Microsoft-Windows-Hyper-V-VID

123 events across 3 channels

Event ID	Title	Channel
1101	Failed to reserve Parameter1 pages: Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
1102	Failed to reserve Parameter1 pages: Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
1103	Failed to allocate Parameter1 pages: Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
1104	Failed to release Parameter1 pages: Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
1105	Failed to withdraw pages from bucket: Parameter1.	Microsoft-Windows-Hyper-V-VID-Analytic
1106	Failed to balloon Parameter1 page ranges: Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
1107	Failed to un-balloon Parameter1 pages: Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
1108	Failed to hot add Parameter1 pages: Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
1109	Failed to hot add undo Parameter1 pages: Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
1110	Failed to create mem block with Parameter1 pages: Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
1111	Failed to create DAX file backed mem block with Parameter1 pages: Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
3000	Created partition with ID Parameter0 and name PartitionId.	Microsoft-Windows-Hyper-V-VID-Analytic
5001	Started reserving Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5002	Finished reserving pages with status = Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5003	Started reserving bucket pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5004	Finished reserving bucket pages with status = Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5005	Started allocating Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5006	Finished allocating pages with status = Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5007	Started depositing pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5008	Finished depositing pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5009	Started releasing Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5010	Finished releasing Parameter1 pages with status = Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5011	Started releasing bucket Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5012	Finished releasing bucket Parameter1 pages with status = Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5013	Started withdrawing pages from bucket.	Microsoft-Windows-Hyper-V-VID-Analytic
5014	Finished withdrawing pages from bucket with status = Parameter1.	Microsoft-Windows-Hyper-V-VID-Analytic
5017	Started depositing pages to bucket from page list.	Microsoft-Windows-Hyper-V-VID-Analytic
5018	Finished depositing pages to bucket from page list.	Microsoft-Windows-Hyper-V-VID-Analytic
5019	Started ballooning Parameter1 page ranges.	Microsoft-Windows-Hyper-V-VID-Analytic
5020	Finished ballooning Parameter1 page ranges with status Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5021	Started de-committing GPAs - Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5022	Finished de-committing GPAs - Parameter1 pages with status Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5023	Started un-ballooning Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5024	Finished un-ballooning Parameter1 pages with status Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5025	Started committing Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5026	Finished committing Parameter1 pages with status Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5029	Started hot adding Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5030	Finished hot adding Parameter1 pages with status Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5031	Started hot add undoing Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5032	Finished hot add undoing Parameter1 pages with status Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5033	Started creating memory block with Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5034	Finished creating memory block with Parameter1 pages with status Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5035	Started un-ballooning Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5036	Finished un-ballooning Parameter1 pages with status Parameter2.	Microsoft-Windows-Hyper-V-VID-Analytic
5037	An uncorrected memory error occurred at physical address PhysicalAddress.	Microsoft-Windows-Hyper-V-VID-Admin
5038	'PhysicalAddress' was reset because an uncorrected memory error occured at …	Microsoft-Windows-Hyper-V-VID-Admin
5039	An uncorrected memory error occurred at physical address Platform_Directed which …	Microsoft-Windows-Hyper-V-VID-Admin
5040	An uncorrected memory error occurred at physical address PhysicalAddress.	Microsoft-Windows-Hyper-V-VID-Admin
5041	One or more corrected memory error occurred at physical address PhysicalAddress.	Microsoft-Windows-Hyper-V-VID-Admin
5042	One or more corrected memory error occurred at physical address …	Microsoft-Windows-Hyper-V-VID-Admin
5043	One or more corrected memory error occurred at physical address …	Microsoft-Windows-Hyper-V-VID-Admin
5044	Failed to retrieve memory from the kernel with error Parameter0 during a fast …	Microsoft-Windows-Hyper-V-VID-Admin
5045	Failed to persist memory with the kernel with error Parameter0 during a fast …	Microsoft-Windows-Hyper-V-VID-Admin
5046		Operational
5047		Operational
5048		Operational
5049		Operational
5050		Operational
5051		Operational
5052		Operational
5053		Operational
5054		Operational
5055		Operational
5056		Operational
5057		Operational
5058		Operational
5059		Operational
5060		Operational
5061		Operational
5062		Operational
5063		Operational
5064		Operational
5065		Operational
5066		Operational
5067		Operational
5068	Started creating DAX file backed memory block with Parameter1 pages.	Microsoft-Windows-Hyper-V-VID-Analytic
5069	Finished creating DAX file backed memory block with Parameter1 pages with status …	Microsoft-Windows-Hyper-V-VID-Analytic
5070		Microsoft-Windows-Hyper-V-VID-Analytic
5071		Microsoft-Windows-Hyper-V-VID-Analytic
5072	One or more uncorrected persistent memory errors (TotalPages pages) occurred.	Microsoft-Windows-Hyper-V-VID-Admin
5073	'PhysicalAddress' was reset because an uncorrected persistent memory error …	Microsoft-Windows-Hyper-V-VID-Admin
5074	'PhysicalAddress' was reset because one or more uncorrected persistent memory …	Microsoft-Windows-Hyper-V-VID-Admin
5075	An uncorrected persistent memory error occurred at physical address …	Microsoft-Windows-Hyper-V-VID-Admin
5076	An uncorrected persistent memory error occurred at physical address …	Microsoft-Windows-Hyper-V-VID-Admin
5077	One or more uncorrected persistent memory errors (Platform_Directed pages) …	Microsoft-Windows-Hyper-V-VID-Admin
5078		Microsoft-Windows-Hyper-V-VID-Analytic
5079		Microsoft-Windows-Hyper-V-VID-Analytic
5080		Microsoft-Windows-Hyper-V-VID-Analytic
5081		Microsoft-Windows-Hyper-V-VID-Analytic
5082		Microsoft-Windows-Hyper-V-VID-Analytic
5083	Memory partition: Both Percentage(Parameter2) and SizeInMB(Parameter1) are …	Microsoft-Windows-Hyper-V-VID-Admin
5084	Memory partition: Both Percentage and SizeInMB are specified on the host.	Microsoft-Windows-Hyper-V-VID-Admin
5085	Memory partition: Both NUMA node settings and host settings are specified.	Microsoft-Windows-Hyper-V-VID-Admin
5086	Memory partition: Primary settings are different than the legacy settings.	Microsoft-Windows-Hyper-V-VID-Admin
5087	Memory partition: Legacy memory reserve percentage setting was used.	Microsoft-Windows-Hyper-V-VID-Admin
5088	Memory partition not created due to 0 partition size.	Microsoft-Windows-Hyper-V-VID-Admin
5089	Memory partition creation failed (Parameter1 MB) with status = Parameter0.	Microsoft-Windows-Hyper-V-VID-Admin
5090	Memory partition host percentage(Parameter0) is invalid.	Microsoft-Windows-Hyper-V-VID-Admin
5091	Memory partition (Parameter0) target could not be read from the registry.	Microsoft-Windows-Hyper-V-VID-Admin
5092	Memory partition (Parameter0) target could not be written to the registry.	Microsoft-Windows-Hyper-V-VID-Admin
5093	A non-zero memory partition (Parameter1) target size was associated with a …	Microsoft-Windows-Hyper-V-VID-Admin
5094	Memory partition (Parameter2) target number of nodes (Parameter0) did not match …	Microsoft-Windows-Hyper-V-VID-Admin
5095		Microsoft-Windows-Hyper-V-VID-Analytic
5096	Memory partition per NUMA node (Parameter0) IO space size (Parameter1) …	Microsoft-Windows-Hyper-V-VID-Admin
5097	Memory partition per NUMA node (Parameter0) IO space size (Parameter1) is bigger …	Microsoft-Windows-Hyper-V-VID-Admin
5098	Memory partition host IO space size (Parameter0) unaligned.	Microsoft-Windows-Hyper-V-VID-Admin
5099	Memory partition host IO space size (Parameter0) is too big for size …	Microsoft-Windows-Hyper-V-VID-Admin
5100	Memory partition per NUMA node (Parameter0) size (Parameter1) unaligned.	Microsoft-Windows-Hyper-V-VID-Admin
5101	Memory partition host size (Parameter0) unaligned.	Microsoft-Windows-Hyper-V-VID-Admin
5102	Memory partition per NUMA node (Parameter0) percentage(Parameter1) is invalid.	Microsoft-Windows-Hyper-V-VID-Admin
5103	Memory partition legacy percentage(Parameter0) is invalid.	Microsoft-Windows-Hyper-V-VID-Admin
5104	Failed to retrieve memory block from the kernel with error Parameter0 during a …	Microsoft-Windows-Hyper-V-VID-Admin
5105	Failed to persist memory block with the kernel with error Parameter0 during a …	Microsoft-Windows-Hyper-V-VID-Admin
5106		Operational
5107		Operational
5108	Hypervisor metadata memory partition has hot added Parameter1 pages to NUMA node …	Microsoft-Windows-Hyper-V-VID-Admin
5109	Partition PartitionGuid VP VpIndex encountered ExceptionInfo with syndrome: …	Microsoft-Windows-Hyper-V-VID-Admin
5110	An uncorrected memory error occurred at physical address Platform_Directed, …	Microsoft-Windows-Hyper-V-VID-Admin
5111	An uncorrected memory error occurred at physical address Platform_Directed, …	Microsoft-Windows-Hyper-V-VID-Admin
5112	A memory error was reported to VID at physical address PhysicalAddress but …	Microsoft-Windows-Hyper-V-VID-Admin
5113	Hypervisor metadata memory partition has been referenced with status:Parameter0 …	Microsoft-Windows-Hyper-V-VID-Admin
5114	Started auto demote IO space on physical NUMA node Parameter0.	Microsoft-Windows-Hyper-V-VID-Analytic
5115	Finished auto demote IO space physical NUMA node Parameter0 with status …	Microsoft-Windows-Hyper-V-VID-Analytic

Event ID 1101 — Failed to reserve Parameter1 pages: Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to reserve Parameter1 pages: Parameter2. (Partition ID Parameter0).

Message #

Failed to reserve %2 pages: %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 1102 — Failed to reserve Parameter1 pages: Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to reserve Parameter1 pages: Parameter2. (Partition ID Parameter0).

Message #

Failed to reserve %2 pages: %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 1103 — Failed to allocate Parameter1 pages: Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to allocate Parameter1 pages: Parameter2. (Partition ID Parameter0).

Message #

Failed to allocate %2 pages: %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 1104 — Failed to release Parameter1 pages: Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to release Parameter1 pages: Parameter2. (Partition ID Parameter0).

Message #

Failed to release %2 pages: %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 1105 — Failed to withdraw pages from bucket: Parameter1.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to withdraw pages from bucket: Parameter1. (Partition ID Parameter0).

Message #

Failed to withdraw pages from bucket: %2. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 1106 — Failed to balloon Parameter1 page ranges: Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to balloon Parameter1 page ranges: Parameter2. (Partition ID Parameter0).

Message #

Failed to balloon %2 page ranges: %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 1107 — Failed to un-balloon Parameter1 pages: Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to un-balloon Parameter1 pages: Parameter2. (Partition ID Parameter0).

Message #

Failed to un-balloon %2 pages: %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 1108 — Failed to hot add Parameter1 pages: Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to hot add Parameter1 pages: Parameter2. (Partition ID Parameter0).

Message #

Failed to hot add %2 pages: %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 1109 — Failed to hot add undo Parameter1 pages: Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to hot add undo Parameter1 pages: Parameter2. (Partition ID Parameter0).

Message #

Failed to hot add undo %2 pages: %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 1110 — Failed to create mem block with Parameter1 pages: Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to create mem block with Parameter1 pages: Parameter2. (Partition ID Parameter0).

Message #

Failed to create mem block with %2 pages: %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 1111 — Failed to create DAX file backed mem block with Parameter1 pages: Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Failed to create DAX file backed mem block with Parameter1 pages: Parameter2. (Partition ID Parameter0).

Message #

Failed to create DAX file backed mem block with %2 pages: %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 3000 — Created partition with ID Parameter0 and name PartitionId.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Description

Created partition with ID Parameter0 and name PartitionId.

Message #

Created partition with ID %2 and name %1.

Fields #

Name	Description
`PartitionId` UnicodeString	—
`Parameter0` Int64	—

Event ID 5001 — Started reserving Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_reservepages
Opcode: Start

Description

Started reserving Parameter1 pages. (Partition ID Parameter0).

Message #

Started reserving %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5002 — Finished reserving pages with status = Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_reservepages
Opcode: Stop

Description

Finished reserving pages with status = Parameter2. Parameter1 pages reserved. Parameter3 HugeLocal, Parameter4 LargeLocal, Parameter5 SmallLocal, Parameter6 HugeRemote, Parameter7 LargeRemote, Parameter8 SmallRemote. (Partition ID Parameter0).

Message #

Finished reserving pages with status = %3. %2 pages reserved. %4 HugeLocal, %5 LargeLocal, %6 SmallLocal, %7 HugeRemote, %8 LargeRemote, %9 SmallRemote. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—
`Parameter3` Int64	—
`Parameter4` Int64	—
`Parameter5` Int64	—
`Parameter6` Int64	—
`Parameter7` Int64	—
`Parameter8` Int64	—

Event ID 5003 — Started reserving bucket pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_reservepages
Opcode: Start

Description

Started reserving bucket pages. Reserving Parameter1 pages. (Partition ID Parameter0).

Message #

Started reserving bucket pages. Reserving %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5004 — Finished reserving bucket pages with status = Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_reservepages
Opcode: Stop

Description

Finished reserving bucket pages with status = Parameter2. Parameter1 pages reserved. (Partition ID Parameter0).

Message #

Finished reserving bucket pages with status = %3. %2 pages reserved. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5005 — Started allocating Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_reservepages
Opcode: Start

Description

Started allocating Parameter1 pages. (Partition ID Parameter0).

Message #

Started allocating %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5006 — Finished allocating pages with status = Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_reservepages
Opcode: Stop

Description

Finished allocating pages with status = Parameter2. Parameter1 pages allocated. (Partition ID Parameter0).

Message #

Finished allocating pages with status = %3. %2 pages allocated. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5007 — Started depositing pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_reservepages
Opcode: Start

Description

Started depositing pages. (Partition ID Parameter0).

Message #

Started depositing pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5008 — Finished depositing pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_reservepages
Opcode: Stop

Description

Finished depositing pages. (Partition ID Parameter0).

Message #

Finished depositing pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5009 — Started releasing Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_releasepages
Opcode: Start

Description

Started releasing Parameter1 pages. (Partition ID Parameter0).

Message #

Started releasing %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5010 — Finished releasing Parameter1 pages with status = Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_releasepages
Opcode: Stop

Description

Finished releasing Parameter1 pages with status = Parameter2. (Partition ID Parameter0).

Message #

Finished releasing %2 pages with status = %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5011 — Started releasing bucket Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_releasepages
Opcode: Start

Description

Started releasing bucket Parameter1 pages. (Partition ID Parameter0).

Message #

Started releasing bucket %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5012 — Finished releasing bucket Parameter1 pages with status = Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_releasepages
Opcode: Stop

Description

Finished releasing bucket Parameter1 pages with status = Parameter2. (Partition ID Parameter0).

Message #

Finished releasing bucket %2 pages with status = %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5013 — Started withdrawing pages from bucket.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Opcode: Start

Description

Started withdrawing pages from bucket. (Partition ID Parameter0).

Message #

Started withdrawing pages from bucket. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5014 — Finished withdrawing pages from bucket with status = Parameter1.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Opcode: Stop

Description

Finished withdrawing pages from bucket with status = Parameter1. (Partition ID Parameter0).

Message #

Finished withdrawing pages from bucket with status = %2. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5017 — Started depositing pages to bucket from page list.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Opcode: Start

Description

Started depositing pages to bucket from page list. (Partition ID Parameter0).

Message #

Started depositing pages to bucket from page list. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5018 — Finished depositing pages to bucket from page list.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Opcode: Stop

Description

Finished depositing pages to bucket from page list. (Partition ID Parameter0).

Message #

Finished depositing pages to bucket from page list. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5019 — Started ballooning Parameter1 page ranges.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_balloonpages
Opcode: Start

Description

Started ballooning Parameter1 page ranges. (Partition ID Parameter0).

Message #

Started ballooning %2 page ranges. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5020 — Finished ballooning Parameter1 page ranges with status Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_balloonpages
Opcode: Stop

Description

Finished ballooning Parameter1 page ranges with status Parameter2. (Partition ID Parameter0).

Message #

Finished ballooning %2 page ranges with status %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5021 — Started de-committing GPAs - Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_balloonpages
Opcode: Start

Description

Started de-committing GPAs - Parameter1 pages. (Partition ID Parameter0).

Message #

Started de-committing GPAs - %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5022 — Finished de-committing GPAs - Parameter1 pages with status Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_balloonpages
Opcode: Stop

Description

Finished de-committing GPAs - Parameter1 pages with status Parameter2. (Partition ID Parameter0).

Message #

Finished de-committing GPAs - %2 pages with status %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5023 — Started un-ballooning Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_unballoonpages
Opcode: Start

Description

Started un-ballooning Parameter1 pages. (Partition ID Parameter0).

Message #

Started un-ballooning %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5024 — Finished un-ballooning Parameter1 pages with status Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_unballoonpages
Opcode: Stop

Description

Finished un-ballooning Parameter1 pages with status Parameter2. (Partition ID Parameter0).

Message #

Finished un-ballooning %2 pages with status %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5025 — Started committing Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Opcode: Start

Description

Started committing Parameter1 pages. (Partition ID Parameter0).

Message #

Started committing %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5026 — Finished committing Parameter1 pages with status Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Opcode: Stop

Description

Finished committing Parameter1 pages with status Parameter2. (Partition ID Parameter0).

Message #

Finished committing %2 pages with status %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5029 — Started hot adding Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_hotadd
Opcode: Start

Description

Started hot adding Parameter1 pages. (Partition ID Parameter0).

Message #

Started hot adding %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5030 — Finished hot adding Parameter1 pages with status Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_hotadd
Opcode: Stop

Description

Finished hot adding Parameter1 pages with status Parameter2. (Partition ID Parameter0).

Message #

Finished hot adding %2 pages with status %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5031 — Started hot add undoing Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_hotaddundo
Opcode: Start

Description

Started hot add undoing Parameter1 pages. (Partition ID Parameter0).

Message #

Started hot add undoing %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5032 — Finished hot add undoing Parameter1 pages with status Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_hotaddundo
Opcode: Stop

Description

Finished hot add undoing Parameter1 pages with status Parameter2. (Partition ID Parameter0).

Message #

Finished hot add undoing %2 pages with status %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5033 — Started creating memory block with Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_creatememoryblock
Opcode: Start

Description

Started creating memory block with Parameter1 pages. (Partition ID Parameter0).

Message #

Started creating memory block with %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5034 — Finished creating memory block with Parameter1 pages with status Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_creatememoryblock
Opcode: Stop

Description

Finished creating memory block with Parameter1 pages with status Parameter2. (Partition ID Parameter0).

Message #

Finished creating memory block with %2 pages with status %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

References #

Microsoft Learn https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-5034
Ultimate Windows Security https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=5034

Event ID 5035 — Started un-ballooning Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_unballoonpages
Opcode: Start

Description

Started un-ballooning Parameter1 pages. Contiguous = Parameter2. (Partition ID Parameter0).

Message #

Started un-ballooning %2 pages. Contiguous = %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5036 — Finished un-ballooning Parameter1 pages with status Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_unballoonpages
Opcode: Stop

Description

Finished un-ballooning Parameter1 pages with status Parameter2. Contiguous = Parameter3. (Partition ID Parameter0).

Message #

Finished un-ballooning %2 pages with status %3. Contiguous = %4. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—
`Parameter3` Int64	—

Event ID 5037 — An uncorrected memory error occurred at physical address PhysicalAddress.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

An uncorrected memory error occurred at physical address PhysicalAddress. This page was not found in a virtual machine. No action was taken. (Platform Directed: Flags).

Message #

An uncorrected memory error occurred at physical address %1. This page was not found in a virtual machine. No action was taken. (Platform Directed: %2)

Fields #

Name	Description
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—

Event ID 5038 — 'PhysicalAddress' was reset because an uncorrected memory error occured at physical address Platform_Directed, which was used by this virtual machine.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

'PhysicalAddress' was reset because an uncorrected memory error occured at physical address Platform_Directed, which was used by this virtual machine. (Virtual Machine: Flags, Platform Directed: Consumed, Consumed: PartitionFriendlyName).

Message #

'%3' was reset because an uncorrected memory error occured at physical address %1, which was used by this virtual machine. (Virtual Machine: %4, Platform Directed: %2, Consumed: %5)

Fields #

Name	Description
`Platform_Directed`	—
`Consumed` UInt8	—
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—
`PartitionFriendlyName` UnicodeString	—
`PartitionName` UnicodeString	—

Event ID 5039 — An uncorrected memory error occurred at physical address Platform_Directed which is used by virtual machine 'PhysicalAddress'.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Message #

An uncorrected memory error occurred at physical address %1 which is used by virtual machine '%3'. The affected page has been released. A machine check event correpsonding to this memory error was injected into the virtual machine for handling by the virtual machine's operating system. (Virtual Machine: %4, Platform Directed: %2, Consumed: %5)

Fields #

Name	Description
`Platform_Directed`	—
`Consumed` UInt8	—
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—
`PartitionFriendlyName` UnicodeString	—
`PartitionName` UnicodeString	—

References #

Microsoft Learn https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-5039
Ultimate Windows Security https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=5039

Event ID 5040 — An uncorrected memory error occurred at physical address PhysicalAddress.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

An uncorrected memory error occurred at physical address PhysicalAddress. The virtual machine that was using the page is no longer valid. No action was taken. (Platform Directed: Flags).

Message #

An uncorrected memory error occurred at physical address %1. The virtual machine that was using the page is no longer valid. No action was taken. (Platform Directed: %2)

Fields #

Name	Description
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—

References #

Microsoft Learn https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-5040
Ultimate Windows Security https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=5040

Event ID 5041 — One or more corrected memory error occurred at physical address PhysicalAddress.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

One or more corrected memory error occurred at physical address PhysicalAddress. This page was not found in a virtual machine. No action was taken. (Platform Directed: Flags).

Message #

One or more corrected memory error occurred at physical address %1. This page was not found in a virtual machine. No action was taken. (Platform Directed: %2)

Fields #

Name	Description
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—

Event ID 5042 — One or more corrected memory error occurred at physical address Platform_Directed, which is used by virtual machine 'PhysicalAddress'.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Message #

One or more corrected memory error occurred at physical address %1, which is used by virtual machine '%3'. The page could not be replaced. No action was taken. The virtual machine will continue operating normally. (Virtual Machine: %4, Platform Directed: %2, Consumed: %5)

Fields #

Name	Description
`Platform_Directed`	—
`Consumed` UInt8	—
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—
`PartitionFriendlyName` UnicodeString	—
`PartitionName` UnicodeString	—

Event ID 5043 — One or more corrected memory error occurred at physical address Platform_Directed, which is used by virtual machine 'PhysicalAddress'.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Message #

One or more corrected memory error occurred at physical address %1, which is used by virtual machine '%3'. The page has been replaced. The virtual machine will continue operating normally. (Virtual Machine: %4, Platform Directed: %2, Consumed: %5)

Fields #

Name	Description
`Platform_Directed`	—
`Consumed` UInt8	—
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—
`PartitionFriendlyName` UnicodeString	—
`PartitionName` UnicodeString	—

Event ID 5044 — Failed to retrieve memory from the kernel with error Parameter0 during a fast restore operation.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Failed to retrieve memory from the kernel with error Parameter0 during a fast restore operation. (Virtual Machine PartitionId).

Message #

Failed to retrieve memory from the kernel with error %2 during a fast restore operation. (Virtual Machine %1)

Fields #

Name	Description
`PartitionId` UnicodeString	—
`Parameter0` Int64	—

Event ID 5045 — Failed to persist memory with the kernel with error Parameter0 during a fast save operation.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Failed to persist memory with the kernel with error Parameter0 during a fast save operation. (Virtual Machine PartitionId).

Message #

Failed to persist memory with the kernel with error %2 during a fast save operation. (Virtual Machine %1)

Fields #

Name	Description
`PartitionId` UnicodeString	—
`Parameter0` Int64	—

References #

Microsoft Learn https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-5045
Ultimate Windows Security https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=5045

Event ID 5046 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_ALLOCATE_PARTITION_NODE_PAGES
Opcode: Start

Fields #

Name	Description
`LowAddress` UInt64	—
`HighAddress` UInt64	—
`SkipBytes` UInt64	—
`TotalBytes` UInt64	—
`CacheType` UInt32	—
`NodeIndex` UInt8	—
`Flags` UInt32	—
`MemoryPartition` Pointer	—
`PartitionGuid` GUID	—

References #

Microsoft Learn https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-5046
Ultimate Windows Security https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=5046

Event ID 5047 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_ALLOCATE_PARTITION_NODE_PAGES
Opcode: Stop

Fields #

Name	Description
`Mdl` Pointer	—
`TotalBytes` UInt64	—

Event ID 5048 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_MEMORY_BLOCK_PERSIST
Opcode: Start

Fields #

Name	Description
`MbpArraySize` UInt64	—
`PartitionGuid` GUID	—

Event ID 5049 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_MEMORY_BLOCK_PERSIST
Opcode: Stop

Fields #

Name	Description
`Status` UInt64	— NTSTATUS reference

Event ID 5050 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_MEMORY_BLOCK_RESTORE
Opcode: Start

Fields #

Name	Description
`PageCountToBack` HexInt64	—
`KsrBlockId` UInt64	—
`PartitionGuid` GUID	—

Event ID 5051 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_MEMORY_BLOCK_RESTORE
Opcode: Stop

Fields #

Name	Description
`MbpArraySize` UInt64	—
`Status` UInt64	— NTSTATUS reference

Event ID 5052 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_KSR_MEMORY_BLOCK_PERSIST
Opcode: Start

Fields #

Name	Description
`KsrMemoryRunCount` UInt32	—
`PartitionGuid` GUID	—

Event ID 5053 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_KSR_MEMORY_BLOCK_PERSIST
Opcode: Stop

Fields #

Name	Description
`Status` UInt64	— NTSTATUS reference

Event ID 5054 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_MEMORY_BLOCK_PHU_TEARDOWN
Opcode: Start

Fields #

Name	Description
`MbpArraySize` UInt64	—
`PartitionGuid` GUID	—

Event ID 5055 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_MEMORY_BLOCK_PHU_TEARDOWN
Opcode: Stop

Event ID 5056 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_PARTITION_PERSIST
Opcode: Start

Fields #

Name	Description
`PartitionGuid` GUID	—

Event ID 5057 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_PARTITION_PERSIST
Opcode: Stop

Fields #

Name	Description
`Status` UInt64	— NTSTATUS reference

Event ID 5058 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_PARTITION_UNPERSIST
Opcode: Start

Fields #

Name	Description
`KsrPersisted` Int8	—
`PartitionGuid` GUID	—

Event ID 5059 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_PARTITION_UNPERSIST
Opcode: Stop

Fields #

Name	Description
`Status` UInt64	— NTSTATUS reference

Event ID 5060 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_PARTITION_WITHDRAW_MEMORY
Opcode: Start

Fields #

Name	Description
`KsrPersisted` Int8	—
`PartitionGuid` GUID	—

Event ID 5061 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_PARTITION_WITHDRAW_MEMORY
Opcode: Stop

Fields #

Name	Description
`Status` UInt64	— NTSTATUS reference

Event ID 5062 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_GPA_MAP
Opcode: Start

Fields #

Name	Description
`StartGpaPage` UInt64	—
`StartMbp` UInt64	—
`MbpCount` UInt64	—
`InterceptOverrideFlags` UInt32	—
`PartitionGuid` GUID	—

Event ID 5063 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_GPA_MAP
Opcode: Stop

Fields #

Name	Description
`Status` UInt64	— NTSTATUS reference

Event ID 5064 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_GPA_UNMAP
Opcode: Start

Fields #

Name	Description
`FirstPage` UInt64	—
`LastPage` UInt64	—
`PartitionGuid` GUID	—

Event ID 5065 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_GPA_UNMAP
Opcode: Stop

Fields #

Name	Description
`Status` UInt64	— NTSTATUS reference

Event ID 5066 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_MDL_PAGE_FREE
Opcode: Start

Fields #

Name	Description
`PartitionGuid` GUID	—

Event ID 5067 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_MDL_PAGE_FREE
Opcode: Stop

Event ID 5068 — Started creating DAX file backed memory block with Parameter1 pages.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_createDAXfilebackedmemoryblock
Opcode: Start

Description

Started creating DAX file backed memory block with Parameter1 pages. (Partition ID Parameter0).

Message #

Started creating DAX file backed memory block with %2 pages. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5069 — Finished creating DAX file backed memory block with Parameter1 pages with status Parameter2.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_createDAXfilebackedmemoryblock
Opcode: Stop

Description

Finished creating DAX file backed memory block with Parameter1 pages with status Parameter2. (Partition ID Parameter0).

Message #

Finished creating DAX file backed memory block with %2 pages with status %3. (Partition ID %1)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5070 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VMT_VID_EPF
Opcode: Start

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5071 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VMT_VID_EPF
Opcode: Stop

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5072 — One or more uncorrected persistent memory errors (TotalPages pages) occurred.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

One or more uncorrected persistent memory errors (TotalPages pages) occurred. These pages were not found in a virtual machine. No action was taken. (Platform Directed: Flags).

Message #

One or more uncorrected persistent memory errors (%1 pages) occurred. These pages were not found in a virtual machine. No action was taken. (Platform Directed: %2)

Fields #

Name	Description
`TotalPages` HexInt64	—
`Flags` UInt8	—

Event ID 5073 — 'PhysicalAddress' was reset because an uncorrected persistent memory error occured at physical address Platform_Directed, which was used by this virtual machine.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

'PhysicalAddress' was reset because an uncorrected persistent memory error occured at physical address Platform_Directed, which was used by this virtual machine. (Virtual Machine: Flags, Platform Directed: Consumed, Consumed: PartitionFriendlyName).

Message #

'%3' was reset because an uncorrected persistent memory error occured at physical address %1, which was used by this virtual machine. (Virtual Machine: %4, Platform Directed: %2, Consumed: %5)

Fields #

Name	Description
`Platform_Directed`	—
`Consumed` UInt8	—
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—
`PartitionFriendlyName` UnicodeString	—
`PartitionName` UnicodeString	—

Event ID 5074 — 'PhysicalAddress' was reset because one or more uncorrected persistent memory errors (Platform_Directed pages) occured, which were used by this virtual machine.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

'PhysicalAddress' was reset because one or more uncorrected persistent memory errors (Platform_Directed pages) occured, which were used by this virtual machine. (Virtual Machine: Flags, Platform Directed: Consumed, Consumed: PartitionFriendlyName).

Message #

'%3' was reset because one or more uncorrected persistent memory errors (%1 pages) occured, which were used by this virtual machine. (Virtual Machine: %4, Platform Directed: %2, Consumed: %5)

Fields #

Name	Description
`Platform_Directed`	—
`Consumed` UInt8	—
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—
`PartitionFriendlyName` UnicodeString	—
`PartitionName` UnicodeString	—

Event ID 5075 — An uncorrected persistent memory error occurred at physical address Platform_Directed which is used by virtual machine 'PhysicalAddress'.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Message #

An uncorrected persistent memory error occurred at physical address %1 which is used by virtual machine '%3'. The affected page has been released. A machine check event correpsonding to this persistent memory error was injected into the virtual machine for handling by the virtual machine's operating system. (Virtual Machine: %4, Platform Directed: %2, Consumed: %5)

Fields #

Name	Description
`Platform_Directed`	—
`Consumed` UInt8	—
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—
`PartitionFriendlyName` UnicodeString	—
`PartitionName` UnicodeString	—

Event ID 5076 — An uncorrected persistent memory error occurred at physical address PhysicalAddress.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

An uncorrected persistent memory error occurred at physical address PhysicalAddress. The virtual machine that was using the page is no longer valid. No action was taken. (Platform Directed: Flags).

Message #

An uncorrected persistent memory error occurred at physical address %1. The virtual machine that was using the page is no longer valid. No action was taken. (Platform Directed: %2)

Fields #

Name	Description
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—

Event ID 5077 — One or more uncorrected persistent memory errors (Platform_Directed pages) occurred, which were used by virtual machine 'TotalPages'.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

One or more uncorrected persistent memory errors (Platform_Directed pages) occurred, which were used by virtual machine 'TotalPages'. ARS notification generated. (Virtual Machine: Flags, Platform Directed: Consumed, Consumed: PartitionFriendlyName).

Message #

One or more uncorrected persistent memory errors (%1 pages) occurred, which were used by virtual machine '%3'. ARS notification generated. (Virtual Machine: %4, Platform Directed: %2, Consumed: %5)

Fields #

Name	Description
`Platform_Directed`	—
`Consumed` UInt8	—
`TotalPages` HexInt64	—
`Flags` UInt8	—
`PartitionFriendlyName` UnicodeString	—
`PartitionName` UnicodeString	—

Event ID 5078 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Fields #

Name	Description
`PartitionGuid` GUID	—
`Parameter1` UInt64	—

Event ID 5079 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Fields #

Name	Description
`PartitionGuid` GUID	—
`Parameter1` UnicodeString	—

Event ID 5080 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Fields #

Name	Description
`PartitionGuid` GUID	—
`Parameter1` UInt32	—

Event ID 5081 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Fields #

Name	Description
`PartitionGuid` GUID	—
`Parameter1` UInt64	—
`Parameter2` UInt32	—

Event ID 5082 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Fields #

Name	Description
`PartitionGuid` GUID	—
`PartitionName` UnicodeString	—
`ProcessId` UInt64	—
`VpCount` UInt32	—
`ThreadId` UInt64	—

Event ID 5083 — Memory partition: Both Percentage(Parameter2) and SizeInMB(Parameter1) are specified for NUMA node Parameter0.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition: Both Percentage(Parameter2) and SizeInMB(Parameter1) are specified for NUMA node Parameter0. Percentage(Parameter2) is ignored.

Message #

Memory partition: Both Percentage(%3) and SizeInMB(%2) are specified for NUMA node %1. Percentage(%3) is ignored.

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5084 — Memory partition: Both Percentage and SizeInMB are specified on the host.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition: Both Percentage and SizeInMB are specified on the host. Percentage is ignored.

Message #

Memory partition: Both Percentage and SizeInMB are specified on the host. Percentage is ignored.

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5085 — Memory partition: Both NUMA node settings and host settings are specified.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition: Both NUMA node settings and host settings are specified. The host settings are ignored.

Message #

Memory partition: Both NUMA node settings and host settings are specified. The host settings are ignored.

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5086 — Memory partition: Primary settings are different than the legacy settings.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition: Primary settings are different than the legacy settings. The legacy settings are ignored.

Message #

Memory partition: Primary settings are different than the legacy settings. The legacy settings are ignored.

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5087 — Memory partition: Legacy memory reserve percentage setting was used.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition: Legacy memory reserve percentage setting was used.

Message #

Memory partition: Legacy memory reserve percentage setting was used.

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5088 — Memory partition not created due to 0 partition size.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition not created due to 0 partition size. This maybe caused by invalid percentage or unaligned size.

Message #

Memory partition not created due to 0 partition size. This maybe caused by invalid percentage or unaligned size.

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5089 — Memory partition creation failed (Parameter1 MB) with status = Parameter0.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition creation failed (Parameter1 MB) with status = Parameter0.

Message #

Memory partition creation failed (%2 MB) with status = %1.

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5090 — Memory partition host percentage(Parameter0) is invalid.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition host percentage(Parameter0) is invalid.

Message #

Memory partition host percentage(%1) is invalid.

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5091 — Memory partition (Parameter0) target could not be read from the registry.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition (Parameter0) target could not be read from the registry.

Message #

Memory partition (%1) target could not be read from the registry.

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5092 — Memory partition (Parameter0) target could not be written to the registry.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition (Parameter0) target could not be written to the registry.

Message #

Memory partition (%1) target could not be written to the registry.

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5093 — A non-zero memory partition (Parameter1) target size was associated with a memoryless and processorless NUMA node.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

A non-zero memory partition (Parameter1) target size was associated with a memoryless and processorless NUMA node. Node Number Parameter0.

Message #

A non-zero memory partition (%2) target size was associated with a memoryless and processorless NUMA node. Node Number %1.

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5094 — Memory partition (Parameter2) target number of nodes (Parameter0) did not match the number of NUMA nodes on the system (Parameter1).

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition (Parameter2) target number of nodes (Parameter0) did not match the number of NUMA nodes on the system (Parameter1).

Message #

Memory partition (%3) target number of nodes (%1) did not match the number of NUMA nodes on the system (%2).

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5095 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic

Fields #

Name	Description
`PartitionGuid` GUID	—
`PartitionName` UnicodeString	—
`PinBackingPages` UInt8	—
`DeferredCommit` UInt8	—
`PrivateCompressionStore` UInt8	—
`HotHints` UInt8	—
`ColdHints` UInt8	—
`ColdDiscardHints` UInt8	—
`EnlightenedPageFaults` UInt8	—
`BackingPageSizeType` UInt8	—
`FaultClusterSizeInPages` UInt64	—
`DirectMapFaultClusterSizeInPages` UInt64	—

Event ID 5096 — Memory partition per NUMA node (Parameter0) IO space size (Parameter1) unaligned.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition per NUMA node (Parameter0) IO space size (Parameter1) unaligned.

Message #

Memory partition per NUMA node (%1) IO space size (%2) unaligned.

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5097 — Memory partition per NUMA node (Parameter0) IO space size (Parameter1) is bigger than size (Parameter2).

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition per NUMA node (Parameter0) IO space size (Parameter1) is bigger than size (Parameter2).

Message #

Memory partition per NUMA node (%1) IO space size (%2) is bigger than size (%3).

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5098 — Memory partition host IO space size (Parameter0) unaligned.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition host IO space size (Parameter0) unaligned.

Message #

Memory partition host IO space size (%1) unaligned.

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5099 — Memory partition host IO space size (Parameter0) is too big for size (Parameter1).

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition host IO space size (Parameter0) is too big for size (Parameter1).

Message #

Memory partition host IO space size (%1) is too big for size (%2).

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5100 — Memory partition per NUMA node (Parameter0) size (Parameter1) unaligned.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition per NUMA node (Parameter0) size (Parameter1) unaligned.

Message #

Memory partition per NUMA node (%1) size (%2) unaligned.

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5101 — Memory partition host size (Parameter0) unaligned.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition host size (Parameter0) unaligned.

Message #

Memory partition host size (%1) unaligned.

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5102 — Memory partition per NUMA node (Parameter0) percentage(Parameter1) is invalid.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition per NUMA node (Parameter0) percentage(Parameter1) is invalid.

Message #

Memory partition per NUMA node (%1) percentage(%2) is invalid.

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5103 — Memory partition legacy percentage(Parameter0) is invalid.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Memory partition legacy percentage(Parameter0) is invalid.

Message #

Memory partition legacy percentage(%1) is invalid.

Fields #

Name	Description
`Parameter0` Int64	—

Event ID 5104 — Failed to retrieve memory block from the kernel with error Parameter0 during a fast restore operation.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Failed to retrieve memory block from the kernel with error Parameter0 during a fast restore operation. (Virtual Machine PartitionId).

Message #

Failed to retrieve memory block from the kernel with error %2 during a fast restore operation. (Virtual Machine %1)

Fields #

Name	Description
`PartitionId` UnicodeString	—
`Parameter0` Int64	—

Event ID 5105 — Failed to persist memory block with the kernel with error Parameter0 during a fast save operation.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Failed to persist memory block with the kernel with error Parameter0 during a fast save operation. (Virtual Machine PartitionId).

Message #

Failed to persist memory block with the kernel with error %2 during a fast save operation. (Virtual Machine %1)

Fields #

Name	Description
`PartitionId` UnicodeString	—
`Parameter0` Int64	—

Event ID 5106 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_ALLOCATE_PARTITION_NODE_IOSPACE_PAGES
Opcode: Start

Fields #

Name	Description
`TotalPageCount` UInt64	—
`NodeIndex` UInt8	—
`Flags` UInt32	—
`MemoryPartition` Pointer	—
`PartitionGuid` GUID	—

Event ID 5107 —

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Operational
Task: VMT_VID_ALLOCATE_PARTITION_NODE_IOSPACE_PAGES
Opcode: Stop

Fields #

Name	Description
`Status` UInt64	— NTSTATUS reference
`TotalPageCount` UInt64	—
`TotalRemotePageCount` UInt64	—
`RangeList` Pointer	—
`RangeCount` UInt64	—

Event ID 5108 — Hypervisor metadata memory partition has hot added Parameter1 pages to NUMA node Parameter0.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Hypervisor metadata memory partition has hot added Parameter1 pages to NUMA node Parameter0.

Message #

Hypervisor metadata memory partition has hot added %2 pages to NUMA node %1.

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5109 — Partition PartitionGuid VP VpIndex encountered ExceptionInfo with syndrome: ExceptionSyndrome and Vbar exception type: ExceptionType for memory GVA: Gva, GPA: Gpa, PFN: Pfn.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Partition PartitionGuid VP VpIndex encountered ExceptionInfo with syndrome: ExceptionSyndrome and Vbar exception type: ExceptionType for memory GVA: Gva, GPA: Gpa, PFN: Pfn. Handler ouptut - WheaResult: WheaResult.

Message #

Partition %1 VP %2 encountered %3 with syndrome: %4 and Vbar exception type: %5 for memory GVA: %6, GPA: %7, PFN: %8. Handler ouptut - WheaResult: %9.

Fields #

Name	Description
`PartitionGuid` GUID	—
`VpIndex` UInt32	—
`ExceptionInfo` UnicodeString	—
`ExceptionSyndrome` UInt32	—
`ExceptionType` UInt32	—
`Gva` UInt64	—
`Gpa` UInt64	—
`Pfn` UInt64	—
`WheaResult` UInt32	—

Event ID 5110 — An uncorrected memory error occurred at physical address Platform_Directed, which is used by virtual machine 'PhysicalAddress'.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Message #

An uncorrected memory error occurred at physical address %1, which is used by virtual machine '%3'. The GPA mapped to this address was already poisoned by another instance of the handler. (Virtual Machine: %4, Platform Directed: %2, Consumed: %5)

Fields #

Name	Description
`Platform_Directed`	—
`Consumed` UInt8	—
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—
`PartitionFriendlyName` UnicodeString	—
`PartitionName` UnicodeString	—

Event ID 5111 — An uncorrected memory error occurred at physical address Platform_Directed, which is used by virtual machine 'PhysicalAddress'.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

An uncorrected memory error occurred at physical address , which is used by virtual machine ''. The GPA mapped to this address was poisoned. (Virtual Machine: , Platform Directed: , Consumed: ).

Message #

An uncorrected memory error occurred at physical address %1, which is used by virtual machine '%3'. The GPA mapped to this address was poisoned. (Virtual Machine: %4, Platform Directed: %2, Consumed: %5)

Fields #

Name	Description
`Platform_Directed`	—
`Consumed` UInt8	—
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—
`PartitionFriendlyName` UnicodeString	—
`PartitionName` UnicodeString	—

Event ID 5112 — A memory error was reported to VID at physical address PhysicalAddress but contained invalid/unsupported parameters.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

A memory error was reported to VID at physical address PhysicalAddress but contained invalid/unsupported parameters. (Platform Directed: Flags).

Message #

A memory error was reported to VID at physical address %1 but contained invalid/unsupported parameters. (Platform Directed: %2)

Fields #

Name	Description
`PhysicalAddress` HexInt64	—
`Flags` UInt8	—

Event ID 5113 — Hypervisor metadata memory partition has been referenced with status:Parameter0 and state:Parameter1.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Admin

Description

Hypervisor metadata memory partition has been referenced with status:Parameter0 and state:Parameter1.

Message #

Hypervisor metadata memory partition has been referenced with status:%1 and state:%2.

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—

Event ID 5114 — Started auto demote IO space on physical NUMA node Parameter0.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_AutomaticdemotionofIOspace
Opcode: Start

Description

Started auto demote IO space on physical NUMA node Parameter0. (NumaNodeIsRequired:Parameter1, MemoryPartitionId:Parameter2).

Message #

Started auto demote IO space on physical NUMA node %1. (NumaNodeIsRequired:%2, MemoryPartitionId:%3)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—

Event ID 5115 — Finished auto demote IO space physical NUMA node Parameter0 with status Parameter3.

Provider: Microsoft-Windows-Hyper-V-VID
Channel: Microsoft-Windows-Hyper-V-VID-Analytic
Task: VID_AutomaticdemotionofIOspace
Opcode: Stop

Description

Finished auto demote IO space physical NUMA node Parameter0 with status Parameter3. (NumaNodeIsRequired:Parameter1, MemoryPartitionId:Parameter2).

Message #

Finished auto demote IO space physical NUMA node %1 with status %4. (NumaNodeIsRequired:%2, MemoryPartitionId:%3)

Fields #

Name	Description
`Parameter0` Int64	—
`Parameter1` Int64	—
`Parameter2` Int64	—
`Parameter3` Int64	—