInt16 | — |
cusecDequeueLatency UInt32 | — |
Event ID 120 — ESE IOCompletion Trace
Description
ESE IOCompletion Trace.
Message #
Fields #
| Name | Description |
|---|---|
iFile UInt64 | — |
fMultiIor UInt32 | — |
fWrite UInt8 | — |
UserId UInt32 | — |
OperationId UInt8 | — |
OperationType UInt8 | — Known values
|
ClientType UInt8 | — |
Flags UInt8 | — |
CorrelationId UInt32 | — |
Iorp UInt8 | — |
Iors UInt8 | — |
Iort UInt8 | — |
Ioru UInt8 | — |
Iorf UInt8 | — |
ParentObjectClass UInt8 | — |
ibOffset UInt64 | — |
cbTransfer UInt32 | — |
error UInt32 | — |
qosHighestFirst UInt32 | — |
cmsecIOElapsed Double | — |
dtickQueueDelay UInt32 | — |
tidAlloc UInt32 | — |
EngineFileType UInt32 | — |
EngineFileId UInt64 | — |
fmfFile UInt32 | — |
DiskNumber UInt32 | — |
dwEngineObjid UInt32 | — |
qosIOComplete UInt64 | — |
dwTraceFlags UInt32 | — |
Event ID 121 — ESE LogStall Trace
Description
ESE LogStall Trace.
Message #
Event ID 122 — ESE LogWrite Trace
Event ID 123 — ESE EventLogInfo Trace
Description
ESE EventLogInfo Trace.
Message #
Fields #
| Name | Description |
|---|---|
szTrace UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ESE",
"guid": "478EA8A8-00BE-4BA6-8E75-8B9DC7DB9F78",
"event_source_name": "",
"event_id": 123,
"version": 0,
"level": 4,
"task": 24,
"opcode": 0,
"keywords": 9223372036854775812,
"time_created": "2026-03-13T20:00:52.072070+00:00",
"event_record_id": 1,
"correlation": {},
"execution": {
"process_id": 7000,
"thread_id": 7520
},
"channel": "Microsoft-Windows-ESE/Operational",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"szTrace": "EventLog[ID=102(0x66)@10958217080]: TiWorker (7000,P,98) SoftwareUsageMetrics-Api: The database engine (10.00.20348.0000) is starting a new instance (0). "
},
"message": ""
}
Event ID 124 — ESE EventLogWarn Trace
Description
ESE EventLogWarn Trace.
Message #
Fields #
| Name | Description |
|---|---|
szTrace UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ESE",
"guid": "478EA8A8-00BE-4BA6-8E75-8B9DC7DB9F78",
"event_source_name": "",
"event_id": 124,
"version": 0,
"level": 3,
"task": 25,
"opcode": 0,
"keywords": 9223372036854775812,
"time_created": "2026-03-13T23:07:16.370107+00:00",
"event_record_id": 237,
"correlation": {},
"execution": {
"process_id": 14016,
"thread_id": 13980
},
"channel": "Microsoft-Windows-ESE/Operational",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": "S-1-5-18"
}
},
"event_data": {
"szTrace": "EventLog[ID=640(0x280)@47616170117]: certsrv.exe (14016,P,98) Restore0001: Error -1919 validating header page on flush map file \"C:\\Windows\\system32\\CertLog\\EvtGen-Root-CA.jfm\". The flush map file will be invalidated. \r\nAdditional information: [SignDbHdrFromDb:Create time:03/13/2026 23:06:22.503 Rand:3655758382 Computer:] [SignFmHdrFromDb:Create time:03/13/2026 23:06:22.385 Rand:413456288 Computer:] [SignDbHdrFromFm:Create time:03/13/2026 23:06:22.931 Rand:2864051150 Computer:] [SignFmHdrFromFm:Create time:03/13/2026 23:06:22.945 Rand:3852748920 Computer:] "
},
"message": ""
}
Event ID 125 — ESE EventLogError Trace
Description
ESE EventLogError Trace.
Message #
Fields #
| Name | Description |
|---|---|
szTrace UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-ESE",
"guid": "478EA8A8-00BE-4BA6-8E75-8B9DC7DB9F78",
"event_source_name": "",
"event_id": 125,
"version": 0,
"level": 2,
"task": 26,
"opcode": 0,
"keywords": 9223372036854775812,
"time_created": "2026-03-13T20:00:00.026028+00:00",
"event_record_id": 2,
"correlation": {
"ActivityID": "DF92C490-B30B-0001-9AC5-92DF0BB3DC01"
},
"execution": {
"process_id": 3312,
"thread_id": 4008
},
"channel": "Microsoft-Windows-ESE/Operational",
"computer": "LAB-WIN11.ludus.domain",
"security": {
"user_id": "S-1-5-19"
}
},
"event_data": {
"szTrace": "EventLog[ID=412(0x19c)@103513027991]: svchost (3312,R,98) SRUJet: Unable to read the header of logfile C:\\Windows\\system32\\SRU\\SRU.log. Error -501. "
},
"message": ""
}
Event ID 126 — ESE TimerQueueScheduleDeprecated Trace
Description
ESE TimerQueueScheduleDeprecated Trace.
Message #
Event ID 127 — ESE TimerQueueRunDeprecated Trace
Description
ESE TimerQueueRunDeprecated Trace.
Message #
Event ID 128 — ESE TimerQueueCancelDeprecated Trace
Description
ESE TimerQueueCancelDeprecated Trace.
Message #
Event ID 129 — ESE TimerTaskSchedule Trace
Event ID 130 — ESE TimerTaskRun Trace
Event ID 131 — ESE TimerTaskCancel Trace
Event ID 132 — ESE TaskManagerPost Trace
Event ID 133 — ESE TaskManagerRun Trace
Event ID 134 — ESE GPTaskManagerPost Trace
Event ID 135 — ESE GPTaskManagerRun Trace
Event ID 136 — ESE TestMarker Trace
Event ID 137 — ESE ThreadCreate Trace
Event ID 138 — ESE ThreadStart Trace
Event ID 139 — ESE CacheVersionPage Trace
Event ID 140 — ESE CacheVersionCopyPage Trace
Event ID 141 — ESE CacheResize Trace
Event ID 142 — ESE CacheLimitResize Trace
Event ID 143 — ESE CacheScavengeProgress Trace
Description
ESE CacheScavengeProgress Trace.
Message #
Fields #
| Name | Description |
|---|---|
iRun Int64 | — |
cbfVisited Int32 | — |
cbfCacheSize Int32 | — |
cbfCacheTarget Int32 | — |
cbfCacheSizeStartShrink Int32 | — |
dtickShrinkDuration UInt32 | — |
cbfAvail Int32 | — |
cbfAvailPoolLow Int32 | — |
cbfAvailPoolHigh Int32 | — |
cbfFlushPending Int32 | — |
cbfFlushPendingSlow Int32 | — |
cbfFlushPendingHung Int32 | — |
cbfOutOfMemory Int32 | — |
cbfPermanentErrs Int32 | — |
eStopReason Int32 | — |
errRun Int32 | — |
Event ID 144 — ESE ApiCall_Start Trace
Event ID 145 — ESE ApiCall_Stop Trace
Event ID 146 — ESE ResMgrInit Trace
Event ID 147 — ESE ResMgrTerm Trace
Event ID 148 — ESE CacheCachePage Trace
Event ID 149 — ESE MarkPageAsSuperCold Trace
Event ID 150 — ESE CacheMissLatency Trace
Description
ESE CacheMissLatency Trace.
Message #
Fields #
| Name | Description |
|---|---|
ifmp UInt32 | — |
pgno UInt32 | — |
dwUserId UInt32 | — |
bOperationId UInt8 | — |
bOperationType UInt8 | — |
bClientType UInt8 | — |
bFlags UInt8 | — |
dwCorrelationId UInt32 | — |
iorp UInt8 | — |
iors UInt8 | — |
iort UInt8 | — |
ioru UInt8 | — |
iorf UInt8 | — |
tce UInt8 | — |
usecsWait UInt64 | — |
bftcmr UInt8 | — |
bUserPriorityTag UInt8 | — |
Event ID 151 — ESE BTreePrereadPageRequest Trace
Event ID 152 — ESE DiskFlushFileBuffers Trace
Event ID 153 — ESE DiskFlushFileBuffersBegin Trace
Event ID 154 — ESE CacheFirstDirtyPage Trace
Description
ESE CacheFirstDirtyPage Trace.
Message #
Fields #
| Name | Description |
|---|---|
tick UInt32 | — |
ifmp UInt32 | — |
pgno UInt32 | — |
objid UInt32 | — |
fFlags UInt32 | — |
bfdfNew UInt32 | — |
lgposModify UInt64 | — |
dwUserId UInt32 | — |
bOperationId UInt8 | — |
bOperationType UInt8 | — |
bClientType UInt8 | — |
bFlags UInt8 | — |
dwCorrelationId UInt32 | — |
iorp UInt8 | — |
iors UInt8 | — |
iort UInt8 | — |
ioru UInt8 | — |
iorf UInt8 | — |
tce UInt8 | — |
Event ID 155 — ESE SysStationId Trace
Event ID 156 — ESE InstStationId Trace
Event ID 157 — ESE FmpStationId Trace
Event ID 158 — ESE DiskStationId Trace
Event ID 159 — ESE FileStationId Trace
Event ID 160 — ESE IsamDbfilehdrInfo Trace
Event ID 161 — ESE DiskOsDiskCacheInfo Trace
Event ID 162 — ESE DiskOsStorageWriteCacheProp Trace
Event ID 163 — ESE DiskOsDeviceSeekPenaltyDesc Trace
Event ID 164 — ESE DirtyPage2Deprecated Trace
Description
ESE DirtyPage2Deprecated Trace.
Message #
Event ID 165 — ESE IOCompletion2 Trace
Description
ESE IOCompletion2 Trace.
Message #
Fields #
| Name | Description |
|---|---|
wszFilename UnicodeString | — |
fMultiIor UInt32 | — |
fWrite UInt8 | — |
dwUserId UInt32 | — |
bOperationId UInt8 | — |
bOperationType UInt8 | — |
bClientType UInt8 | — |
bFlags UInt8 | — |
dwCorrelationId UInt32 | — |
iorp UInt8 | — |
iors UInt8 | — |
iort UInt8 | — |
ioru UInt8 | — |
iorf UInt8 | — |
tce UInt8 | — |
szClientComponent AnsiString | — |
szClientAction AnsiString | — |
szClientActionContext AnsiString | — |
guidActivityId GUID | — |
ibOffset UInt64 | — |
cbTransfer UInt32 | — |
dwError UInt32 | — |
qosHighestFirst UInt32 | — |
cmsecIOElapsed Double | — |
dtickQueueDelay UInt32 | — |
tidAlloc UInt32 | — |
dwEngineFileType UInt32 | — |
dwEngineFileId UInt64 | — |
fmfFile UInt32 | — |
dwDiskNumber UInt32 | — |
dwEngineObjid UInt32 | — |
dwTraceFlags UInt32 | — |
Event ID 166 — ESE FCBPurgeFailure Trace
Event ID 167 — ESE IOLatencySpikeNotice Trace
Event ID 168 — ESE IOCompletion2Sess Trace
Description
ESE IOCompletion2Sess Trace.
Message #
Fields #
| Name | Description |
|---|---|
wszFilename UnicodeString | — |
fMultiIor UInt32 | — |
fWrite UInt8 | — |
dwUserId UInt32 | — |
bOperationId UInt8 | — |
bOperationType UInt8 | — |
bClientType UInt8 | — |
bFlags UInt8 | — |
dwCorrelationId UInt32 | — |
iorp UInt8 | — |
iors UInt8 | — |
iort UInt8 | — |
ioru UInt8 | — |
iorf UInt8 | — |
tce UInt8 | — |
szClientComponent AnsiString | — |
szClientAction AnsiString | — |
szClientActionContext AnsiString | — |
guidActivityId GUID | — |
ibOffset UInt64 | — |
cbTransfer UInt32 | — |
dwError UInt32 | — |
qosHighestFirst UInt32 | — |
cmsecIOElapsed Double | — |
dtickQueueDelay UInt32 | — |
tidAlloc UInt32 | — |
dwEngineFileType UInt32 | — |
dwEngineFileId UInt64 | — |
fmfFile UInt32 | — |
dwDiskNumber UInt32 | — |
dwEngineObjid UInt32 | — |
dwTraceFlags UInt32 | — |
Event ID 169 — ESE IOIssueThreadPost Trace
Event ID 170 — ESE IOIssueThreadPosted Trace
Event ID 171 — ESE IOThreadIssueStart Trace
Description
ESE IOThreadIssueStart Trace.
Message #
Event ID 172 — ESE IOThreadIssuedDisk Trace
Event ID 173 — ESE IOThreadIssueProcessedIO Trace
Event ID 174 — ESE IOIoreqCompletion Trace
Event ID 175 — ESE CacheMemoryUsage Trace
Event ID 176 — ESE CacheSetLgposModify Trace
Event ID 177 — ESE CacheFirstDirtyPage2 Trace
Description
ESE CacheFirstDirtyPage2 Trace.
Message #
Fields #
| Name | Description |
|---|---|
tick UInt32 | — |
wszFilename UnicodeString | — |
ifmp UInt32 | — |
iofile UInt32 | — |
pgno UInt32 | — |
objid UInt32 | — |
fFlags UInt32 | — |
bfdfNew UInt32 | — |
lgposModify UInt64 | — |
dwUserId UInt32 | — |
bOperationId UInt8 | — |
bOperationType UInt8 | — |
bClientType UInt8 | — |
bFlags UInt8 | — |
dwCorrelationId UInt32 | — |
iorp UInt8 | — |
iors UInt8 | — |
iort UInt8 | — |
ioru UInt8 | — |
iorf UInt8 | — |
tce UInt8 | — |
szClientComponent AnsiString | — |
szClientAction AnsiString | — |
szClientActionContext AnsiString | — |
guidActivityId GUID | — |