Microsoft-Windows-HCAP

22 events across 1 channel

Event ID	Title	Channel
1	The HCAP Server started successfully.	System
2	The HCAP Server stopped successfully.	System
3	The HCAP Server failed to start.	System
4	The HCAP Server failed to stop.	System
5	The HCAP Server cannot contact the NPS Server.	System
6	The NPS server rejected the connection request.	System
7	The HCAP Request is malformed.	System
8	The HCAP Request code {RequestCode} is unknown.	System
9	The HCAP Request type {RequestType} is unknown.	System
10	The HCAP Request version {Version} is not supported.	System
11	The HCAP Request had no TLVs when at least one was expected.	System
12	The HCAP Request TLV {MalformedTLV} is malformed.	System
15	The HCAP Request TLV type is not supported.	System
16	The HCAP Request did not have SOH TLV.	System
17	The HCAP server could not match the HCAP Request against any Network Policy.	System
18	The HCAP server did not get a response from Network Policy Server.	System
19	The HCAP server encountered a general failure.	System
20	The NPS server encountered a general failure.	System
21	The HCAP server encountered an internal error.	System
22	Successful HCAP Response was returned.	System
23	Failure HCAP Response was returned with result code {ResultCode}HCAP client host …	System
24	A failure response was sent.	System

Event ID 1 — The HCAP Server started successfully.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Server started successfully.

Event ID 2 — The HCAP Server stopped successfully.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Server stopped successfully.

Event ID 3 — The HCAP Server failed to start.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Server failed to start.

Event ID 4 — The HCAP Server failed to stop.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Server failed to stop.

Event ID 5 — The HCAP Server cannot contact the NPS Server.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Server cannot contact the NPS Server.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 6 — The NPS server rejected the connection request.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The NPS server rejected the connection request.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 7 — The HCAP Request is malformed.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Request is malformed.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 8 — The HCAP Request code {RequestCode} is unknown.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Request code {RequestCode} is unknown.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`RequestCode`	—
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 9 — The HCAP Request type {RequestType} is unknown.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Request type {RequestType} is unknown.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`RequestType`	—
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 10 — The HCAP Request version {Version} is not supported.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Request version {Version} is not supported.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`Version`	—
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 11 — The HCAP Request had no TLVs when at least one was expected.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Request had no TLVs when at least one was expected.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 12 — The HCAP Request TLV {MalformedTLV} is malformed.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Request TLV {MalformedTLV} is malformed.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`MalformedTLV`	—
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 15 — The HCAP Request TLV type is not supported.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Request TLV type is not supported.Unsupported TLVs: {TLVs}HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`TLVs`	—
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 16 — The HCAP Request did not have SOH TLV.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP Request did not have SOH TLV.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 17 — The HCAP server could not match the HCAP Request against any Network Policy.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP server could not match the HCAP Request against any Network Policy.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 18 — The HCAP server did not get a response from Network Policy Server.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP server did not get a response from Network Policy Server.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 19 — The HCAP server encountered a general failure.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP server encountered a general failure.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 20 — The NPS server encountered a general failure.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The NPS server encountered a general failure.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 21 — The HCAP server encountered an internal error.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

The HCAP server encountered an internal error.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—

Event ID 22 — Successful HCAP Response was returned.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

Successful HCAP Response was returned.HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}Version: {Version}User Name: {UserName}User Groups: {UserGroup}Endpoint ID: {EndpointID}Endpoint Location: {EndpointLocation}Endpoint IPv4 Address: {EndpointIPv4Address}Endpoint IPv6 Address: {HostName}0Posture State returned: {HostName}1Extended State returned: {HostName}2

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—
`Version`	—
`UserName`	—
`UserGroup`	—
`EndpointID`	—
`EndpointLocation`	—
`EndpointIPv4Address`	—

Event ID 23 — Failure HCAP Response was returned with result code {ResultCode}HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {Reque...

Provider: Microsoft-Windows-HCAP
Channel: System

Message

Failure HCAP Response was returned with result code {ResultCode}HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}Version: {Version}User Name: {UserName}User Groups: {UserGroup}Endpoint ID: {EndpointID}Endpoint Location: {EndpointLocation}Endpoint IPv4 Address: {ResultCode}0Endpoint IPv6 Address: {ResultCode}1

Fields

Name	Description
`ResultCode`	—
`HostName`	—
`HostIP`	—
`RequestID`	—
`Version`	—
`UserName`	—
`UserGroup`	—
`EndpointID`	—
`EndpointLocation`	—

Event ID 24 — A failure response was sent.

Provider: Microsoft-Windows-HCAP
Channel: System

Message

A failure response was sent.  The HCAP Server sent Negatively Acknowledgment (NAK) for unsupported mandatory TLVs. HCAP client host name: {HostName}HCAP client IP address: {HostIP}Request ID: {RequestID}Version: {Version}User Name: {UserName}User Groups: {UserGroup}Endpoint ID: {EndpointID}Endpoint Location: {EndpointLocation}Endpoint IPv4 Address: {EndpointIPv4Address}Endpoint IPv6 Address: {HostName}0

Fields

Name	Description
`HostName`	—
`HostIP`	—
`RequestID`	—
`Version`	—
`UserName`	—
`UserGroup`	—
`EndpointID`	—
`EndpointLocation`	—
`EndpointIPv4Address`	—