Microsoft-Windows-HttpService

132 events across 3 channels

Event ID	Title	Channel
1	Request received (request ID %1) on connection (connection ID %2) from remote …	Trace
2	Parsed request (request pointer %1, method %2) with URI %3.	Trace
3	Delivered request to server application (request pointer %1, request ID %2, site …	Trace
4	Server application passed response.	Trace
5	Server application passed the last response (corresponding to request ID %1).	Trace
6	Server application passed entity body for request ID %1 (connection ID %2).	Trace
7	Server application passed the last entity body for request ID %1.	Trace
8	Server application passed response.	Trace
9	Server application passed the last response (corresponding to request ID %1).	Trace
10	Response ready for send (corresponding to request ID %1) with status code %2.	Trace
11	Cached the response (corresponding to request ID %1) with status code %2.	Trace
12	Queued last response (corresponding to request ID %1) for sending.	Trace
13	Response sent (corresponding to request ID %1) with status code %2.	Trace
14	Error occurred while sending the last response (corresponding to request ID %1) …	Trace
15	Error %3 occurred while sending (corresponding to request ID %1).	Trace
16	Response (request pointer %1, site ID %2, number of bytes %3) queued for sending …	Trace
17	Response (request pointer %1, site ID %2, number of bytes %3) queued for sending …	Trace
18	Attempted to reserve URL.	Trace
19	Successfully read the IP listen list for IP address %1.	Trace
20	SSL credentials for IP address and port %3 successfully created.	Trace
21	New connection created (local IP address %3 and remote address %5).	Trace
22	Connection ID (%2) assigned to connection and request (request ID %1) will be …	Trace
23	Client closed the connection (connection pointer %1).	Trace
24	Connection (connection pointer %1) cleanup started due to either the sending of …	Trace
25	Successfully added entry (URI %1) to cache.	Trace
26	Failed to add an entry (URI %1) to the cache.	Trace
27	Flushed entry (URI %1) from the cache.	Trace
28	Attempted to set URL group property.	Trace
29	Attempted to set server session property.	Trace
30	Attempted to set request queue property.	Trace
31	Attempted to add URL to URL group.	Trace
32	Removed URL from URL group.	Trace
33	Removed all URLs from URL group %1.	Trace
34	Initiating SSL connection.	Trace
35	Initiating SSL handshake.	Trace
36	SSL handshake completed with status.	Trace
37	Server application is attempting to receive the SSL client certificate, which …	Trace
38	Attempt by server application to receive client certificate failed with status.	Trace
39	Raw SSL data is available for processing.	Trace
40	Decrypted SSL data is available for processing.	Trace
41	Passed plaintext data for encryption.	Trace
43	Attempt (on connection ID %1) to authenticate client completed.	Trace
44	Attempted to add entry to the %2 authentication cache.	Trace
45	Entry successfully removed from the authentication cache.	Trace
46	Successfully associated QoS flow with connection (connection ID %1).	Trace
47	Failed to configure the %2 logging (directory %4), Status: %1.	Trace
48	Successfully configured %2 logging (directory %5).	Trace
49	Failed to create %2 log file %5.	Trace
50	Successfully created new %2 log file %5.	Trace
51	Entry has been written to %3 log file.	Trace
52	Parsing of request (request ID %2) failed due to reason: %3.	Trace
53	HTTP timer %3 expired.	Trace
56	Failed to acquire handle for SSL credentials.	Trace
57	SSL connection will be disconnected as initiated by the client.	Trace
58	SSL connection will be disconnected as initiated by the server application.	Trace
59	Attempt to decrypt SSL data failed.	Trace
60	Query for SSL connection parameters failed.	Trace
61	Cannot find SSL endpoint for inbound connection for local IP address and port …	Trace
62	Attempt to perform SSL handshake failed.	Trace
63	Attempt to encrypt SSL data failed.	Trace
64	Request (request ID %1) rejected due to reason: %2.	Trace
65	Server application canceled the processing of its request (request ID %1).	Trace
66	Http.	Trace
67	Hot-add information: Current UxNumberOfProcessors: %1, comment: %2.	Trace
68	Initialized QoS flow: FlowHandle %1, bandwidth %2, peak bandwidth %3, burst size …	Trace
69	Initialized QoS flow: FlowHandle %1, bandwidth %2, peak bandwidth %3, burst size …	Trace
70	QoS flow initialization failed: bandwidth %1, peak bandwidth %2, burst size %3, …	Trace
71	Setting flow: Connection %1, FlowHandle %2.	Trace
72	Assign to Configuration QoS Flow: FlowHandle %1.	Trace
73	[re]Setting QoS Flow failed: Connection %1, FlowHandle %2, status %3.	Trace
74	Response range processing done.	Trace
75	Begin building slices.	Trace
76	Send cached slices.	Trace
77	Cached slices match content.	Trace
78	Merge slices to cache.	Trace
79	Sending range from flat cache entry.	Trace
80	Channel bind ASC parameters: connection %1, buffers %2, flags %3.	Trace
81	Service bind check done.	Trace
82	Captured channel bind config.	Trace
83	Channel bind response config overwrites %1.	Trace
84	Policy-Based QoS: Connection %1, FlowHandle %2.	Trace
85	Thread pool extension.	Trace
86	Thread ready.	Trace
87	Thread pool trim.	Trace
88	Thread gone.	Trace
89	SNI parsed for connection: %1 with status: %2.	Trace
90	Request %1 has initated opaque mode.	Trace
91	Endpoint auto-generated for %2.	Trace
92	Deleted auto-generated endpoint for %2.	Trace
93	Inbound connection for IP: %3, SNI: %4.	Trace
94	SSL connection with local IP address and port %2 rejected due to configuration …	Trace
95	Parsing of response (response ID %2) failed due to reason: %3.	Trace
96	SSL handshake failed.	System
97	HTTP error response sent.	System
98	SSL renegotiate timed out.	System
99	HTTP 11 Required.	System
100	Version: %1 Counts: %2.	System
101	Version: %1 Counts: %2.	System
105	QUIC Connection.	Trace
106	QUIC Connection Callback.	Trace
107	QUIC Stream.	Trace
108	QUIC Stream Callback.	Trace
109	QUIC Registration Failed.	System
110	Correlation ID for request %1: %2.	Trace
111	Create URL group %1.	System
112	Attempted to reserve URL %1.	System
113	Attempted to add URL to URL group.	System
114	Removed URL from URL group.	System
115	Removed all URLs from URL group %1.	System
116	Attempted to set URL group %1 property %2.	Trace
117	Delete URL group %1.	System
118	Status %1.	System
119	SSL Certificate Settings deleted for endpoint.	System
120	SSL Certificate Settings created by an admin process for endpoint.	System
121	SSL Certificate Settings updated by an admin process for endpoint : %1, Extended …	System
122	Set the IP address to the listen only list %1.	System
123	QUIC certificate load failed with status %1 and was ignored due to disabled TLS …	System
124	Request (request ID %1) rejected due to request queue overflow.	Trace
125	Connection %1, Connection Id %2: Stream Created, StreamId %3.	Trace
126	Connection %1, Connection Id %2: Stream Aborted, StreamId %3, HRESULT error %4, …	Trace
127	Connection %1, Connection Id %2: Send StreamId %3, Length %4.	Trace
128	Connection %1, Connection Id %2: Data Indincation, StreamId %3, BytesIndicated …	Trace
129	Connection %1, Connection Id %2: Header Indincation, StreamId %3, Headers …	Trace
130	Connection %1, Connection Id %2: Go Away, StreamId %3, ErrorCode %4, FaultCode …	Trace
131	Http2 fault.	Trace
132	Connection %1, Connection Id %2: Create.	Trace
133	Connection %1, Connection Id %2: Detach.	Trace
134		Operational
135		Operational
136		Operational
137		Operational
137	Query for SSL connection cipher info failed.	Trace

Event ID 1 — Request received (request ID %1) on connection (connection ID %2) from remote address %4.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Request received (request ID %1) on connection (connection ID %2) from remote address %4.

Fields

Name	Description
`RequestId`	—
`ConnectionId`	—
`RemoteAddrLength`	—
`RemoteAddr`	—

Event ID 2 — Parsed request (request pointer %1, method %2) with URI %3.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Parsed request (request pointer %1, method %2) with URI %3.

Fields

Name	Description
`RequestObj`	—
`HttpVerb`	—
`Url`	—

Event ID 3 — Delivered request to server application (request pointer %1, request ID %2, site ID %3) from request queue %4 for URI %5 with status %6.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Delivered request to server application (request pointer %1, request ID %2, site ID %3) from request queue %4 for URI %5 with status %6.

Fields

Name	Description
`RequestObj`	—
`RequestId`	—
`SiteId`	—
`RequestQueueName`	—
`Url`	—
`Status`	—

Event ID 4 — Server application passed response.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Server application passed response (request ID %1, connection ID %2, method %4, header length %5, number of entity chunks %6, cache policy %7) with status code %3.

Fields

Name	Description
`RequestId`	—
`ConnectionId`	—
`StatusCode`	—
`Verb`	—
`HeaderLength`	—
`EntityChunkCount`	—
`CachePolicy`	—

Event ID 5 — Server application passed the last response (corresponding to request ID %1).

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Server application passed the last response (corresponding to request ID %1).

Fields

Name	Description
`RequestId`	—

Event ID 6 — Server application passed entity body for request ID %1 (connection ID %2).

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Server application passed entity body for request ID %1 (connection ID %2).

Fields

Name	Description
`RequestId`	—
`ConnectionId`	—

Event ID 7 — Server application passed the last entity body for request ID %1.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Server application passed the last entity body for request ID %1.

Fields

Name	Description
`RequestId`	—

Event ID 8 — Server application passed response.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Server application passed response (request ID %1, connection ID %2, method %4, header length %5, number of entity chunks %6, cache policy %7) with status code %3.

Fields

Name	Description
`RequestId`	—
`ConnectionId`	—
`StatusCode`	—
`Verb`	—
`HeaderLength`	—
`EntityChunkCount`	—
`CachePolicy`	—

Event ID 9 — Server application passed the last response (corresponding to request ID %1).

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Server application passed the last response (corresponding to request ID %1).

Fields

Name	Description
`RequestId`	—

Event ID 10 — Response ready for send (corresponding to request ID %1) with status code %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Response ready for send (corresponding to request ID %1) with status code %2.

Fields

Name	Description
`RequestId`	—
`HttpStatus`	—

Event ID 11 — Cached the response (corresponding to request ID %1) with status code %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Cached the response (corresponding to request ID %1) with status code %2. Response to be sent.

Fields

Name	Description
`RequestId`	—
`HttpStatus`	—

Event ID 12 — Queued last response (corresponding to request ID %1) for sending.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Queued last response (corresponding to request ID %1) for sending. Status code is %2.

Fields

Name	Description
`RequestId`	—
`HttpStatus`	—

Event ID 13 — Response sent (corresponding to request ID %1) with status code %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Response sent (corresponding to request ID %1) with status code %2. If disconnect is required, a TCP FIN has been sent.

Fields

Name	Description
`RequestId`	—
`HttpStatus`	—

Event ID 14 — Error occurred while sending the last response (corresponding to request ID %1) with status code %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Error occurred while sending the last response (corresponding to request ID %1) with status code %2. A TCP Reset has been sent.

Fields

Name	Description
`RequestId`	—
`HttpStatus`	—

Event ID 15 — Error %3 occurred while sending (corresponding to request ID %1).

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Error %3 occurred while sending (corresponding to request ID %1). A TCP Reset will be sent.

Fields

Name	Description
`RequestId`	—
`Reason`	—
`Status`	—

Event ID 16 — Response (request pointer %1, site ID %2, number of bytes %3) queued for sending from the cache.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Response (request pointer %1, site ID %2, number of bytes %3) queued for sending from the cache.

Fields

Name	Description
`RequestObj`	—
`SiteId`	—
`BytesSent`	—
`RequestId`	—
`Encoding`	—

Event ID 17 — Response (request pointer %1, site ID %2, number of bytes %3) queued for sending with status code 304 (cache not modified).

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Response (request pointer %1, site ID %2, number of bytes %3) queued for sending with status code 304 (cache not modified).

Fields

Name	Description
`RequestObj`	—
`SiteId`	—
`BytesSent`	—
`RequestId`	—
`Encoding`	—

Event ID 18 — Attempted to reserve URL.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempted to reserve URL (%1). Status %2.

Fields

Name	Description
`Url`	—
`ReserveStatus`	—

Event ID 19 — Successfully read the IP listen list for IP address %1.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Successfully read the IP listen list for IP address %1.

Fields

Name	Description
`IpAddrLength`	—
`IpAddress`	—

Event ID 20 — SSL credentials for IP address and port %3 successfully created.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

SSL credentials for IP address and port %3 successfully created.

Fields

Name	Description
`EndpointConfigObj`	—
`Endpoint`	—
`CertHashLength`	—
`CertHash`	—
`CertStoreName`	—
`CertCheckMode`	—
`RevokeFreshnessTime`	—
`RevokeRetrievalTime`	—
`Flags`	—
`CtlId`	—
`CtlStoreName`	—
`CertificateLoadTime(ms)`	—
`CertificateLoadTimems`	—

Event ID 21 — New connection created (local IP address %3 and remote address %5).

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

New connection created (local IP address %3 and remote address %5).

Fields

Name	Description
`ConnectionObj`	—
`LocalAddrLength`	—
`LocalAddr`	—
`RemoteAddrLength`	—
`RemoteAddr`	—

Event ID 22 — Connection ID (%2) assigned to connection and request (request ID %1) will be parsed.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Connection ID (%2) assigned to connection and request (request ID %1) will be parsed.

Fields

Name	Description
`RequestId`	—
`ConnectionId`	—
`ConnectionObj`	—

Event ID 23 — Client closed the connection (connection pointer %1).

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Client closed the connection (connection pointer %1). Status of whether closed by TCP Reset: %2.

Fields

Name	Description
`ConnectionObj`	—
`Abortive`	—

Event ID 24 — Connection (connection pointer %1) cleanup started due to either the sending of a TCP Reset, receiving of a TCP Reset, or after the mutual exchange...

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Connection (connection pointer %1) cleanup started due to either the sending of a TCP Reset, receiving of a TCP Reset, or after the mutual exchange of TCP Fins.

Fields

Name	Description
`ConnectionObj`	—

Event ID 25 — Successfully added entry (URI %1) to cache.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Successfully added entry (URI %1) to cache.

Fields

Name	Description
`Uri`	—
`StatusCode`	—
`Verb`	—
`HeaderLength`	—
`ContentLength`	—
`ExpirationTime`	—
`Encoding`	—

Event ID 26 — Failed to add an entry (URI %1) to the cache.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Failed to add an entry (URI %1) to the cache. Status: %2.

Fields

Name	Description
`UrlBuffer`	—
`ErrorStatus`	—
`Encoding`	—

Event ID 27 — Flushed entry (URI %1) from the cache.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Flushed entry (URI %1) from the cache.

Fields

Name	Description
`Uri`	—
`StatusCode`	—
`Verb`	—
`HeaderLength`	—
`ContentLength`	—
`ExpirationTime`	—

Event ID 28 — Attempted to set URL group property.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempted to set URL group property: %1. Status: %2.

Fields

Name	Description
`Property`	—
`Status`	—

Event ID 29 — Attempted to set server session property.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempted to set server session property: %1. Status: %2.

Fields

Name	Description
`Property`	—
`Status`	—

Event ID 30 — Attempted to set request queue property.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempted to set request queue property: %1. Status: %2.

Fields

Name	Description
`Property`	—
`Status`	—

Event ID 31 — Attempted to add URL to URL group.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempted to add URL (%2) to URL group (%1). Status: %3.

Fields

Name	Description
`UrlGroupId`	—
`Url`	—
`Status`	—

Event ID 32 — Removed URL from URL group.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Removed URL (%2) from URL group (%1).

Fields

Name	Description
`UrlGroupId`	—
`Url`	—

Event ID 33 — Removed all URLs from URL group %1.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Removed all URLs from URL group %1.

Fields

Name	Description
`UrlGroupId`	—

Event ID 34 — Initiating SSL connection.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Initiating SSL connection.

Fields

Name	Description
`ConnectionObj`	—

Event ID 35 — Initiating SSL handshake.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Initiating SSL handshake.

Fields

Name	Description
`ConnectionObj`	—

Event ID 36 — SSL handshake completed with status.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

SSL handshake completed with status: %1.

Fields

Name	Description
`Status`	—
`ConnectionObj`	—

Event ID 37 — Server application is attempting to receive the SSL client certificate, which will be provided if available.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Server application is attempting to receive the SSL client certificate, which will be provided if available. If the client certificate is not available, a renegotiation will be initiated.

Fields

Name	Description
`ConnectionObj`	—

Event ID 38 — Attempt by server application to receive client certificate failed with status.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempt by server application to receive client certificate failed with status: %1.

Fields

Name	Description
`Status`	—
`ConnectionObj`	—

Event ID 39 — Raw SSL data is available for processing.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Raw SSL data is available for processing.

Fields

Name	Description
`DataLength`	—
`ConnectionObj`	—

Event ID 40 — Decrypted SSL data is available for processing.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Decrypted SSL data is available for processing.

Fields

Name	Description
`DataLength`	—
`ConnectionObj`	—

Event ID 41 — Passed plaintext data for encryption.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Passed plaintext data for encryption.

Fields

Name	Description
`DataLength`	—
`ConnectionObj`	—

Event ID 43 — Attempt (on connection ID %1) to authenticate client completed.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempt (on connection ID %1) to authenticate client completed. Authentication type %2. Security status: %3.

Fields

Name	Description
`ConnectionId`	—
`AuthType`	—
`SecStatus`	—
`AuthStatus`	—
`ContextAttributes`	—

Event ID 44 — Attempted to add entry to the %2 authentication cache.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempted to add entry to the %2 authentication cache. Status: %4.

Fields

Name	Description
`ConnectionId`	—
`AuthCacheType`	—
`AccessTokenOrHandle`	—
`Status`	—

Event ID 45 — Entry successfully removed from the authentication cache.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Entry successfully removed from the authentication cache.

Fields

Name	Description
`AccessTokenOrHandle`	—
`Status`	—

Event ID 46 — Successfully associated QoS flow with connection (connection ID %1).

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Successfully associated QoS flow with connection (connection ID %1). Bandwidth throttled to: %2 Bytes per second.

Fields

Name	Description
`ConnectionId`	—
`Bandwidth`	—
`Status`	—

Event ID 47 — Failed to configure the %2 logging (directory %4), Status: %1.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Failed to configure the %2 logging (directory %4), Status: %1.

Fields

Name	Description
`Status`	—
`Type`	—
`Group`	—
`Directory`	—
`Software`	—
`SiteId`	—

Event ID 48 — Successfully configured %2 logging (directory %5).

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Successfully configured %2 logging (directory %5).

Fields

Name	Description
`Present`	—
`Type`	—
`Group`	—
`Format`	—
`Directory`	—
`Software`	—
`SiteId`	—

Event ID 49 — Failed to create %2 log file %5.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Failed to create %2 log file %5. Status: %1.

Fields

Name	Description
`Status`	—
`Type`	—
`Group`	—
`Format`	—
`Filename`	—
`SiteId`	—

Event ID 50 — Successfully created new %2 log file %5.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Successfully created new %2 log file %5.

Fields

Name	Description
`Handle`	—
`Type`	—
`Group`	—
`Format`	—
`Filename`	—
`SiteId`	—

Event ID 51 — Entry has been written to %3 log file.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Entry has been written to %3 log file.

Fields

Name	Description
`Status`	—
`Handle`	—
`Type`	—
`Group`	—
`Format`	—
`ResType`	—
`SiteId`	—

Event ID 52 — Parsing of request (request ID %2) failed due to reason: %3.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Parsing of request (request ID %2) failed due to reason: %3. Request may not be compliant with HTTP/1.1.

Fields

Name	Description
`Status`	—
`RequestId`	—
`Reason`	—
`ErrorCode`	—
`HintLength`	—
`HintData`	—

Event ID 53 — HTTP timer %3 expired.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

HTTP timer %3 expired. The connection will be reset.

Fields

Name	Description
`ConnectionId`	—
`ConnectionObj`	—
`Timer`	—

Event ID 56 — Failed to acquire handle for SSL credentials.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Failed to acquire handle for SSL credentials. Failure will be event logged. Security status: %2.

Fields

Name	Description
`EndpointConfigObj`	—
`SecStatus`	—
`Detail`	—

Event ID 57 — SSL connection will be disconnected as initiated by the client.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

SSL connection will be disconnected as initiated by the client.

Fields

Name	Description
`ConnectionObj`	—

Event ID 58 — SSL connection will be disconnected as initiated by the server application.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

SSL connection will be disconnected as initiated by the server application. Status: %2.

Fields

Name	Description
`ConnectionObj`	—
`Status`	—

Event ID 59 — Attempt to decrypt SSL data failed.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempt to decrypt SSL data failed. Security status: %2.

Fields

Name	Description
`ConnectionObj`	—
`SecStatus`	—

Event ID 60 — Query for SSL connection parameters failed.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Query for SSL connection parameters failed. Security status: %2. Connection will be reset.

Fields

Name	Description
`ConnectionObj`	—
`SecStatus`	—
`Detail`	—

Event ID 61 — Cannot find SSL endpoint for inbound connection for local IP address and port %3.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Cannot find SSL endpoint for inbound connection for local IP address and port %3.

Fields

Name	Description
`ConnectionObj`	—
`AddressLength`	—
`Address`	—

Event ID 62 — Attempt to perform SSL handshake failed.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempt to perform SSL handshake failed. Security status: %2.

Fields

Name	Description
`ConnectionObj`	—
`SecStatus`	—

Event ID 63 — Attempt to encrypt SSL data failed.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempt to encrypt SSL data failed. Security status: %2.

Fields

Name	Description
`ConnectionObj`	—
`SecStatus`	—

Event ID 64 — Request (request ID %1) rejected due to reason: %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Request (request ID %1) rejected due to reason: %2.

Fields

Name	Description
`RequestId`	—
`Reason`	—
`RequestQueueName`	—

Event ID 65 — Server application canceled the processing of its request (request ID %1).

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Server application canceled the processing of its request (request ID %1).

Fields

Name	Description
`RequestId`	—
`Reason`	—
`RequestQueueName`	—

Event ID 66 — Http.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Http.sys failed to process CPU hot-add. Processor number: %1, reason: %2, status: %3.

Fields

Name	Description
`NewProcNumber`	—
`ReasonString`	—
`Status`	—

Event ID 67 — Hot-add information: Current UxNumberOfProcessors: %1, comment: %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Hot-add information: Current UxNumberOfProcessors: %1, comment: %2.

Fields

Name	Description
`Hotadd_information_Current_UxNumberOfProcessors`	Hot-add information: Current UxNumberOfProcessors.
`comment`	—
`NewProcNumber`	—
`Comment`	—

Event ID 68 — Initialized QoS flow: FlowHandle %1, bandwidth %2, peak bandwidth %3, burst size %4.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Initialized QoS flow: FlowHandle %1, bandwidth %2, peak bandwidth %3, burst size %4

Fields

Name	Description
`FlowHandle`	—
`Bandwidth`	—
`PeakBandwidth`	—
`BurstSize`	—

Event ID 69 — Initialized QoS flow: FlowHandle %1, bandwidth %2, peak bandwidth %3, burst size %4.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Initialized QoS flow: FlowHandle %1, bandwidth %2, peak bandwidth %3, burst size %4

Fields

Name	Description
`FlowHandle`	—
`Bandwidth`	—
`PeakBandwidth`	—
`BurstSize`	—

Event ID 70 — QoS flow initialization failed: bandwidth %1, peak bandwidth %2, burst size %3, status %4.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

QoS flow initialization failed: bandwidth %1, peak bandwidth %2, burst size %3, status %4

Fields

Name	Description
`Bandwidth`	—
`PeakBandwidth`	—
`BurstSize`	—
`Status`	—

Event ID 71 — Setting flow: Connection %1, FlowHandle %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Setting flow: Connection %1, FlowHandle %2

Fields

Name	Description
`Connection`	—
`FlowHandle`	—

Event ID 72 — Assign to Configuration QoS Flow: FlowHandle %1.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Assign to Configuration QoS Flow: FlowHandle %1

Fields

Name	Description
`FlowHandle`	—

Event ID 73 — [re]Setting QoS Flow failed: Connection %1, FlowHandle %2, status %3.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

[re]Setting QoS Flow failed: Connection %1, FlowHandle %2, status %3

Fields

Name	Description
`Connection`	—
`FlowHandle`	—
`Status`	—

Event ID 74 — Response range processing done.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Response range processing done. Req. %1, response content size %2, ranges %3 (%4-%5, %6-%7,...)

Fields

Name	Description
`RequestId`	—
`ContentBytes`	—
`NumberOfRanges`	—
`Range1Start`	—
`Range1End`	—
`Range2Start`	—
`Range2End`	—

Event ID 75 — Begin building slices.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Begin building slices. Req. %1, slices %2 (%3,%4,...), ranges %5 (%6-%7, %8-%9,...)

Fields

Name	Description
`RequestId`	—
`NumberOfSlices`	—
`SliceIndex1`	—
`SliceIndex2`	—
`NumberOfRanges`	—
`Range1Start`	—
`Range1End`	—
`Range2Start`	—
`Range2End`	—

Event ID 76 — Send cached slices.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Send cached slices. Req. %1, CacheEntry %2, slices %3 (%4,%5,...), ranges %6 (%7-%8, %9-%10,...)

Fields

Name	Description
`RequestId`	—
`CacheEntryPtr`	—
`NumberOfSlices`	—
`SliceIndex1`	—
`SliceIndex2`	—
`NumberOfRanges`	—
`Range1Start`	—
`Range1End`	—
`Range2Start`	—
`Range2End`	—

Event ID 77 — Cached slices match content.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Cached slices match content. Req. %1, CacheEntry %2, slices %3 (%4,%5,...), ranges %6 (%7-%8, %9-%10,...)

Fields

Name	Description
`RequestId`	—
`CacheEntryPtr`	—
`NumberOfSlices`	—
`SliceIndex1`	—
`SliceIndex2`	—
`NumberOfRanges`	—
`Range1Start`	—
`Range1End`	—
`Range2Start`	—
`Range2End`	—

Event ID 78 — Merge slices to cache.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Merge slices to cache. CacheEntry %1, slices to merge %2, slices to cache %3

Fields

Name	Description
`CacheEntryPtr`	—
`NofSlicesToMerge`	—
`NofSlicesInCache`	—

Event ID 79 — Sending range from flat cache entry.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Sending range from flat cache entry. CacheEntry %1, range %2-%3

Fields

Name	Description
`CacheEntryPtr`	—
`Range1Start`	—
`Range1End`	—

Event ID 80 — Channel bind ASC parameters: connection %1, buffers %2, flags %3.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Channel bind ASC parameters: connection %1, buffers %2, flags %3

Fields

Name	Description
`ConnectionId`	—
`NoBindBuffers`	—
`SecFlags`	—

Event ID 81 — Service bind check done.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Service bind check done. Connection %1, Context %2-%3, status %4, target %5

Fields

Name	Description
`ConnectionId`	—
`SecContextL`	—
`SecContextH`	—
`SecStatus`	—
`Target`	—

Event ID 82 — Captured channel bind config.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Captured channel bind config. Hardening %1, flags %2, service count %3

Fields

Name	Description
`Hardening`	—
`Flags`	—
`ServiceNameCount`	—

Event ID 83 — Channel bind response config overwrites %1.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Channel bind response config overwrites %1

Fields

Name	Description
`ReplaceConfigOf`	—

Event ID 84 — Policy-Based QoS: Connection %1, FlowHandle %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Policy-Based QoS: Connection %1, FlowHandle %2

Fields

Name	Description
`Connection`	—
`FlowHandle`	—

Event ID 85 — Thread pool extension.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Thread pool extension. Pool type: %1, active pools: %2.

Fields

Name	Description
`Thread_pool_extension_Pool_type`	Thread pool extension. Pool type.
`active_pools`	—
`PoolType`	—
`ActivePools`	—

Event ID 86 — Thread ready.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Thread ready. Pool type: %1, active pools: %2, thread count: %3

Fields

Name	Description
`Thread_ready_Pool_type`	Thread ready. Pool type.
`active_pools`	—
`thread_count`	—
`PoolType`	—
`ActivePools`	—
`ThreadCount`	—

Event ID 87 — Thread pool trim.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Thread pool trim. Pool type: %1, active pools: %2.

Fields

Name	Description
`Thread_pool_trim_Pool_type`	Thread pool trim. Pool type.
`active_pools`	—
`PoolType`	—
`ActivePools`	—

Event ID 88 — Thread gone.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Thread gone. Pool type: %1, active pools: %2, thread count: %3

Fields

Name	Description
`Thread_gone_Pool_type`	Thread gone. Pool type.
`active_pools`	—
`thread_count`	—
`PoolType`	—
`ActivePools`	—
`ThreadCount`	—

Event ID 89 — SNI parsed for connection: %1 with status: %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

SNI parsed for connection: %1 with status: %2

Fields

Name	Description
`ConnectionObj`	—
`Status`	—
`SniLength`	—
`SniHost`	—
`NormalizedHost`	—

Event ID 90 — Request %1 has initated opaque mode.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Request %1 has initated opaque mode

Fields

Name	Description
`RequestId`	—

Event ID 91 — Endpoint auto-generated for %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Endpoint auto-generated for %2

Fields

Name	Description
`EndpointConfigObj`	—
`EndpointName`	—

Event ID 92 — Deleted auto-generated endpoint for %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Deleted auto-generated endpoint for %2

Fields

Name	Description
`EndpointConfigObj`	—
`EndpointName`	—

Event ID 93 — Inbound connection for IP: %3, SNI: %4.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Inbound connection for IP: %3, SNI: %4. SSL endpoint found: %5

Fields

Name	Description
`EndpointConfigObj`	—
`IpAddrLength`	—
`IpAddress`	—
`SniHostname`	—
`MatchingEndpointName`	—
`AutoGeneratedEndpoint`	—

Event ID 94 — SSL connection with local IP address and port %2 rejected due to configuration policy.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

SSL connection with local IP address and port %2 rejected due to configuration policy.

Fields

Name	Description
`AddressLength`	—
`Address`	—

Event ID 95 — Parsing of response (response ID %2) failed due to reason: %3.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Parsing of response (response ID %2) failed due to reason: %3. Request may not be compliant with HTTP/1.1.

Fields

Name	Description
`Status`	—
`ResponseId`	—
`Reason`	—
`ErrorCode`	—
`HintLength`	—
`HintData`	—

Event ID 96 — SSL handshake failed.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

SSL handshake failed. Local IP: %2, Remote IP: %4, SNI: %5, Thumbprint: %7, Client Initiated Disconnect: %8, Abortive Disconnect: %9, Connection Status: %10

Fields

Name	Description
`SSL_handshake_failed_Local_IP`	—
`Remote_IP`	SSL handshake failed. Local IP.
`SNI`	—
`Thumbprint`	—
`Client_Initiated_Disconnect`	—
`Abortive_Disconnect`	—
`Connection_Status`	—
`LocalAddressLength`	—
`LocalAddress`	—
`RemoteAddressLength`	—
`RemoteAddress`	—
`SniHostname`	—
`ThumbprintLength`	—
`ClientDisconnect`	—
`AbortiveDisconnect`	—
`Status`	—

Event ID 97 — HTTP error response sent.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

HTTP error response sent. Url: %1, Verb: %2, Status Code: %3, Cache Send: %4, Request Queue: %5, PID: %6, TID: %7, Image Name: %8, Working Set(Bytes): %9, Send Status: %10, Thread Count: %11, Reason Phrase: %12, Error Cause: %13, Verbosity: %14

Fields

Name	Description
`HTTP_error_response_sent_Url`	HTTP error response sent. Url.
`Verb`	—
`Status_Code`	—
`Cache_Send`	—
`Request_Queue`	—
`PID`	—
`TID`	—
`Image_Name`	—
`Working_SetBytes`	—
`Send_Status`	—
`Thread_Count`	—
`Reason_Phrase`	—
`Error_Cause`	—
`Verbosity`	—
`Url`	—
`StatusCode`	—
`CacheSend`	—
`RequestQueue`	—
`ProcessId`	—
`ThreadId`	—
`ImageFileName`	—
`WorkingSetSize`	—
`SendStatus`	—
`ThreadCount`	—
`ReasonPhrase`	—
`ErrorCause`	—

Event ID 98 — SSL renegotiate timed out.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

SSL renegotiate timed out. Local IP: %2, Remote IP: %4, SNI: %5, Thumbprint: %7, Connection Buffer Full: %8

Fields

Name	Description
`SSL_renegotiate_timed_out_Local_IP`	—
`Remote_IP`	SSL renegotiate timed out. Local IP.
`SNI`	—
`Thumbprint`	—
`Connection_Buffer_Full`	—
`LocalAddressLength`	—
`LocalAddress`	—
`RemoteAddressLength`	—
`RemoteAddress`	—
`SniHostname`	—
`ThumbprintLength`	—
`ConnectionBufferFull`	—

Event ID 99 — HTTP 11 Required.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

HTTP 11 Required. Verb: %1, Fault Code: %2

Fields

Name	Description
`HTTP_11_Required_Verb`	HTTP 11 Required. Verb.
`Fault_Code`	—
`Verb`	—
`FaultCode`	—

Event ID 100 — Version: %1 Counts: %2.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

Version: %1 Counts: %2

Fields

Name	Description
`Version`	—
`Counts`	—
`CountsLength`	—

Event ID 101 — Version: %1 Counts: %2.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

Version: %1 Counts: %2

Fields

Name	Description
`Version`	—
`Counts`	—
`CountsLength`	—

Event ID 105 — QUIC Connection.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

QUIC Connection. QuicConnectionId: %1, Connection: %2, Local IP: %4, Remote IP: %6, SNI: %8, ErrorCode: %9, Status: %10

Fields

Name	Description
`QUIC_Connection_QuicConnectionId`	QUIC Connection. QuicConnectionId.
`Connection`	—
`Local_IP`	—
`Remote_IP`	—
`SNI`	—
`ErrorCode`	—
`Status`	—
`QuicConnectionId`	—
`LocalAddressLength`	—
`LocalAddress`	—
`RemoteAddressLength`	—
`RemoteAddress`	—
`SniLength`	—
`SniHost`	—
`ErrorLogCode`	—

Event ID 106 — QUIC Connection Callback.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

QUIC Connection Callback. Connection: %1, Event: %2, EventParam: %3

Fields

Name	Description
`QUIC_Connection_Callback_Connection`	QUIC Connection Callback. Connection.
`Event`	—
`EventParam`	—
`Connection`	—

Event ID 107 — QUIC Stream.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

QUIC Stream. QuicStreamId: %1, Connection: %2, Stream: %3

Fields

Name	Description
`QUIC_Stream_QuicStreamId`	QUIC Stream. QuicStreamId.
`Connection`	—
`Stream`	—
`QuicStreamId`	—

Event ID 108 — QUIC Stream Callback.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

QUIC Stream Callback. Stream: %1, Connection: %2, StreamType: %3, Event: %4, EventParam: %5

Fields

Name	Description
`QUIC_Stream_Callback_Stream`	QUIC Stream Callback. Stream.
`Connection`	—
`StreamType`	—
`Event`	—
`EventParam`	—
`Stream`	—

Event ID 109 — QUIC Registration Failed.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

QUIC Registration Failed. Status: %1

Fields

Name	Description
`QUIC_Registration_Failed_Status`	QUIC Registration Failed. Status.
`Status`	—

Event ID 110 — Correlation ID for request %1: %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Correlation ID for request %1: %2

Fields

Name	Description
`RequestId`	—
`CorrelationId`	—

Event ID 111 — Create URL group %1.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

Create URL group %1. Status %2. Process Id %3 Executable path %4, User %5

Fields

Name	Description
`UrlGroupId`	—
`Status`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Event ID 112 — Attempted to reserve URL %1.

Provider: Microsoft-Windows-HttpService
Channel: System
Level: 4
Samples: 1

Message

Attempted to reserve URL %1. Status %2. Process Id %3 Executable path %4, User %5

Fields

Name	Description
`Url`	—
`ReserveStatus`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Example Event

system:
  provider: Microsoft-Windows-HttpService
  guid: DD5EF90A-6398-47A4-AD34-4DCECDEF795F
  event_source_name: ''
  event_id: 112
  version: 0
  level: 4
  task: 3
  opcode: 121
  keywords: 4611686018427387905
  time_created: '2023-11-06T06:25:42.192778+00:00'
  event_record_id: 1703
  correlation: {}
  execution:
    process_id: 4
    thread_id: 228
  channel: System
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-18
event_data:
  Url: http://+:10243/WMPNSSv4/
  ReserveStatus: 0
  ProcessId: 4
  ExecutablePath: ''
  UserSid: S-1-5-18
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 113 — Attempted to add URL to URL group.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

Attempted to add URL (%2) to URL group (%1). Status: %3. Process Id %4 Executable path %5, User %6

Fields

Name	Description
`UrlGroupId`	—
`Url`	—
`Status`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Event ID 114 — Removed URL from URL group.

Provider: Microsoft-Windows-HttpService
Channel: System
Level: 4
Samples: 1

Message

Removed URL (%2) from URL group (%1). Process Id %3 Executable path %4, User %5

Fields

Name	Description
`UrlGroupId`	—
`Url`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Example Event

system:
  provider: Microsoft-Windows-HttpService
  guid: DD5EF90A-6398-47A4-AD34-4DCECDEF795F
  event_source_name: ''
  event_id: 114
  version: 0
  level: 4
  task: 5
  opcode: 123
  keywords: 4611686018427387968
  time_created: '2023-10-25T22:56:15.387118+00:00'
  event_record_id: 1477
  correlation: {}
  execution:
    process_id: 3840
    thread_id: 3904
  channel: System
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-19
event_data:
  UrlGroupId: 18302628886170566657
  Url: http://*:5357/31383106-803d-411b-9763-a28cdc0f0c3f/
  ProcessId: 3840
  ExecutablePath: \Device\HarddiskVolume4\Windows\System32\svchost.exe
  UserSid: S-1-5-19
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 115 — Removed all URLs from URL group %1.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

Removed all URLs from URL group %1. Process Id %2 Executable path %3, User %4

Fields

Name	Description
`UrlGroupId`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Event ID 116 — Attempted to set URL group %1 property %2.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Attempted to set URL group %1 property %2. Status: %3. Process Id %4 Executable path %5, User %6

Fields

Name	Description
`UrlGroupId`	—
`Property`	—
`Status`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Event ID 117 — Delete URL group %1.

Provider: Microsoft-Windows-HttpService
Channel: System
Level: 4
Samples: 1

Message

Delete URL group %1. Status %2. Process Id %3 Executable path %4, User %5

Fields

Name	Description
`UrlGroupId`	—
`Status`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Example Event

system:
  provider: Microsoft-Windows-HttpService
  guid: DD5EF90A-6398-47A4-AD34-4DCECDEF795F
  event_source_name: ''
  event_id: 117
  version: 0
  level: 4
  task: 5
  opcode: 126
  keywords: 4611686018427387968
  time_created: '2023-10-25T22:56:15.387403+00:00'
  event_record_id: 1478
  correlation: {}
  execution:
    process_id: 3840
    thread_id: 3904
  channel: System
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-19
event_data:
  UrlGroupId: 18302628886170566657
  Status: 0
  ProcessId: 3840
  ExecutablePath: \Device\HarddiskVolume4\Windows\System32\svchost.exe
  UserSid: S-1-5-19
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 118 — Status %1.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

Status %1. Process Id %2 Executable path %3, User %4

Fields

Name	Description
`Status`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Event ID 119 — SSL Certificate Settings deleted for endpoint.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

SSL Certificate Settings deleted for endpoint : %1. Status %2. Process Id %3 Executable path %4, User %5

Fields

Name	Description
`Endpoint`	—
`Status`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Event ID 120 — SSL Certificate Settings created by an admin process for endpoint.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

SSL Certificate Settings created by an admin process for endpoint : %1. Status %2. Process Id %3 Executable path %4, User %5

Fields

Name	Description
`Endpoint`	—
`Status`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Event ID 121 — SSL Certificate Settings updated by an admin process for endpoint : %1, Extended Param Type %2.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

SSL Certificate Settings updated by an admin process for endpoint : %1, Extended Param Type %2. Status %3. Process Id %4 Executable path %5, User %6

Fields

Name	Description
`Endpoint`	—
`ExtendedParamType`	—
`Status`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Event ID 122 — Set the IP address to the listen only list %1.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

Set the IP address to the listen only list %1. Status %2. Process Id %3 Executable path %4, User %5

Fields

Name	Description
`IpList`	—
`Status`	—
`ProcessId`	—
`ExecutablePath`	—
`UserSid`	—

Event ID 123 — QUIC certificate load failed with status %1 and was ignored due to disabled TLS 1.

Provider: Microsoft-Windows-HttpService
Channel: System

Message

QUIC certificate load failed with status %1 and was ignored due to disabled TLS 1.3 (status %2).

Fields

Name	Description
`Status`	—
`Tls13Status`	—

Event ID 124 — Request (request ID %1) rejected due to request queue overflow.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Request (request ID %1) rejected due to request queue overflow

Fields

Name	Description
`RequestId`	—
`RequestQueueName`	—
`LastPendingReceiveRequest`	—
`LastSucceededReceiveRequest`	—
`LastFailedReceiveRequest`	—

Event ID 125 — Connection %1, Connection Id %2: Stream Created, StreamId %3.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Connection %1, Connection Id %2: Stream Created, StreamId %3

Fields

Name	Description
`Connection`	—
`ConnectionId`	—
`StreamId`	—

Event ID 126 — Connection %1, Connection Id %2: Stream Aborted, StreamId %3, HRESULT error %4, Reset Code %5.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Connection %1, Connection Id %2: Stream Aborted, StreamId %3, HRESULT error %4, Reset Code %5

Fields

Name	Description
`Connection`	—
`ConnectionId`	—
`StreamId`	—
`Error`	—
`ResetCode`	—

Event ID 127 — Connection %1, Connection Id %2: Send StreamId %3, Length %4.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Connection %1, Connection Id %2: Send StreamId %3, Length %4

Fields

Name	Description
`Connection`	—
`ConnectionId`	—
`StreamId`	—
`Length`	—

Event ID 128 — Connection %1, Connection Id %2: Data Indincation, StreamId %3, BytesIndicated %4, BytesAccepted %5, Status %6.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Connection %1, Connection Id %2: Data Indincation, StreamId %3, BytesIndicated %4, BytesAccepted %5, Status %6

Fields

Name	Description
`Connection`	—
`ConnectionId`	—
`StreamId`	—
`BytesIndicated`	—
`BytesAccepted`	—
`Status`	—

Event ID 129 — Connection %1, Connection Id %2: Header Indincation, StreamId %3, Headers indicated %4, Status %5.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Connection %1, Connection Id %2: Header Indincation, StreamId %3, Headers indicated %4, Status %5

Fields

Name	Description
`Connection`	—
`ConnectionId`	—
`StreamId`	—
`Headers`	—
`Status`	—

Event ID 130 — Connection %1, Connection Id %2: Go Away, StreamId %3, ErrorCode %4, FaultCode %5.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Connection %1, Connection Id %2: Go Away, StreamId %3, ErrorCode %4, FaultCode %5

Fields

Name	Description
`Connection`	—
`ConnectionId`	—
`StreamId`	—
`ErrorCode`	—
`FaultCode`	—

Event ID 131 — Http2 fault.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Http2 fault. Connection %1, Connection Id %2:, StreamId %3, Code %4, Status %5

Fields

Name	Description
`Connection`	—
`ConnectionId`	—
`StreamId`	—
`FaultCode`	—
`Status`	—

Event ID 132 — Connection %1, Connection Id %2: Create.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Connection %1, Connection Id %2: Create

Fields

Name	Description
`Connection`	—
`ConnectionId`	—

Event ID 133 — Connection %1, Connection Id %2: Detach.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Connection %1, Connection Id %2: Detach

Fields

Name	Description
`Connection`	—
`ConnectionId`	—

Event ID 134 —

Provider: Microsoft-Windows-HttpService
Channel: Operational

Fields

Name	Description
`RequestId`	—
`ReceiveStart`	—
`ReceiveHeadersEnd`	—
`ResponseStart`	—
`ResponseEnd`	—
`BufferedSend`	—

Event ID 135 —

Provider: Microsoft-Windows-HttpService
Channel: Operational

Fields

Name	Description
`PerfCounterPeriod`	—

Event ID 136 —

Provider: Microsoft-Windows-HttpService
Channel: Operational

Fields

Name	Description
`RequestId`	—
`StatsType`	—
`StatsLength`	—
`StatsData`	—

Event ID 137 —

Provider: Microsoft-Windows-HttpService
Channel: Operational

Fields

Name	Description
`ConnectionObj`	—
`SecStatus`	—
`Detail`	—

Event ID 137 — Query for SSL connection cipher info failed.

Provider: Microsoft-Windows-HttpService
Channel: Trace

Message

Query for SSL connection cipher info failed. Security status: %2. Connection will be reset.

Fields

Name	Description
`ConnectionObj`	—
`SecStatus`	—
`Detail`	—