Microsoft-Windows-Host-Network-Service

105 events across 2 channels

Event IDTitleChannel
1000HNS failed to create vmswitch with error 'Parameter0' and adapter id = …Microsoft-Windows-Host-Network-Service-Admin
1000Operational
1001HNS failed to delete vmswitch with error = 'Parameter0', id = 'Parameter1' and …Microsoft-Windows-Host-Network-Service-Admin
1001Operational
1002HNS failed to create intenal nic with error = 'Parameter0', id = 'Parameter1' …Microsoft-Windows-Host-Network-Service-Admin
1002Operational
1003HNS failed to delete internal nic with error = 'HResult' and id = 'Parameter1'.Microsoft-Windows-Host-Network-Service-Admin
1003Operational
1004HNS failed to create vmswitch port with error 'HResult', switch id = 'SwitchId', …Microsoft-Windows-Host-Network-Service-Admin
1004Operational
1005HNS failed to delete vmswitch port with error 'Parameter0', switch id = …Microsoft-Windows-Host-Network-Service-Admin
1005Operational
1006HNS failed to connect vmswitch port with error 'Parameter0', switch id = …Microsoft-Windows-Host-Network-Service-Admin
1006Operational
1007HNS failed to disconnect vmswitch port with error 'Parameter0', switch id = …Microsoft-Windows-Host-Network-Service-Admin
1007Operational
1008HNS failed to bind external adapter to vswitch with error 'HResult' and adapter …Microsoft-Windows-Host-Network-Service-Admin
1008Operational
1009HNS failed to unbind external adapter to vswitch with error 'HResult' and …Microsoft-Windows-Host-Network-Service-Admin
1009Operational
1010HNS failed to set vmswitch extension with error 'HResult' on switch id = …Microsoft-Windows-Host-Network-Service-Admin
1010Operational
1011HNS failed to set vmswitch port profile with error 'Parameter0', switch id = …Microsoft-Windows-Host-Network-Service-Admin
1011Operational
1012HNS failed to set vmswitch port isolation with error 'Parameter0', switch id = …Microsoft-Windows-Host-Network-Service-Admin
1012Operational
1013Parameter0 :- Network id = 'Parameter1'.Microsoft-Windows-Host-Network-Service-Admin
1013Operational
1014Parameter0 :- Network id = 'Parameter1'.Microsoft-Windows-Host-Network-Service-Admin
1014Operational
1015Parameter0 :- Endpoint id = 'Parameter1'.Microsoft-Windows-Host-Network-Service-Admin
1015Operational
1016Parameter0':- Endpoint id = 'Parameter1'.Microsoft-Windows-Host-Network-Service-Admin
1016Operational
1017HNS failed to configure hostagent traffic managment on vmswitch port with error …Microsoft-Windows-Host-Network-Service-Admin
1017Operational
1018HNS failed to reset hostagent traffic management on vmswitch port with error …Microsoft-Windows-Host-Network-Service-Admin
1018Operational
1019HNS failed to configure hostagent traffic managment on switch with error …Microsoft-Windows-Host-Network-Service-Admin
1019Operational
1020HNS failed to add firewall rules for new container with error 'Parameter0' and …Microsoft-Windows-Host-Network-Service-Admin
1020Operational
1021HNS failed to create winnat instance with error 'Parameter0', external ip prefix …Microsoft-Windows-Host-Network-Service-Admin
1021Operational
1022HNS failed to delete winnat instance with error 'Parameter0', class name …Microsoft-Windows-Host-Network-Service-Admin
1022Operational
1023HNS failed to set interface configuration with error 'Parameter0'.Microsoft-Windows-Host-Network-Service-Admin
1023Operational
1024HNS failed to configure ipv4 address with error 'Parameter0'.Microsoft-Windows-Host-Network-Service-Admin
1024Operational
1025HNS failed to configure default route with error 'Parameter0'.Microsoft-Windows-Host-Network-Service-Admin
1025Operational
1026HNS failed to allocate nat port with error 'HResult'.Microsoft-Windows-Host-Network-Service-Admin
1026Operational
1027HNS failed to restore all configuration from its data file with error HResult.Microsoft-Windows-Host-Network-Service-Admin
1027Operational
1028HNS failed to set ethernet adapter MAC address with error = 'Parameter0', …Microsoft-Windows-Host-Network-Service-Admin
1028Operational
1030'.Microsoft-Windows-Host-Network-Service-Admin
1030Operational
1031HNS failed to add encryption rules for new container with error 'Parameter0' and …Microsoft-Windows-Host-Network-Service-Admin
1031Operational
1032'.Microsoft-Windows-Host-Network-Service-Admin
1032Operational
1033HNS failed to get vmswitch info with error = 'HResult', switchid = 'Parameter1'.Microsoft-Windows-Host-Network-Service-Admin
1033Operational
1034HNS failed to enumerate vmswitch ports with error = 'HResult', switchid = …Microsoft-Windows-Host-Network-Service-Admin
1034Operational
1035HNS failed to get port handle count with error = 'HResult', portname = …Microsoft-Windows-Host-Network-Service-Admin
1035Operational
1036Mirrored Networking was requested.Operational
1037HNS failed to update vmswitch port isolation with error 'Parameter0', switch id …Microsoft-Windows-Host-Network-Service-Admin
1037Operational
1038HNS failed to set vmswitch MAC spoofing with error 'Parameter0', switch id = …Microsoft-Windows-Host-Network-Service-Admin
1038Operational
1039HNS failed to delete vmswitch port property with error 'Parameter0', switch id = …Microsoft-Windows-Host-Network-Service-Admin
1039Operational
1040Modified guest 'ResourceType' settings.Operational
1041Modified guest 'ResourceType' settings.Operational
1042Modified guest 'ResourceType' settings.Operational
1043Modified guest 'ResourceType' settings.Operational
1044Modified guest 'ResourceType' settings.Operational
1045Modified guest 'ResourceType' settings.Operational
1046Modified guest 'ResourceType' settings.Operational
1047Modified guest 'ResourceType' settings.Operational
1048Modified guest 'ResourceType' settings.Operational
1049Modified guest 'ResourceType' settings.Operational
1050Modified guest 'ResourceType' settings.Operational
1051Failed to modify guest 'ResourceType' settings with error 'Result'.Operational
1052Parameter0 :- GuestNetworkService id = 'Parameter1'.Microsoft-Windows-Host-Network-Service-Admin
1052Operational
1053Parameter0 :- GuestNetworkService id = 'Parameter1'.Microsoft-Windows-Host-Network-Service-Admin
1053Operational
1054Guest Network Service state changed.Operational
1055RPC request received.Operational
1056EventString :- Endpoint id = 'EndpointId'.Microsoft-Windows-Host-Network-Service-Admin
1056Operational
1057EventString :- Endpoint id = 'EndpointId'.Microsoft-Windows-Host-Network-Service-Admin
1057Operational
1058HNS failed to configure IOV offload on vmswitch port with error 'Parameter0', …Microsoft-Windows-Host-Network-Service-Admin
1058Operational
1060Action taken to remove orphaned component: 'Action' 'Name' ('Detail'), …Microsoft-Windows-Host-Network-Service-Admin
1060Operational
1062HNS failed to start a service or load a kernel driver.Microsoft-Windows-Host-Network-Service-Admin
1062Operational

Event ID 1000 — HNS failed to create vmswitch with error 'Parameter0' and adapter id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin
Level
Error

Description

HNS failed to create vmswitch with error 'Parameter0' and adapter id = 'Parameter1'.

Message #

HNS failed to create vmswitch with error '%1' and adapter id = '%2'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Host-Network-Service",
    "guid": "0C885E0D-6EB6-476C-A048-2457EED3A5C1",
    "event_source_name": "",
    "event_id": 1000,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-14T01:40:09.308665+00:00",
    "event_record_id": 34,
    "correlation": {},
    "execution": {
      "process_id": 2476,
      "thread_id": 2776
    },
    "channel": "Microsoft-Windows-Host-Network-Service-Admin",
    "computer": "LAB-WIN11.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Parameter0": "0x800700b7",
    "Parameter1": "C08CB7B8-9B3C-408E-8E30-5E16A3AEB444",
    "Parameter2": "Default Switch"
  },
  "message": ""
}

Event ID 1000 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to create vmswitch with error 'Parameter0' and adapter id = 'Parameter1'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1001 — HNS failed to delete vmswitch with error = 'Parameter0', id = 'Parameter1' and friendly name = 'Parameter2'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to delete vmswitch with error = 'Parameter0', id = 'Parameter1' and friendly name = 'Parameter2'.

Message #

HNS failed to delete vmswitch with error = '%1', id = '%2' and friendly name = '%3'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1001 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to delete vmswitch with error = 'Parameter0', id = 'Parameter1' and friendly name = 'Parameter2'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1002 — HNS failed to create intenal nic with error = 'Parameter0', id = 'Parameter1' and friendly name = 'Parameter2'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to create intenal nic with error = 'Parameter0', id = 'Parameter1' and friendly name = 'Parameter2'.

Message #

HNS failed to create intenal nic with error = '%1', id = '%2' and friendly name = '%3'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1002 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to create intenal nic with error = 'Parameter0', id = 'Parameter1' and friendly name = 'Parameter2'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1003 — HNS failed to delete internal nic with error = 'HResult' and id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to delete internal nic with error = 'HResult' and id = 'Parameter1'.

Message #

HNS failed to delete internal nic with error = '%1' and id = '%2'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1003 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to delete internal nic with error = 'HResult' and id = 'Parameter1'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1004 — HNS failed to create vmswitch port with error 'HResult', switch id = 'SwitchId', port id = 'PortId' and type = 'PortType'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to create vmswitch port with error 'HResult', switch id = 'SwitchId', port id = 'PortId' and type = 'PortType'.

Message #

HNS failed to create vmswitch port with error '%1', switch id = '%2', port id = '%3' and type = '%4'.

Fields #

NameDescription
HResult HexInt32
SwitchId GUID
PortId GUID
PortType UInt32

Event ID 1004 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to create vmswitch port with error 'HResult', switch id = 'SwitchId', port id = 'PortId' and type = 'PortType'.

Fields #

NameDescription
HResult HexInt32
SwitchId GUID
PortId GUID
PortType UInt32

Event ID 1005 — HNS failed to delete vmswitch port with error 'Parameter0', switch id = 'Parameter1' and port id = 'Parameter2'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to delete vmswitch port with error 'Parameter0', switch id = 'Parameter1' and port id = 'Parameter2'.

Message #

HNS failed to delete vmswitch port with error '%1', switch id = '%2' and port id = '%3'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1005 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to delete vmswitch port with error 'Parameter0', switch id = 'Parameter1' and port id = 'Parameter2'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1006 — HNS failed to connect vmswitch port with error 'Parameter0', switch id = 'Parameter1', port id = 'Paramete3' and nic name = 'Parameter4'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to connect vmswitch port with error 'Parameter0', switch id = 'Parameter1', port id = 'Paramete3' and nic name = 'Parameter4'.

Message #

HNS failed to connect vmswitch port with error '%1', switch id = '%2', port id = '%3' and nic name = '%4'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Paramete3 UnicodeString
Parameter4 UnicodeString

Event ID 1006 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to connect vmswitch port with error 'Parameter0', switch id = 'Parameter1', port id = 'Paramete3' and nic name = 'Parameter4'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Paramete3 UnicodeString
Parameter4 UnicodeString

Event ID 1007 — HNS failed to disconnect vmswitch port with error 'Parameter0', switch id = 'Parameter1', port id = 'Paramete3' and nic name = 'Parameter4'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to disconnect vmswitch port with error 'Parameter0', switch id = 'Parameter1', port id = 'Paramete3' and nic name = 'Parameter4'.

Message #

HNS failed to disconnect vmswitch port with error '%1', switch id = '%2', port id = '%3' and nic name = '%4'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Paramete3 UnicodeString
Parameter4 UnicodeString

Event ID 1007 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to disconnect vmswitch port with error 'Parameter0', switch id = 'Parameter1', port id = 'Paramete3' and nic name = 'Parameter4'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Paramete3 UnicodeString
Parameter4 UnicodeString

Event ID 1008 — HNS failed to bind external adapter to vswitch with error 'HResult' and adapter id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to bind external adapter to vswitch with error 'HResult' and adapter id = 'Parameter1'.

Message #

HNS failed to bind external adapter to vswitch with error '%1' and adapter id = '%2'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1008 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to bind external adapter to vswitch with error 'HResult' and adapter id = 'Parameter1'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1009 — HNS failed to unbind external adapter to vswitch with error 'HResult' and adapter id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to unbind external adapter to vswitch with error 'HResult' and adapter id = 'Parameter1'.

Message #

HNS failed to unbind external adapter to vswitch with error '%1' and adapter id = '%2'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1009 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to unbind external adapter to vswitch with error 'HResult' and adapter id = 'Parameter1'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1010 — HNS failed to set vmswitch extension with error 'HResult' on switch id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to set vmswitch extension with error 'HResult' on switch id = 'Parameter1'.

Message #

HNS failed to set vmswitch extension with error '%1' on switch id = '%2'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1010 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to set vmswitch extension with error 'HResult' on switch id = 'Parameter1'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1011 — HNS failed to set vmswitch port profile with error 'Parameter0', switch id = 'Parameter1', port id = 'Paramete3' and profile id = 'Parameter4'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to set vmswitch port profile with error 'Parameter0', switch id = 'Parameter1', port id = 'Paramete3' and profile id = 'Parameter4'.

Message #

HNS failed to set vmswitch port profile with error '%1', switch id = '%2', port id = '%3' and profile id = '%4'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Paramete3 UnicodeString
Parameter4 UnicodeString

Event ID 1011 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to set vmswitch port profile with error 'Parameter0', switch id = 'Parameter1', port id = 'Paramete3' and profile id = 'Parameter4'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Paramete3 UnicodeString
Parameter4 UnicodeString

Event ID 1012 — HNS failed to set vmswitch port isolation with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2' and isolation id = 'Parameter3'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to set vmswitch port isolation with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2' and isolation id = 'Parameter3'.

Message #

HNS failed to set vmswitch port isolation with error '%1', switch id = '%2', port id = '%3' and isolation id = '%4'.

Fields #

NameDescription
Parameter0 HexInt32
Paramete1 UnicodeString
Paramete2 UnicodeString
Parameter3 UInt64

Event ID 1012 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to set vmswitch port isolation with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2' and isolation id = 'Parameter3'.

Fields #

NameDescription
Parameter0 HexInt32
Paramete1 UnicodeString
Paramete2 UnicodeString
Parameter3 UInt64

Event ID 1013 — Parameter0 :- Network id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin
Level
Error

Message #

%1 :- 
 Network id = '%2'.
 Network type = '%3'.
  Result code = '%4'.

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter2 UInt32
Parameter3 HexInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Host-Network-Service",
    "guid": "0C885E0D-6EB6-476C-A048-2457EED3A5C1",
    "event_source_name": "",
    "event_id": 1013,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-13T22:13:59.744236+00:00",
    "event_record_id": 28,
    "correlation": {},
    "execution": {
      "process_id": 2364,
      "thread_id": 10356
    },
    "channel": "Microsoft-Windows-Host-Network-Service-Admin",
    "computer": "LAB-WIN11.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Parameter0": "HNS-Layer-Create",
    "Parameter1": "632711BF-FE3A-4CDE-94A3-B7D4B24574A6",
    "Parameter2": 6,
    "Parameter3": "0x80070057"
  },
  "message": ""
}

Event ID 1013 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter2 UInt32
Parameter3 HexInt32

Event ID 1014 — Parameter0 :- Network id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin
Level
Informational

Message #

%1 :- 
 Network id = '%2'.
 Network type = '%3'.
  Result code = '%4'.

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter2 UInt32
Parameter3 HexInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Host-Network-Service",
    "guid": "0C885E0D-6EB6-476C-A048-2457EED3A5C1",
    "event_source_name": "",
    "event_id": 1014,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:32:02.402467+00:00",
    "event_record_id": 3,
    "correlation": {
      "ActivityID": "B3C94439-5656-4D26-8052-20033A5181C5"
    },
    "execution": {
      "process_id": 2820,
      "thread_id": 6780
    },
    "channel": "Microsoft-Windows-Host-Network-Service-Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Parameter0": "HNS-Network-Create",
    "Parameter1": "B95D0C5E-57D4-412B-B571-18A81A16E005",
    "Parameter2": 7,
    "Parameter3": "0x0"
  },
  "message": ""
}

Event ID 1014 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter2 UInt32
Parameter3 HexInt32

Event ID 1015 — Parameter0 :- Endpoint id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Message #

%1 :- 
 Endpoint id = '%2'.
  Network id = '%3'.
  Network type = '%4'.
  Result code = '%5'.

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter2 GUID
Parameter3 UInt32
Parameter4 HexInt32

Event ID 1015 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter2 GUID
Parameter3 UInt32
Parameter4 HexInt32

Event ID 1016 — Parameter0':- Endpoint id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin
Level
Informational

Message #

%1':- 
 Endpoint id = '%2'.
  Network id = '%3'.
  Network type = '%4'.
  Result code = '%5'.

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter2 GUID
Parameter3 UInt32
Parameter4 HexInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Host-Network-Service",
    "guid": "0C885E0D-6EB6-476C-A048-2457EED3A5C1",
    "event_source_name": "",
    "event_id": 1016,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:32:02.417112+00:00",
    "event_record_id": 6,
    "correlation": {
      "ActivityID": "95388E16-C0CB-4191-9FDE-E7B11BC8D046"
    },
    "execution": {
      "process_id": 2820,
      "thread_id": 2384
    },
    "channel": "Microsoft-Windows-Host-Network-Service-Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Parameter0": "HNS-Endpoint-Attach",
    "Parameter1": "AD2366C4-0BE2-4636-8124-F3BDDFD27E15",
    "Parameter2": "B95D0C5E-57D4-412B-B571-18A81A16E005",
    "Parameter3": 7,
    "Parameter4": "0x0"
  },
  "message": ""
}

Event ID 1016 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter2 GUID
Parameter3 UInt32
Parameter4 HexInt32

Event ID 1017 — HNS failed to configure hostagent traffic managment on vmswitch port with error 'Parameter0', port profile id = 'Paramete1', ip address = 'Paramete2' and isolation id = ...

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to configure hostagent traffic managment on vmswitch port with error 'Parameter0', port profile id = 'Paramete1', ip address = 'Paramete2' and isolation id = 'Parameter3'.

Message #

HNS failed to configure hostagent traffic managment on vmswitch port with error '%1', port profile id = '%2', ip address = '%3' and isolation id = '%4'

Fields #

NameDescription
Parameter0 HexInt32
Paramete1 UnicodeString
Paramete2 UnicodeString
Parameter3 UInt64

Event ID 1017 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to configure hostagent traffic managment on vmswitch port with error 'Parameter0', port profile id = 'Paramete1', ip address = 'Paramete2' and isolation id = 'Parameter3'.

Fields #

NameDescription
Parameter0 HexInt32
Paramete1 UnicodeString
Paramete2 UnicodeString
Parameter3 UInt64

Event ID 1018 — HNS failed to reset hostagent traffic management on vmswitch port with error 'HResult' and port profile id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to reset hostagent traffic management on vmswitch port with error 'HResult' and port profile id = 'Parameter1'.

Message #

HNS failed to reset hostagent traffic management on vmswitch port with error '%1' and port profile id = '%2'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1018 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to reset hostagent traffic management on vmswitch port with error 'HResult' and port profile id = 'Parameter1'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1019 — HNS failed to configure hostagent traffic managment on switch with error 'Parameter0', switch id = 'Parameter1', managment ip address = 'Parameter2' and forward all traffi...

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to configure hostagent traffic managment on switch with error 'Parameter0', switch id = 'Parameter1', managment ip address = 'Parameter2' and forward all traffic to external network = 'Parameter3'.

Message #

HNS failed to configure hostagent traffic managment on switch with error '%1', switch id = '%2', managment ip address = '%3' and forward all traffic to external network = '%4'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString
Parameter3 Boolean

Event ID 1019 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to configure hostagent traffic managment on switch with error 'Parameter0', switch id = 'Parameter1', managment ip address = 'Parameter2' and forward all traffic to external network = 'Parameter3'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString
Parameter3 Boolean

Event ID 1020 — HNS failed to add firewall rules for new container with error 'Parameter0' and unique error string "'Parameter1'".

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to add firewall rules for new container with error 'Parameter0' and unique error string "'Parameter1'".

Message #

HNS failed to add firewall rules for new container with error '%1' and unique error string "'%2'"

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UInt32

Event ID 1020 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to add firewall rules for new container with error 'Parameter0' and unique error string "'Parameter1'".

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UInt32

Event ID 1021 — HNS failed to create winnat instance with error 'Parameter0', external ip prefix = 'Parameter1', internal ip prefix = 'Paramete3' and nat name = 'Parameter4'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to create winnat instance with error 'Parameter0', external ip prefix = 'Parameter1', internal ip prefix = 'Paramete3' and nat name = 'Parameter4'.

Message #

HNS failed to create winnat instance with error '%1', external ip prefix = '%2', internal ip prefix = '%3' and nat name = '%4'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Paramete3 UnicodeString
Parameter4 UnicodeString

Event ID 1021 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to create winnat instance with error 'Parameter0', external ip prefix = 'Parameter1', internal ip prefix = 'Paramete3' and nat name = 'Parameter4'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Paramete3 UnicodeString
Parameter4 UnicodeString

Event ID 1022 — HNS failed to delete winnat instance with error 'Parameter0', class name 'Parameter1' and instance id = 'Parameter2'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to delete winnat instance with error 'Parameter0', class name 'Parameter1' and instance id = 'Parameter2'.

Message #

HNS failed to delete winnat instance with error '%1', class name '%2' and instance id = '%3'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1022 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to delete winnat instance with error 'Parameter0', class name 'Parameter1' and instance id = 'Parameter2'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1023 — HNS failed to set interface configuration with error 'Parameter0'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to set interface configuration with error 'Parameter0'.

Message #

HNS failed to set interface configuration with error '%1'.
NetCfgInstanceId = '%2'.
HostDnsServerList = '%3'.
HostDnsSuffix = '%4'.
EnableLLMNR = '%5'.
Unique error string = '%6'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString
Parameter3 UnicodeString
Parameter4 Boolean
Parameter5 UInt32

Event ID 1023 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to set interface configuration with error 'Parameter0'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString
Parameter3 UnicodeString
Parameter4 Boolean
Parameter5 UInt32

Event ID 1024 — HNS failed to configure ipv4 address with error 'Parameter0'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to configure ipv4 address with error 'Parameter0'.

Message #

HNS failed to configure ipv4 address with error '%1'.
Adapter index = '%2'.
Compartment id = '%3'.
Prefix length = '%4'.
IPv4 address = '%5'. 
Persistent = '%6'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UInt32
Parameter2 UInt32
Parameter3 UInt32
Parameter4 UnicodeString
Parameter5 Boolean

Event ID 1024 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to configure ipv4 address with error 'Parameter0'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UInt32
Parameter2 UInt32
Parameter3 UInt32
Parameter4 UnicodeString
Parameter5 Boolean

Event ID 1025 — HNS failed to configure default route with error 'Parameter0'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to configure default route with error 'Parameter0'.

Message #

HNS failed to configure default route with error '%1'.
Adapter index = '%2'.
Compartment id = '%3'.
Gateway ip address = '%4'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UInt32
Parameter2 UInt32
Parameter3 UnicodeString

Event ID 1025 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to configure default route with error 'Parameter0'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UInt32
Parameter2 UInt32
Parameter3 UnicodeString

Event ID 1026 — HNS failed to allocate nat port with error 'HResult'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to allocate nat port with error 'HResult'.

Message #

HNS failed to allocate nat port with error '%1'.
Port Number= '%2'.

Fields #

NameDescription
HResult HexInt32
Parameter0 UInt32

Event ID 1026 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to allocate nat port with error 'HResult'.

Fields #

NameDescription
HResult HexInt32
Parameter0 UInt32

Event ID 1027 — HNS failed to restore all configuration from its data file with error HResult.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to restore all configuration from its data file with error HResult.

Message #

HNS failed to restore all configuration from its data file with error %1

Fields #

NameDescription
HResult HexInt32

Event ID 1027 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to restore all configuration from its data file with error.

Fields #

NameDescription
HResult HexInt32

Event ID 1028 — HNS failed to set ethernet adapter MAC address with error = 'Parameter0', adapter guid = 'Parameter1' and MAC address = 'Parameter2'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to set ethernet adapter MAC address with error = 'Parameter0', adapter guid = 'Parameter1' and MAC address = 'Parameter2'.

Message #

HNS failed to set ethernet adapter MAC address with error = '%1', adapter guid = '%2' and MAC address = '%3'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1028 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to set ethernet adapter MAC address with error = 'Parameter0', adapter guid = 'Parameter1' and MAC address = 'Parameter2'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1030 — '.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin
Level
Error

Message #

'%2' : '%1'.

Fields #

NameDescription
HResult HexInt32
API UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Host-Network-Service",
    "guid": "0C885E0D-6EB6-476C-A048-2457EED3A5C1",
    "event_source_name": "",
    "event_id": 1030,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:32:02.350163+00:00",
    "event_record_id": 2,
    "correlation": {
      "ActivityID": "B3C94439-5656-4D26-8052-20033A5181C5"
    },
    "execution": {
      "process_id": 2820,
      "thread_id": 6780
    },
    "channel": "Microsoft-Windows-Host-Network-Service-Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "HResult": "0x80070032",
    "API": 1
  },
  "message": ""
}

Event ID 1030 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Fields #

NameDescription
HResult HexInt32
API UInt32

Event ID 1031 — HNS failed to add encryption rules for new container with error 'Parameter0' and unique error string "'Parameter1'".

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to add encryption rules for new container with error 'Parameter0' and unique error string "'Parameter1'".

Message #

HNS failed to add encryption rules for new container with error '%1' and unique error string "'%2'"

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UInt32

Event ID 1031 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to add encryption rules for new container with error 'Parameter0' and unique error string "'Parameter1'".

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UInt32

Event ID 1032 — '.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Message #

'%2' : '%1'.

Fields #

NameDescription
HResult HexInt32
API UInt32

Event ID 1032 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Fields #

NameDescription
HResult HexInt32
API UInt32

Event ID 1033 — HNS failed to get vmswitch info with error = 'HResult', switchid = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to get vmswitch info with error = 'HResult', switchid = 'Parameter1'.

Message #

HNS failed to get vmswitch info with error = '%1', switchid = '%2'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1033 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to get vmswitch info with error = 'HResult', switchid = 'Parameter1'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1034 — HNS failed to enumerate vmswitch ports with error = 'HResult', switchid = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to enumerate vmswitch ports with error = 'HResult', switchid = 'Parameter1'.

Message #

HNS failed to enumerate vmswitch ports with error = '%1', switchid = '%2'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1034 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to enumerate vmswitch ports with error = 'HResult', switchid = 'Parameter1'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1035 — HNS failed to get port handle count with error = 'HResult', portname = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to get port handle count with error = 'HResult', portname = 'Parameter1'.

Message #

HNS failed to get port handle count with error = '%1', portname = '%2'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1035 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to get port handle count with error = 'HResult', portname = 'Parameter1'.

Fields #

NameDescription
HResult HexInt32
Parameter1 UnicodeString

Event ID 1036 — Mirrored Networking was requested.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Mirrored Networking was requested.

Message #

Mirrored Networking was requested.

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter2 UInt32
Parameter3 HexInt32

Event ID 1037 — HNS failed to update vmswitch port isolation with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2' and isolation id = 'Parameter3'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to update vmswitch port isolation with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2' and isolation id = 'Parameter3'.

Message #

HNS failed to update vmswitch port isolation with error '%1', switch id = '%2', port id = '%3' and isolation id = '%4'.

Fields #

NameDescription
Parameter0 HexInt32
Paramete1 UnicodeString
Paramete2 UnicodeString
Parameter3 UInt64

Event ID 1037 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to update vmswitch port isolation with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2' and isolation id = 'Parameter3'.

Fields #

NameDescription
Parameter0 HexInt32
Paramete1 UnicodeString
Paramete2 UnicodeString
Parameter3 UInt64

Event ID 1038 — HNS failed to set vmswitch MAC spoofing with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to set vmswitch MAC spoofing with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2'.

Message #

HNS failed to set vmswitch MAC spoofing with error '%1', switch id = '%2', port id = '%3'.

Fields #

NameDescription
Parameter0 HexInt32
Paramete1 UnicodeString
Paramete2 UnicodeString
Parameter3 UInt64

Event ID 1038 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to set vmswitch MAC spoofing with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2'.

Fields #

NameDescription
Parameter0 HexInt32
Paramete1 UnicodeString
Paramete2 UnicodeString
Parameter3 UInt64

Event ID 1039 — HNS failed to delete vmswitch port property with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to delete vmswitch port property with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2'.

Message #

HNS failed to delete vmswitch port property with error '%1', switch id = '%2', port id = '%3'.

Fields #

NameDescription
Parameter0 HexInt32
Paramete1 UnicodeString
Paramete2 UnicodeString
Parameter3 UInt64

Event ID 1039 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to delete vmswitch port property with error 'Parameter0', switch id = 'Paramete1', port id = 'Paramete2'.

Fields #

NameDescription
Parameter0 HexInt32
Paramete1 UnicodeString
Paramete2 UnicodeString
Parameter3 UInt64

Event ID 1040 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1041 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1042 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1043 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1044 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1045 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1046 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1047 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1048 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1049 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1050 — Modified guest 'ResourceType' settings.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Modified guest 'ResourceType' settings. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Modified guest '%4' settings. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1051 — Failed to modify guest 'ResourceType' settings with error 'Result'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Failed to modify guest 'ResourceType' settings with error 'Result'. Entity: 'EntityType', Id: 'EntityId', Operation: 'OperationType', Settings: 'Settings'.

Message #

Failed to modify guest '%4' settings with error '%6'. Entity: '%1', Id: '%2', Operation: '%3', Settings: '%5'

Fields #

NameDescription
EntityType UInt32
EntityId GUID
OperationType UInt32
Known values
%%1904
New registry value created
%%1905
Existing registry value modified
%%1906
Registry value deleted
%%14674
Value Added
%%14675
Value Deleted
%%14680
Value Added With Expiration Time
%%14681
Value Deleted With Expiration Time
%%14688
Value Auto Deleted With Expiration Time
ResourceType UInt32
Settings UnicodeString
Result HexInt32

Event ID 1052 — Parameter0 :- GuestNetworkService id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Message #

%1 :- 
 GuestNetworkService id = '%2'.
 Result code = '%3'.

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter3 HexInt32

Event ID 1052 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter3 HexInt32

Event ID 1053 — Parameter0 :- GuestNetworkService id = 'Parameter1'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin
Level
Informational

Message #

%1 :- 
 GuestNetworkService id = '%2'.
 Result code = '%3'.

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter3 HexInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Host-Network-Service",
    "guid": "0C885E0D-6EB6-476C-A048-2457EED3A5C1",
    "event_source_name": "",
    "event_id": 1053,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:32:02.416617+00:00",
    "event_record_id": 5,
    "correlation": {
      "ActivityID": "95388E16-C0CB-4191-9FDE-E7B11BC8D046"
    },
    "execution": {
      "process_id": 2820,
      "thread_id": 2384
    },
    "channel": "Microsoft-Windows-Host-Network-Service-Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Parameter0": "HNS-GuestNetworkService-Create",
    "Parameter1": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
    "Parameter3": "0x0"
  },
  "message": ""
}

Event ID 1053 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Fields #

NameDescription
Parameter0 UnicodeString
Parameter1 GUID
Parameter3 HexInt32

Event ID 1054 — Guest Network Service state changed.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational
Level
Informational

Description

Guest Network Service state changed. Id: 'GnsId', State: 'GnsState'.

Message #

Guest Network Service state changed. Id: '%1', State: '%2'

Fields #

NameDescription
GnsId GUID
GnsState UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Host-Network-Service",
    "guid": "0C885E0D-6EB6-476C-A048-2457EED3A5C1",
    "event_source_name": "",
    "event_id": 1054,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2026-03-11T06:32:02.416768+00:00",
    "event_record_id": 7,
    "correlation": {
      "ActivityID": "95388E16-C0CB-4191-9FDE-E7B11BC8D046"
    },
    "execution": {
      "process_id": 2820,
      "thread_id": 2384
    },
    "channel": "Microsoft-Windows-Host-Network-Service-Operational",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "GnsId": "29A7892D-8743-4A3F-85E3-06FE9D7977B4",
    "GnsState": 3
  },
  "message": ""
}

Event ID 1055 — RPC request received.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational
Level
Informational

Description

RPC request received. Type: 'Data_0', Entity: 'Request', Id: 'Entity', Access Level: 'RpcAccessLevel', Data: 'Id'.

Message #

RPC request received. Type: '%1', Entity: '%2', Id: '%3', Access Level: '%5', Data: '%4'

Fields #

NameDescription
Data_0
Request UnicodeString
Entity UnicodeString
Id GUID
RpcAccessLevel UInt32
Data UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Host-Network-Service",
    "guid": "0C885E0D-6EB6-476C-A048-2457EED3A5C1",
    "event_source_name": "",
    "event_id": 1055,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 4611686018427387904,
    "time_created": "2026-03-11T06:32:02.422796+00:00",
    "event_record_id": 10,
    "correlation": {
      "ActivityID": "76236D51-D0B4-40EE-96C0-426CDBEB2766"
    },
    "execution": {
      "process_id": 2820,
      "thread_id": 10060
    },
    "channel": "Microsoft-Windows-Host-Network-Service-Operational",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Data_0": "{\"ID\":\"ad2366c4-0be2-4636-8124-f3bddfd27e15\",\"Name\":\"Ethernet\",\"Version\":64424509440,\"Health\":{\"Extra\":{\"Resources\":{\"AdditionalParams\":{},\"AllocationOrder\":1,\"Allocators\":[{\"AdditionalParams\":{},\"AllocationOrder\":0,\"Connected\":false,\"EndpointId\":\"AD2366C4-0BE2-4636-8124-F3BDDFD27E15\",\"EndpointPortGuid\":\"AD2366C4-0BE2-4636-8124-F3BDDFD27E15\",\"Flags\":0,\"Health\":{\"LastErrorCode\":0,\"LastUpdateTime\":134176843224049781},\"ID\":\"14C2D8AC-D409-41E0-873B-AA38FB908377\",\"IsPolicy\":false,\"IsolationId\":0,\"MacAddress\":\"00-15-5D-CF-7E-0C\",\"ManagementPort\":false,\"NetworkId\":\"B95D0C5E-57D4-412B-B571-18A81A16E005\",\"NicId\":\"29A7892D-8743-4A3F-85E3-06FE9D7977B4--AD2366C4-0BE2-4636-8124-F3BDDFD27E15\",\"PortFriendlyNamePrefix\":\"Endpoint Port\",\"PreferredPortFriendlyName\":\"AD2366C4-0BE2-4636-8124-F3BDDFD27E15\",\"State\":3,\"SwitchId\":\"B95D0C5E-57D4-412B-B571-18A81A16E005\",\"Tag\":\"VM Port\",\"VmPort\":true,\"nonPersistentPort\":true}],\"CompartmentOperationTime\":0,\"Flags\":0,\"Health\":{\"LastErrorCode\":0,\"LastUpdateTime\":134176843223894715},\"ID\":\"958DB0CF-E213-4033-99A7-14D3ED54D19C\",\"PortOperationTime\":0,\"State\":1,\"SwitchOperationTime\":0,\"VfpOperationTime\":0,\"parentId\":\"05D7D175-0BA4-482B-A21D-3968B8A854EC\"},\"SharedContainers\":[],\"VirtualMachine\":\"29a7892d-8743-4a3f-85e3-06fe9d7977b4\"}},\"SchemaVersion\":{\"Major\":2,\"Minor\":0},\"HostComputeNetwork\":\"b95d0c5e-57d4-412b-b571-18a81a16e005\",\"IpConfigurations\":[{\"IpAddress\":\"172.18.253.78\",\"PrefixLength\":20,\"IpSubnetId\":\"ad36f57c-b3cd-40da-bbd8-3fb22e0dbc19\"}],\"Dns\":{\"ServerList\":[\"172.18.240.1\"]},\"Routes\":[{\"NextHop\":\"172.18.240.1\",\"DestinationPrefix\":\"0.0.0.0/0\"}],\"MacAddress\":\"00-15-5D-CF-7E-0C\"}",
    "Request": "Query",
    "Entity": "Endpoint",
    "Id": "AD2366C4-0BE2-4636-8124-F3BDDFD27E15",
    "RpcAccessLevel": 1
  },
  "message": ""
}

Event ID 1056 — EventString :- Endpoint id = 'EndpointId'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Message #

%1 :- 
 Endpoint id = '%2'.
  Network id = '%3'.
  Policy type = '%4'.
  Result code = '%5'.

Fields #

NameDescription
EventString UnicodeString
EndpointId GUID
NetworkId GUID
PolicyType UInt32
Result HexInt32

Event ID 1056 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Fields #

NameDescription
EventString UnicodeString
EndpointId GUID
NetworkId GUID
PolicyType UInt32
Result HexInt32

Event ID 1057 — EventString :- Endpoint id = 'EndpointId'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin
Level
Informational

Message #

%1 :- 
 Endpoint id = '%2'.
  Network id = '%3'.
  Policy type = '%4'.
  Result code = '%5'.

Fields #

NameDescription
EventString UnicodeString
EndpointId GUID
NetworkId GUID
PolicyType UInt32
Result HexInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Host-Network-Service",
    "guid": "0C885E0D-6EB6-476C-A048-2457EED3A5C1",
    "event_source_name": "",
    "event_id": 1057,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-03-11T06:32:02.482204+00:00",
    "event_record_id": 7,
    "correlation": {
      "ActivityID": "95388E16-C0CB-4191-9FDE-E7B11BC8D046"
    },
    "execution": {
      "process_id": 2820,
      "thread_id": 10064
    },
    "channel": "Microsoft-Windows-Host-Network-Service-Admin",
    "computer": "LAB-WIN11",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "EventString": "HNS-Policy-Apply",
    "EndpointId": "AD2366C4-0BE2-4636-8124-F3BDDFD27E15",
    "NetworkId": "B95D0C5E-57D4-412B-B571-18A81A16E005",
    "PolicyType": 3,
    "Result": "0x0"
  },
  "message": ""
}

Event ID 1057 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Fields #

NameDescription
EventString UnicodeString
EndpointId GUID
NetworkId GUID
PolicyType UInt32
Result HexInt32

Event ID 1058 — HNS failed to configure IOV offload on vmswitch port with error 'Parameter0', switch id = 'Parameter1', port id = 'Parameter2'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to configure IOV offload on vmswitch port with error 'Parameter0', switch id = 'Parameter1', port id = 'Parameter2'.

Message #

HNS failed to configure IOV offload on vmswitch port with error '%1', switch id = '%2', port id = '%3'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1058 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to configure IOV offload on vmswitch port with error 'Parameter0', switch id = 'Parameter1', port id = 'Parameter2'.

Fields #

NameDescription
Parameter0 HexInt32
Parameter1 UnicodeString
Parameter2 UnicodeString

Event ID 1060 — Action taken to remove orphaned component: 'Action' 'Name' ('Detail'), result='Result'.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

Action taken to remove orphaned component: 'Action' 'Name' ('Detail'), result='Result'.

Message #

Action taken to remove orphaned component: '%1' '%2' ('%3'), result='%4'

Fields #

NameDescription
Action UnicodeString
Name UnicodeString
Detail UnicodeString
Result HexInt32

Event ID 1060 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

Action taken to remove orphaned component: 'Action' 'Name' ('Detail'), result='Result'.

Fields #

NameDescription
Action UnicodeString
Name UnicodeString
Detail UnicodeString
Result HexInt32

Event ID 1062 — HNS failed to start a service or load a kernel driver.

Provider
Microsoft-Windows-Host-Network-Service
Channel
Microsoft-Windows-Host-Network-Service-Admin

Description

HNS failed to start a service or load a kernel driver. Name = 'ServiceOrDriverName' HResult = 'HResult'.

Message #

HNS failed to start a service or load a kernel driver. Name = '%2' HResult = '%1'.

Fields #

NameDescription
HResult HexInt32
ServiceOrDriverName UnicodeString

Event ID 1062 —

Provider
Microsoft-Windows-Host-Network-Service
Channel
Operational

Description

HNS failed to start a service or load a kernel driver. Name = 'ServiceOrDriverName' HResult = 'HResult'.

Fields #

NameDescription
HResult HexInt32
ServiceOrDriverName UnicodeString