Microsoft-Windows-IIS

354 events across 2 channels

Event IDTitleChannel
1Operational
1GENERAL_REQUEST_START: SiteId='.Diagnostic
2Operational
2GENERAL_REQUEST_END: BytesSent='.Diagnostic
10Operational
10GENERAL_STATIC_FILE_HANDLER: FileName='.Diagnostic
11Operational
11GENERAL_CGI_HANDLERDiagnostic
12Operational
12GENERAL_ISAPI_HANDLERDiagnostic
13Operational
13GENERAL_OOP_ISAPI_HANDLER: ProcessId='.Diagnostic
14Operational
14GENERAL_REDIRECTION_HANDLER: RedirectedURL='.Diagnostic
15Operational
15GENERAL_DAV_HANDLER: FileName='.Diagnostic
16Operational
16GENERAL_OPTIONS_HANDLERDiagnostic
17Operational
17GENERAL_TRACE_HANDLERDiagnostic
18Operational
18GENERAL_HSTS_HANDLER: HstsOperation='.Diagnostic
30Operational
30GENERAL_GET_URL_METADATA: PhysicalPath='.Diagnostic
31Operational
31GENERAL_CHILD_REQUEST_START: SiteId='.Diagnostic
32Operational
32GENERAL_CHILD_REQUEST_END: BytesSent='.Diagnostic
33Operational
33GENERAL_SEND_CUSTOM_ERROR: HttpStatus='.Diagnostic
34Operational
34GENERAL_MAP_HANDLERDiagnostic
35Operational
35GENERAL_FLUSH_RESPONSE_STARTDiagnostic
36Operational
36GENERAL_FLUSH_RESPONSE_END: BytesSent='.Diagnostic
37Operational
37GENERAL_READ_ENTITY_STARTDiagnostic
38Operational
38GENERAL_READ_ENTITY_END: BytesReceived='.Diagnostic
39Operational
39FILE_CHANGE_NOTIFICATION: FilePath='.Diagnostic
40Operational
40CONFIG_CHANGE_NOTIFICATION: ConfigPath='.Diagnostic
41Operational
41VIRTUAL_MODULE_UNRESOLVED: Name='.Diagnostic
42Operational
42URL_CHANGED: OldUrl='.Diagnostic
43Operational
43HANDLER_CHANGED: OldHandlerName='.Diagnostic
44Operational
44USER_SET: AuthType='.Diagnostic
45Operational
45MODULE_PRECONDITION_NOT_MATCH: Name='.Diagnostic
46Operational
46HANDLER_PRECONDITION_NOT_MATCH: Name='.Diagnostic
47Operational
47GENERAL_RESPONSE_HEADERS: Headers='.Diagnostic
48Operational
48GENERAL_RESPONSE_ENTITY_FILE: FileName='.Diagnostic
49Operational
49GENERAL_RESPONSE_ENTITY_BUFFER: Buffer='.Diagnostic
50Operational
50GENERAL_REQUEST_HEADERS: Headers='.Diagnostic
51Operational
51GENERAL_REQUEST_ENTITY: Buffer='.Diagnostic
52Operational
52GENERAL_NOT_SEND_CUSTOM_ERROR: Reason='.Diagnostic
53Operational
53GENERAL_SET_REQUEST_HEADER: HeaderName='.Diagnostic
54Operational
54GENERAL_MODULE_FACTORY_FAILED: ModuleName='.Diagnostic
55Operational
55GENERAL_ENDPOINT_INFORMATION: RemoteAddress='.Diagnostic
56Operational
56GENERAL_SET_RESPONSE_HEADER: HeaderName='.Diagnostic
57Operational
57GENERAL_SET_RESPONSE_TRAILER: HeaderName='.Diagnostic
522Operational
522AUTH_START: AuthTypeSupported='.Diagnostic
523Operational
523AUTH_SUCCEEDED: AuthType='.Diagnostic
524Operational
524AUTH_TYPE_NOT_SUPPORTEDDiagnostic
525Operational
525AUTH_INVALID_ANON_ACCOUNT: ErrorCode='.Diagnostic
526Operational
526AUTH_PASSWD_CHANGE_NEEDEDDiagnostic
527Operational
527AUTH_PASSWD_CHANGE_DISABLEDDiagnostic
528Operational
528AUTH_BAD_BASIC_HEADERDiagnostic
529Operational
529AUTH_BASIC_LOGON_FAILED: ErrorCode='.Diagnostic
530Operational
530AUTH_WDIGEST_LOGON_FAILED: ErrorCode='.Diagnostic
531Operational
531AUTH_IISDIGEST_LOGON_FAILED: ErrorCode='.Diagnostic
532Operational
532AUTH_PASSPORT_LOGON_FAILED: ErrorCode='.Diagnostic
533Operational
533AUTH_SSPI_LOGON_FAILED: ErrorCode='.Diagnostic
534Operational
534AUTH_NTLM_NULL_SESSIONDiagnostic
535Operational
535AUTH_SSPI_CONTINUE_NEEDED: PackageName='.Diagnostic
536Operational
536AUTH_ANON_PASSWD_CHANGE_NEEDEDDiagnostic
539Operational
539AUTH_REQUEST_AUTH_TYPE: RequestAuthType='.Diagnostic
540Operational
540AUTH_ENDDiagnostic
567Operational
567AUTH_KERBEROS_FAILED: KMUsed='.Diagnostic
778Operational
778SECURITY_ILLEGAL_SHORT_FILENAME: FileName='.Diagnostic
779Operational
779SECURITY_REJECTED_IP: IPAddress='.Diagnostic
780Operational
780SECURITY_REJECTED_HOSTNAME: HostName='.Diagnostic
781Operational
781SECURITY_REJECTED_REQUIRE_SSL_128Diagnostic
782Operational
782SECURITY_FILE_ACCESS_DENIED: FileName='.Diagnostic
783Operational
783SECURITY_DENIED_BY_MIMEMAP: FileName='.Diagnostic
784Operational
784SECURITY_DENIED_BY_ISAPI_RESTRICTION: ImageName='.Diagnostic
785Operational
785SECURITY_DENIED_BY_CGI_RESTRICTION: ImageName='.Diagnostic
786Operational
786SECURITY_DENIED_BY_ACCESS_FLAGS: CurrentFlags='.Diagnostic
1025Operational
1025FILTER_START: FilterName='.Diagnostic
1026Operational
1026FILTER_END: NotificationStatus='.Diagnostic
1036Operational
1036FILTER_ERROR: ErrorCode='.Diagnostic
1037Operational
1037FILTER_PREPROC_HEADERS_STARTDiagnostic
1038Operational
1038FILTER_PREPROC_HEADERS_ENDDiagnostic
1039Operational
1039FILTER_URL_MAP_START: OrigURL='.Diagnostic
1040Operational
1040FILTER_URL_MAP_END: FinalURL='.Diagnostic
1041Operational
1041FILTER_AUTHENTICATION_START: OrigUserName='.Diagnostic
1042Operational
1042FILTER_AUTHENTICATION_END: FinalUserName='.Diagnostic
1043Operational
1043FILTER_AUTH_COMPLETE_STARTDiagnostic
1044Operational
1044FILTER_AUTH_COMPLETE_ENDDiagnostic
1045Operational
1045FILTER_SEND_RESPONSE_START: HttpStatus='.Diagnostic
1046Operational
1046FILTER_SEND_RESPONSE_ENDDiagnostic
1047Operational
1047FILTER_END_OF_REQUEST_STARTDiagnostic
1048Operational
1048FILTER_END_OF_REQUEST_ENDDiagnostic
1049Operational
1049FILTER_LOG_START: OrigClientHostName='.Diagnostic
1050Operational
1050FILTER_LOG_END: FinalClientHostName='.Diagnostic
1051Operational
1051FILTER_SEND_RAW_DATA_STARTDiagnostic
1052Operational
1052FILTER_SEND_RAW_DATA_ENDDiagnostic
1053Operational
1053FILTER_ACCESS_DENIED_START: RequestedURL='.Diagnostic
1054Operational
1054FILTER_ACCESS_DENIED_ENDDiagnostic
1055Operational
1055FILTER_SET_REQ_HEADER: HeaderName='.Diagnostic
1056Operational
1056FILTER_ADD_REQ_HEADER: HeaderName='.Diagnostic
1057Operational
1057FILTER_SET_RESP_HEADER: HeaderName='.Diagnostic
1058Operational
1058FILTER_ADD_RESP_HEADER: HeaderName='.Diagnostic
1537Operational
1537CGI_STARTDiagnostic
1538Operational
1538CGI_ENDDiagnostic
1539Operational
1539CGI_LAUNCH: CommandLine='.Diagnostic
1540Operational
1540CGI_TIMEOUT: Headers='.Diagnostic
1541Operational
1541CGI_PREMATURE_TERMINATION: Headers='.Diagnostic
1542Operational
1542CGI_REQUEST_ENTITY_SENTDiagnostic
1543Operational
1543CGI_HEADERS_RECEIVEDDiagnostic
1793Operational
1793STATIC_COMPRESSION_STARTDiagnostic
1794Operational
1794STATIC_COMPRESSION_SUCCESSDiagnostic
1795Operational
1795STATIC_COMPRESSION_NOT_SUCCESS: Reason='.Diagnostic
1796Operational
1796STATIC_COMPRESSION_CREATE_START: OriginalFileName='.Diagnostic
1797Operational
1797STATIC_COMPRESSION_CREATE_END: ErrorCode='.Diagnostic
1798Operational
1798DYNAMIC_COMPRESSION_STARTDiagnostic
1799Operational
1799DYNAMIC_COMPRESSION_SUCCESSDiagnostic
1800Operational
1800DYNAMIC_COMPRESSION_NOT_SUCCESS: Reason='.Diagnostic
1801Operational
1801DYNAMIC_COMPRESSION_DO: OriginalSize='.Diagnostic
1802Operational
1802DYNAMIC_COMPRESSION_ENDDiagnostic
1803Operational
1803STATIC_COMPRESSION_ENDDiagnostic
2058Operational
2058FILE_CACHE_ACCESS_START: FileName='.Diagnostic
2059Operational
2059FILE_CACHE_ACCESS_END: Successful='.Diagnostic
2060Operational
2060URL_CACHE_ACCESS_START: RequestURL='.Diagnostic
2061Operational
2061URL_CACHE_ACCESS_END: PhysicalPath='.Diagnostic
2062Operational
2062HTTPSYS_CACHEABLE: HttpsysCacheable='.Diagnostic
2063Operational
2063OUTPUT_CACHE_LOOKUP_STARTDiagnostic
2064Operational
2064OUTPUT_CACHE_LOOKUP_END: Result='.Diagnostic
2065Operational
2065OUTPUT_CACHE_UPDATE_START: CachePolicy='.Diagnostic
2066Operational
2066OUTPUT_CACHE_UPDATE_END: Result='.Diagnostic
2067Operational
2067OUTPUT_CACHE_DISABLEDDiagnostic
2068Operational
2068FILE_CACHE_CREATE_FILE: FileName='.Diagnostic
2305Operational
2305NOTIFY_MODULE_START: ModuleName='.Diagnostic
2306Operational
2306NOTIFY_MODULE_END: ModuleName='.Diagnostic
2307Operational
2307NOTIFY_MODULE_COMPLETION: ModuleName='.Diagnostic
2308Operational
2308PRE_BEGIN_REQUEST_START: ModuleName='.Diagnostic
2309Operational
2309PRE_BEGIN_REQUEST_END: ModuleName='.Diagnostic
2319Operational
2319REQUEST_PROCESSING_ERROR: ModuleName='.Diagnostic
2320Operational
2320MODULE_SET_RESPONSE_ERROR_STATUS: ModuleName='.Diagnostic
2321Operational
2321MODULE_SET_RESPONSE_SUCCESS_STATUS: ModuleName='.Diagnostic
2322Operational
2322SET_RESPONSE_ERROR_DESCRIPTION: ErrorDescription='.Diagnostic
2561Operational
2561MODULE_START: ModuleName='.Diagnostic
2562Operational
2562MODULE_END: ModuleName='.Diagnostic
2563Operational
2563MODULE_CRITICAL_ERROR: ModuleName='.Diagnostic
2564Operational
2564MODULE_ERROR: ModuleName='.Diagnostic
2565Operational
2565MODULE_WARNING: ModuleName='.Diagnostic
2566Operational
2566MODULE_INFORMATION: ModuleName='.Diagnostic
2567Operational
2567MODULE_VERBOSE: ModuleName='.Diagnostic
3329Operational
3329FASTCGI_ACTIVITY_TIMEOUTDiagnostic
3330Operational
3330FASTCGI_REQUEST_TIMEOUTDiagnostic
3331Operational
3331FASTCGI_UNEXPECTED_EXITDiagnostic
3332Operational
3332FASTCGI_RAPID_FAILURE_PROTECTIONDiagnostic
3333Operational
3333FASTCGI_PATH_NOT_FOUNDDiagnostic
3334Operational
3334FASTCGI_SCRIPT_PROCESSOR_MISSINGDiagnostic
3335Operational
3335FASTCGI_ADD_JOBOBJECT_FAILDiagnostic
3336Operational
3336FASTCGI_APPLICATION_MANAGER_SHUTDOWNDiagnostic
3337Operational
3337FASTCGI_QUEUE_FULLDiagnostic
3338Operational
3338FASTCGI_UNKNOWN_ERROR: ErrorCode='.Diagnostic
3339Operational
3339FASTCGI_RESPONSE_WRITTENDiagnostic
3340Operational
3340FASTCGI_WAITING_FOR_RESPONSEDiagnostic
3341Operational
3341FASTCGI_STDERR_TRACE_ERROR: Message='.Diagnostic
3342Operational
3342FASTCGI_STDERR_TRACE_WARNING: Message='.Diagnostic
3343Operational
3343FASTCGI_STDERR_TRACE_INFO: Message='.Diagnostic
3344Operational
3344FASTCGI_QUEUE_REQUEST: PositionInQueue='.Diagnostic
3345Operational
3345FASTCGI_ASSIGN_PROCESS: CommandLine='.Diagnostic
3346Operational
3346FASTCGI_STARTDiagnostic
3347Operational
3347FASTCGI_ENDDiagnostic
3585Operational
3585ISAPI_STARTDiagnostic
3586Operational
3586ISAPI_ENDDiagnostic
3841Operational
3841WEBSOCKET_INITIALIZE_FAILED: ErrorCode='.Diagnostic
3842Operational
3842WEBSOCKET_HANDSHAKE_STARTDiagnostic
3843Operational
3843WEBSOCKET_HANDSHAKE_SUCCESSDiagnostic
3844Operational
3844WEBSOCKET_HANDSHAKE_NOT_SUCCESS: ErrorCode='.Diagnostic
3845Operational
3845WEBSOCKET_READ_FRAGMENT_START: BufferSize='.Diagnostic
3846Operational
3846WEBSOCKET_READ_FRAGMENT_END_PENDINGDiagnostic
3847Operational
3847WEBSOCKET_READ_FRAGMENT_END_SUCCESS: BytesReceived='.Diagnostic
3848Operational
3848WEBSOCKET_READ_FRAGMENT_END_NOT_SUCCESS: ErrorCode='.Diagnostic
3849Operational
3849WEBSOCKET_WRITE_FRAGMENT_START: DataType='.Diagnostic
3850Operational
3850WEBSOCKET_WRITE_FRAGMENT_END_PENDINGDiagnostic
3851Operational
3851WEBSOCKET_WRITE_FRAGMENT_END_SUCCESS: BytesSent='.Diagnostic
3852Operational
3852WEBSOCKET_WRITE_FRAGMENT_END_NOT_SUCCESS: ErrorCode='.Diagnostic
3853Operational
3853WEBSOCKET_APPLICATION_CLOSE_CONNECTIONDiagnostic
3854Operational
3854WEBSOCKET_MODULE_CLOSE_CONNECTION: Reason='.Diagnostic
3855Operational
3855WEBSOCKET_READ_IO_NOT_SUCCESS: ErrorCode='.Diagnostic
3856Operational
3856WEBSOCKET_WRITE_IO_NOT_SUCCESS: ErrorCode='.Diagnostic
3857Operational
3857WEBSOCKET_RECEIVED_CLOSE: Status='.Diagnostic
3858Operational
3858WEBSOCKET_SEND_CLOSE_START: Status='.Diagnostic
3859Operational
3859WEBSOCKET_SEND_CLOSE_END_SUCCESSDiagnostic
3860Operational
3860WEBSOCKET_SEND_CLOSE_END_NOT_SUCCESS: ErrorCode='.Diagnostic

Event ID 1 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
SiteId
AppPoolId
ConnId
RawConnId
RequestURL
RequestVerb

Event ID 1 — GENERAL_REQUEST_START: SiteId='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_REQUEST_START: SiteId='%2',AppPoolId='%3',ConnId='%4',RawConnId='%5',RequestURL='%6',RequestVerb='%7'

Fields

NameDescription
ContextId
SiteId
AppPoolId
ConnId
RawConnId
RequestURL
RequestVerb

Event ID 2 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
BytesSent
BytesReceived
HttpStatus
HttpSubStatus

Event ID 2 — GENERAL_REQUEST_END: BytesSent='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_REQUEST_END: BytesSent='%2',BytesReceived='%3',HttpStatus='%4',HttpSubStatus='%5'

Fields

NameDescription
ContextId
BytesSent
BytesReceived
HttpStatus
HttpSubStatus

Event ID 10 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FileName

Event ID 10 — GENERAL_STATIC_FILE_HANDLER: FileName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_STATIC_FILE_HANDLER: FileName='%2'

Fields

NameDescription
ContextId
FileName

Event ID 11 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 11 — GENERAL_CGI_HANDLER

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_CGI_HANDLER

Fields

NameDescription
ContextId

Event ID 12 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 12 — GENERAL_ISAPI_HANDLER

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_ISAPI_HANDLER

Fields

NameDescription
ContextId

Event ID 13 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ProcessId
TotalReqs
CurrentReqs

Event ID 13 — GENERAL_OOP_ISAPI_HANDLER: ProcessId='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_OOP_ISAPI_HANDLER: ProcessId='%2',TotalReqs='%3',CurrentReqs='%4'

Fields

NameDescription
ContextId
ProcessId
TotalReqs
CurrentReqs

Event ID 14 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
RedirectedURL

Event ID 14 — GENERAL_REDIRECTION_HANDLER: RedirectedURL='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_REDIRECTION_HANDLER: RedirectedURL='%2'

Fields

NameDescription
ContextId
RedirectedURL

Event ID 15 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FileName

Event ID 15 — GENERAL_DAV_HANDLER: FileName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_DAV_HANDLER: FileName='%2'

Fields

NameDescription
ContextId
FileName

Event ID 16 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 16 — GENERAL_OPTIONS_HANDLER

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_OPTIONS_HANDLER

Fields

NameDescription
ContextId

Event ID 17 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 17 — GENERAL_TRACE_HANDLER

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_TRACE_HANDLER

Fields

NameDescription
ContextId

Event ID 18 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HstsOperation

Event ID 18 — GENERAL_HSTS_HANDLER: HstsOperation='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_HSTS_HANDLER: HstsOperation='%2'

Fields

NameDescription
ContextId
HstsOperation

Event ID 30 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
PhysicalPath
AccessPerms

Event ID 30 — GENERAL_GET_URL_METADATA: PhysicalPath='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_GET_URL_METADATA: PhysicalPath='%2',AccessPerms='%3'

Fields

NameDescription
ContextId
PhysicalPath
AccessPerms

Event ID 31 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
SiteId
RequestURL
RequestVerb
RecursiveLevel

Event ID 31 — GENERAL_CHILD_REQUEST_START: SiteId='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_CHILD_REQUEST_START: SiteId='%2',RequestURL='%3',RequestVerb='%4',RecursiveLevel='%5'

Fields

NameDescription
ContextId
SiteId
RequestURL
RequestVerb
RecursiveLevel

Event ID 32 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
BytesSent
HttpStatus
HttpSubStatus

Event ID 32 — GENERAL_CHILD_REQUEST_END: BytesSent='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_CHILD_REQUEST_END: BytesSent='%2',HttpStatus='%3',HttpSubStatus='%4'

Fields

NameDescription
ContextId
BytesSent
HttpStatus
HttpSubStatus

Event ID 33 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HttpStatus
HttpSubStatus
FileNameOrURL

Event ID 33 — GENERAL_SEND_CUSTOM_ERROR: HttpStatus='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_SEND_CUSTOM_ERROR: HttpStatus='%2',HttpSubStatus='%3',FileNameOrURL='%4'

Fields

NameDescription
ContextId
HttpStatus
HttpSubStatus
FileNameOrURL

Event ID 34 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 34 — GENERAL_MAP_HANDLER

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_MAP_HANDLER

Fields

NameDescription
ContextId

Event ID 35 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 35 — GENERAL_FLUSH_RESPONSE_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_FLUSH_RESPONSE_START

Fields

NameDescription
ContextId

Event ID 36 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
BytesSent
ErrorCode

Event ID 36 — GENERAL_FLUSH_RESPONSE_END: BytesSent='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_FLUSH_RESPONSE_END: BytesSent='%2',ErrorCode='%3'

Fields

NameDescription
ContextId
BytesSent
ErrorCode

Event ID 37 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 37 — GENERAL_READ_ENTITY_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_READ_ENTITY_START

Fields

NameDescription
ContextId

Event ID 38 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
BytesReceived
ErrorCode

Event ID 38 — GENERAL_READ_ENTITY_END: BytesReceived='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_READ_ENTITY_END: BytesReceived='%2',ErrorCode='%3'

Fields

NameDescription
ContextId
BytesReceived
ErrorCode

Event ID 39 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FilePath

Event ID 39 — FILE_CHANGE_NOTIFICATION: FilePath='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILE_CHANGE_NOTIFICATION: FilePath='%2'

Fields

NameDescription
ContextId
FilePath

Event ID 40 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ConfigPath

Event ID 40 — CONFIG_CHANGE_NOTIFICATION: ConfigPath='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

CONFIG_CHANGE_NOTIFICATION: ConfigPath='%2'

Fields

NameDescription
ContextId
ConfigPath

Event ID 41 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Name
Type

Event ID 41 — VIRTUAL_MODULE_UNRESOLVED: Name='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

VIRTUAL_MODULE_UNRESOLVED: Name='%2',Type='%3'

Fields

NameDescription
ContextId
Name
Type

Event ID 42 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
OldUrl
NewUrl

Event ID 42 — URL_CHANGED: OldUrl='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

URL_CHANGED: OldUrl='%2',NewUrl='%3'

Fields

NameDescription
ContextId
OldUrl
NewUrl

Event ID 43 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
OldHandlerName
NewHandlerName
NewHandlerModules
NewHandlerScriptProcessor
NewHandlerType

Event ID 43 — HANDLER_CHANGED: OldHandlerName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

HANDLER_CHANGED: OldHandlerName='%2',NewHandlerName='%3',NewHandlerModules='%4',NewHandlerScriptProcessor='%5',NewHandlerType='%6'

Fields

NameDescription
ContextId
OldHandlerName
NewHandlerName
NewHandlerModules
NewHandlerScriptProcessor
NewHandlerType

Event ID 44 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
AuthType
UserName
SupportsIsInRole

Event ID 44 — USER_SET: AuthType='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

USER_SET: AuthType='%2',UserName='%3',SupportsIsInRole='%4'

Fields

NameDescription
ContextId
AuthType
UserName
SupportsIsInRole

Event ID 45 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Name
Precondition

Event ID 45 — MODULE_PRECONDITION_NOT_MATCH: Name='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

MODULE_PRECONDITION_NOT_MATCH: Name='%2',Precondition='%3'

Fields

NameDescription
ContextId
Name
Precondition

Event ID 46 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Name
Precondition

Event ID 46 — HANDLER_PRECONDITION_NOT_MATCH: Name='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

HANDLER_PRECONDITION_NOT_MATCH: Name='%2',Precondition='%3'

Fields

NameDescription
ContextId
Name
Precondition

Event ID 47 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Headers

Event ID 47 — GENERAL_RESPONSE_HEADERS: Headers='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_RESPONSE_HEADERS: Headers='%2'

Fields

NameDescription
ContextId
Headers

Event ID 48 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FileName
Offset
Size

Event ID 48 — GENERAL_RESPONSE_ENTITY_FILE: FileName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_RESPONSE_ENTITY_FILE: FileName='%2',Offset='%3',Size='%4'

Fields

NameDescription
ContextId
FileName
Offset
Size

Event ID 49 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Buffer

Event ID 49 — GENERAL_RESPONSE_ENTITY_BUFFER: Buffer='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_RESPONSE_ENTITY_BUFFER: Buffer='%2'

Fields

NameDescription
ContextId
Buffer

Event ID 50 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Headers

Event ID 50 — GENERAL_REQUEST_HEADERS: Headers='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_REQUEST_HEADERS: Headers='%2'

Fields

NameDescription
ContextId
Headers

Event ID 51 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Buffer

Event ID 51 — GENERAL_REQUEST_ENTITY: Buffer='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_REQUEST_ENTITY: Buffer='%2'

Fields

NameDescription
ContextId
Buffer

Event ID 52 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Reason

Event ID 52 — GENERAL_NOT_SEND_CUSTOM_ERROR: Reason='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_NOT_SEND_CUSTOM_ERROR: Reason='%2'

Fields

NameDescription
ContextId
Reason

Event ID 53 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HeaderName
HeaderValue
Replace

Event ID 53 — GENERAL_SET_REQUEST_HEADER: HeaderName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_SET_REQUEST_HEADER: HeaderName='%2',HeaderValue='%3',Replace='%4'

Fields

NameDescription
ContextId
HeaderName
HeaderValue
Replace

Event ID 54 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
ErrorCode

Event ID 54 — GENERAL_MODULE_FACTORY_FAILED: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_MODULE_FACTORY_FAILED: ModuleName='%2',ErrorCode='%3'

Fields

NameDescription
ContextId
ModuleName
ErrorCode

Event ID 55 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
RemoteAddress
RemotePort
LocalAddress
LocalPort

Event ID 55 — GENERAL_ENDPOINT_INFORMATION: RemoteAddress='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_ENDPOINT_INFORMATION: RemoteAddress='%2',RemotePort='%3',LocalAddress='%4',LocalPort='%5'

Fields

NameDescription
ContextId
RemoteAddress
RemotePort
LocalAddress
LocalPort

Event ID 56 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HeaderName
HeaderValue
Replace

Event ID 56 — GENERAL_SET_RESPONSE_HEADER: HeaderName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_SET_RESPONSE_HEADER: HeaderName='%2',HeaderValue='%3',Replace='%4'

Fields

NameDescription
ContextId
HeaderName
HeaderValue
Replace

Event ID 57 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HeaderName
HeaderValue
Replace

Event ID 57 — GENERAL_SET_RESPONSE_TRAILER: HeaderName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

GENERAL_SET_RESPONSE_TRAILER: HeaderName='%2',HeaderValue='%3',Replace='%4'

Fields

NameDescription
ContextId
HeaderName
HeaderValue
Replace

Event ID 522 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
AuthTypeSupported

Event ID 522 — AUTH_START: AuthTypeSupported='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_START: AuthTypeSupported='%2'

Fields

NameDescription
ContextId
AuthTypeSupported

Event ID 523 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
AuthType
NTLMUsed
RemoteUserName
AuthUserName
TokenImpersonationLevel

Event ID 523 — AUTH_SUCCEEDED: AuthType='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_SUCCEEDED: AuthType='%2',NTLMUsed='%3',RemoteUserName='%4',AuthUserName='%5',TokenImpersonationLevel='%6'

Fields

NameDescription
ContextId
AuthType
NTLMUsed
RemoteUserName
AuthUserName
TokenImpersonationLevel

Event ID 524 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 524 — AUTH_TYPE_NOT_SUPPORTED

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_TYPE_NOT_SUPPORTED

Fields

NameDescription
ContextId

Event ID 525 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 525 — AUTH_INVALID_ANON_ACCOUNT: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_INVALID_ANON_ACCOUNT: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 526 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 526 — AUTH_PASSWD_CHANGE_NEEDED

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_PASSWD_CHANGE_NEEDED

Fields

NameDescription
ContextId

Event ID 527 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 527 — AUTH_PASSWD_CHANGE_DISABLED

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_PASSWD_CHANGE_DISABLED

Fields

NameDescription
ContextId

Event ID 528 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 528 — AUTH_BAD_BASIC_HEADER

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_BAD_BASIC_HEADER

Fields

NameDescription
ContextId

Event ID 529 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 529 — AUTH_BASIC_LOGON_FAILED: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_BASIC_LOGON_FAILED: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 530 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 530 — AUTH_WDIGEST_LOGON_FAILED: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_WDIGEST_LOGON_FAILED: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 531 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 531 — AUTH_IISDIGEST_LOGON_FAILED: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_IISDIGEST_LOGON_FAILED: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 532 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 532 — AUTH_PASSPORT_LOGON_FAILED: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_PASSPORT_LOGON_FAILED: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 533 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 533 — AUTH_SSPI_LOGON_FAILED: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_SSPI_LOGON_FAILED: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 534 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 534 — AUTH_NTLM_NULL_SESSION

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_NTLM_NULL_SESSION

Fields

NameDescription
ContextId

Event ID 535 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
PackageName

Event ID 535 — AUTH_SSPI_CONTINUE_NEEDED: PackageName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_SSPI_CONTINUE_NEEDED: PackageName='%2'

Fields

NameDescription
ContextId
PackageName

Event ID 536 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 536 — AUTH_ANON_PASSWD_CHANGE_NEEDED

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_ANON_PASSWD_CHANGE_NEEDED

Fields

NameDescription
ContextId

Event ID 539 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
RequestAuthType

Event ID 539 — AUTH_REQUEST_AUTH_TYPE: RequestAuthType='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_REQUEST_AUTH_TYPE: RequestAuthType='%2'

Fields

NameDescription
ContextId
RequestAuthType

Event ID 540 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 540 — AUTH_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_END

Fields

NameDescription
ContextId

Event ID 567 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
KMUsed
APUserName
SPNName
ADConfigIsOK
KerberosInfo

Event ID 567 — AUTH_KERBEROS_FAILED: KMUsed='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

AUTH_KERBEROS_FAILED: KMUsed='%2',APUserName='%3',SPNName='%4',ADConfigIsOK='%5',KerberosInfo='%6'

Fields

NameDescription
ContextId
KMUsed
APUserName
SPNName
ADConfigIsOK
KerberosInfo

Event ID 778 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FileName

Event ID 778 — SECURITY_ILLEGAL_SHORT_FILENAME: FileName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

SECURITY_ILLEGAL_SHORT_FILENAME: FileName='%2'

Fields

NameDescription
ContextId
FileName

Event ID 779 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
IPAddress

Event ID 779 — SECURITY_REJECTED_IP: IPAddress='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

SECURITY_REJECTED_IP: IPAddress='%2'

Fields

NameDescription
ContextId
IPAddress

Event ID 780 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HostName

Event ID 780 — SECURITY_REJECTED_HOSTNAME: HostName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

SECURITY_REJECTED_HOSTNAME: HostName='%2'

Fields

NameDescription
ContextId
HostName

Event ID 781 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 781 — SECURITY_REJECTED_REQUIRE_SSL_128

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

SECURITY_REJECTED_REQUIRE_SSL_128

Fields

NameDescription
ContextId

Event ID 782 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FileName
AccountName
DomainName

Event ID 782 — SECURITY_FILE_ACCESS_DENIED: FileName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

SECURITY_FILE_ACCESS_DENIED: FileName='%2',AccountName='%3',DomainName='%4'

Fields

NameDescription
ContextId
FileName
AccountName
DomainName

Event ID 783 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FileName

Event ID 783 — SECURITY_DENIED_BY_MIMEMAP: FileName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

SECURITY_DENIED_BY_MIMEMAP: FileName='%2'

Fields

NameDescription
ContextId
FileName

Event ID 784 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ImageName

Event ID 784 — SECURITY_DENIED_BY_ISAPI_RESTRICTION: ImageName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

SECURITY_DENIED_BY_ISAPI_RESTRICTION: ImageName='%2'

Fields

NameDescription
ContextId
ImageName

Event ID 785 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ImageName

Event ID 785 — SECURITY_DENIED_BY_CGI_RESTRICTION: ImageName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

SECURITY_DENIED_BY_CGI_RESTRICTION: ImageName='%2'

Fields

NameDescription
ContextId
ImageName

Event ID 786 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
CurrentFlags
NeededFlags

Event ID 786 — SECURITY_DENIED_BY_ACCESS_FLAGS: CurrentFlags='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

SECURITY_DENIED_BY_ACCESS_FLAGS: CurrentFlags='%2',NeededFlags='%3'

Fields

NameDescription
ContextId
CurrentFlags
NeededFlags

Event ID 1025 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FilterName

Event ID 1025 — FILTER_START: FilterName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_START: FilterName='%2'

Fields

NameDescription
ContextId
FilterName

Event ID 1026 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
NotificationStatus

Event ID 1026 — FILTER_END: NotificationStatus='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_END: NotificationStatus='%2'

Fields

NameDescription
ContextId
NotificationStatus

Event ID 1036 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 1036 — FILTER_ERROR: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_ERROR: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 1037 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1037 — FILTER_PREPROC_HEADERS_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_PREPROC_HEADERS_START

Fields

NameDescription
ContextId

Event ID 1038 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1038 — FILTER_PREPROC_HEADERS_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_PREPROC_HEADERS_END

Fields

NameDescription
ContextId

Event ID 1039 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
OrigURL
OrigPath
AccessPerms
MatchingPath
MatchingURL
ScriptMapEntry

Event ID 1039 — FILTER_URL_MAP_START: OrigURL='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_URL_MAP_START: OrigURL='%2',OrigPath='%3',AccessPerms='%4',MatchingPath='%5',MatchingURL='%6',ScriptMapEntry='%7'

Fields

NameDescription
ContextId
OrigURL
OrigPath
AccessPerms
MatchingPath
MatchingURL
ScriptMapEntry

Event ID 1040 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FinalURL
FinalPath
AccessPerms
MatchingPath
MatchingURL
ScriptMapEntry

Event ID 1040 — FILTER_URL_MAP_END: FinalURL='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_URL_MAP_END: FinalURL='%2',FinalPath='%3',AccessPerms='%4',MatchingPath='%5',MatchingURL='%6',ScriptMapEntry='%7'

Fields

NameDescription
ContextId
FinalURL
FinalPath
AccessPerms
MatchingPath
MatchingURL
ScriptMapEntry

Event ID 1041 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
OrigUserName

Event ID 1041 — FILTER_AUTHENTICATION_START: OrigUserName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_AUTHENTICATION_START: OrigUserName='%2'

Fields

NameDescription
ContextId
OrigUserName

Event ID 1042 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FinalUserName
PasswordChanged

Event ID 1042 — FILTER_AUTHENTICATION_END: FinalUserName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_AUTHENTICATION_END: FinalUserName='%2',PasswordChanged='%3'

Fields

NameDescription
ContextId
FinalUserName
PasswordChanged

Event ID 1043 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1043 — FILTER_AUTH_COMPLETE_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_AUTH_COMPLETE_START

Fields

NameDescription
ContextId

Event ID 1044 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1044 — FILTER_AUTH_COMPLETE_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_AUTH_COMPLETE_END

Fields

NameDescription
ContextId

Event ID 1045 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HttpStatus

Event ID 1045 — FILTER_SEND_RESPONSE_START: HttpStatus='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_SEND_RESPONSE_START: HttpStatus='%2'

Fields

NameDescription
ContextId
HttpStatus

Event ID 1046 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1046 — FILTER_SEND_RESPONSE_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_SEND_RESPONSE_END

Fields

NameDescription
ContextId

Event ID 1047 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1047 — FILTER_END_OF_REQUEST_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_END_OF_REQUEST_START

Fields

NameDescription
ContextId

Event ID 1048 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1048 — FILTER_END_OF_REQUEST_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_END_OF_REQUEST_END

Fields

NameDescription
ContextId

Event ID 1049 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
OrigClientHostName
OrigClientUserName
OrigServerName
OrigOperation
OrigTarget
OrigParameters
OrigHttpStatus
OrigWin32Status

Event ID 1049 — FILTER_LOG_START: OrigClientHostName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_LOG_START: OrigClientHostName='%2',OrigClientUserName='%3',OrigServerName='%4',OrigOperation='%5',OrigTarget='%6',OrigParameters='%7',OrigHttpStatus='%8',OrigWin32Status='%9'

Fields

NameDescription
ContextId
OrigClientHostName
OrigClientUserName
OrigServerName
OrigOperation
OrigTarget
OrigParameters
OrigHttpStatus
OrigWin32Status

Event ID 1050 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FinalClientHostName
FinalClientUserName
FinalServerName
FinalOperation
FinalTarget
FinalParameters
FinalHttpStatus
FinalWin32Status

Event ID 1050 — FILTER_LOG_END: FinalClientHostName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_LOG_END: FinalClientHostName='%2',FinalClientUserName='%3',FinalServerName='%4',FinalOperation='%5',FinalTarget='%6',FinalParameters='%7',FinalHttpStatus='%8',FinalWin32Status='%9'

Fields

NameDescription
ContextId
FinalClientHostName
FinalClientUserName
FinalServerName
FinalOperation
FinalTarget
FinalParameters
FinalHttpStatus
FinalWin32Status

Event ID 1051 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1051 — FILTER_SEND_RAW_DATA_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_SEND_RAW_DATA_START

Fields

NameDescription
ContextId

Event ID 1052 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1052 — FILTER_SEND_RAW_DATA_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_SEND_RAW_DATA_END

Fields

NameDescription
ContextId

Event ID 1053 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
RequestedURL
PhysicalPath
DenialReason

Event ID 1053 — FILTER_ACCESS_DENIED_START: RequestedURL='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_ACCESS_DENIED_START: RequestedURL='%2',PhysicalPath='%3',DenialReason='%4'

Fields

NameDescription
ContextId
RequestedURL
PhysicalPath
DenialReason

Event ID 1054 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1054 — FILTER_ACCESS_DENIED_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_ACCESS_DENIED_END

Fields

NameDescription
ContextId

Event ID 1055 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HeaderName
HeaderValue

Event ID 1055 — FILTER_SET_REQ_HEADER: HeaderName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_SET_REQ_HEADER: HeaderName='%2',HeaderValue='%3'

Fields

NameDescription
ContextId
HeaderName
HeaderValue

Event ID 1056 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HeaderName
HeaderValue

Event ID 1056 — FILTER_ADD_REQ_HEADER: HeaderName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_ADD_REQ_HEADER: HeaderName='%2',HeaderValue='%3'

Fields

NameDescription
ContextId
HeaderName
HeaderValue

Event ID 1057 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HeaderName
HeaderValue

Event ID 1057 — FILTER_SET_RESP_HEADER: HeaderName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_SET_RESP_HEADER: HeaderName='%2',HeaderValue='%3'

Fields

NameDescription
ContextId
HeaderName
HeaderValue

Event ID 1058 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HeaderName
HeaderValue

Event ID 1058 — FILTER_ADD_RESP_HEADER: HeaderName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILTER_ADD_RESP_HEADER: HeaderName='%2',HeaderValue='%3'

Fields

NameDescription
ContextId
HeaderName
HeaderValue

Event ID 1537 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1537 — CGI_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

CGI_START

Fields

NameDescription
ContextId

Event ID 1538 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1538 — CGI_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

CGI_END

Fields

NameDescription
ContextId

Event ID 1539 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
CommandLine
ErrorCode
ProcessId

Event ID 1539 — CGI_LAUNCH: CommandLine='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

CGI_LAUNCH: CommandLine='%2',ErrorCode='%3',ProcessId='%4'

Fields

NameDescription
ContextId
CommandLine
ErrorCode
ProcessId

Event ID 1540 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Headers

Event ID 1540 — CGI_TIMEOUT: Headers='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

CGI_TIMEOUT: Headers='%2'

Fields

NameDescription
ContextId
Headers

Event ID 1541 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Headers

Event ID 1541 — CGI_PREMATURE_TERMINATION: Headers='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

CGI_PREMATURE_TERMINATION: Headers='%2'

Fields

NameDescription
ContextId
Headers

Event ID 1542 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1542 — CGI_REQUEST_ENTITY_SENT

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

CGI_REQUEST_ENTITY_SENT

Fields

NameDescription
ContextId

Event ID 1543 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1543 — CGI_HEADERS_RECEIVED

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

CGI_HEADERS_RECEIVED

Fields

NameDescription
ContextId

Event ID 1793 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1793 — STATIC_COMPRESSION_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

STATIC_COMPRESSION_START

Fields

NameDescription
ContextId

Event ID 1794 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1794 — STATIC_COMPRESSION_SUCCESS

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

STATIC_COMPRESSION_SUCCESS

Fields

NameDescription
ContextId

Event ID 1795 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Reason

Event ID 1795 — STATIC_COMPRESSION_NOT_SUCCESS: Reason='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

STATIC_COMPRESSION_NOT_SUCCESS: Reason='%2'

Fields

NameDescription
ContextId
Reason

Event ID 1796 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
OriginalFileName

Event ID 1796 — STATIC_COMPRESSION_CREATE_START: OriginalFileName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

STATIC_COMPRESSION_CREATE_START: OriginalFileName='%2'

Fields

NameDescription
ContextId
OriginalFileName

Event ID 1797 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode
OriginalFileName
OriginalFileSize
CompressedFileName
CompressedFileSize

Event ID 1797 — STATIC_COMPRESSION_CREATE_END: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

STATIC_COMPRESSION_CREATE_END: ErrorCode='%2',OriginalFileName='%3',OriginalFileSize='%4',CompressedFileName='%5',CompressedFileSize='%6'

Fields

NameDescription
ContextId
ErrorCode
OriginalFileName
OriginalFileSize
CompressedFileName
CompressedFileSize

Event ID 1798 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1798 — DYNAMIC_COMPRESSION_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

DYNAMIC_COMPRESSION_START

Fields

NameDescription
ContextId

Event ID 1799 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1799 — DYNAMIC_COMPRESSION_SUCCESS

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

DYNAMIC_COMPRESSION_SUCCESS

Fields

NameDescription
ContextId

Event ID 1800 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Reason

Event ID 1800 — DYNAMIC_COMPRESSION_NOT_SUCCESS: Reason='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

DYNAMIC_COMPRESSION_NOT_SUCCESS: Reason='%2'

Fields

NameDescription
ContextId
Reason

Event ID 1801 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
OriginalSize
CompressedSize

Event ID 1801 — DYNAMIC_COMPRESSION_DO: OriginalSize='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

DYNAMIC_COMPRESSION_DO: OriginalSize='%2',CompressedSize='%3'

Fields

NameDescription
ContextId
OriginalSize
CompressedSize

Event ID 1802 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1802 — DYNAMIC_COMPRESSION_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

DYNAMIC_COMPRESSION_END

Fields

NameDescription
ContextId

Event ID 1803 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 1803 — STATIC_COMPRESSION_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

STATIC_COMPRESSION_END

Fields

NameDescription
ContextId

Event ID 2058 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FileName
UserName
DomainName

Event ID 2058 — FILE_CACHE_ACCESS_START: FileName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILE_CACHE_ACCESS_START: FileName='%2',UserName='%3',DomainName='%4'

Fields

NameDescription
ContextId
FileName
UserName
DomainName

Event ID 2059 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Successful
FileFromCache
FileAddedToCache
FileDirmoned
LastModCheckErrorIgnored
ErrorCode
LastModifiedTime

Event ID 2059 — FILE_CACHE_ACCESS_END: Successful='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILE_CACHE_ACCESS_END: Successful='%2',FileFromCache='%3',FileAddedToCache='%4',FileDirmoned='%5',LastModCheckErrorIgnored='%6',ErrorCode='%7',LastModifiedTime='%8'

Fields

NameDescription
ContextId
Successful
FileFromCache
FileAddedToCache
FileDirmoned
LastModCheckErrorIgnored
ErrorCode
LastModifiedTime

Event ID 2060 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
RequestURL

Event ID 2060 — URL_CACHE_ACCESS_START: RequestURL='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

URL_CACHE_ACCESS_START: RequestURL='%2'

Fields

NameDescription
ContextId
RequestURL

Event ID 2061 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
PhysicalPath
URLInfoFromCache
URLInfoAddedToCache
ErrorCode

Event ID 2061 — URL_CACHE_ACCESS_END: PhysicalPath='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

URL_CACHE_ACCESS_END: PhysicalPath='%2',URLInfoFromCache='%3',URLInfoAddedToCache='%4',ErrorCode='%5'

Fields

NameDescription
ContextId
PhysicalPath
URLInfoFromCache
URLInfoAddedToCache
ErrorCode

Event ID 2062 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
HttpsysCacheable
Reason
CachePolicy
TimeToLive

Event ID 2062 — HTTPSYS_CACHEABLE: HttpsysCacheable='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

HTTPSYS_CACHEABLE: HttpsysCacheable='%2',Reason='%3',CachePolicy='%4',TimeToLive='%5'

Fields

NameDescription
ContextId
HttpsysCacheable
Reason
CachePolicy
TimeToLive

Event ID 2063 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 2063 — OUTPUT_CACHE_LOOKUP_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

OUTPUT_CACHE_LOOKUP_START

Fields

NameDescription
ContextId

Event ID 2064 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Result

Event ID 2064 — OUTPUT_CACHE_LOOKUP_END: Result='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

OUTPUT_CACHE_LOOKUP_END: Result='%2'

Fields

NameDescription
ContextId
Result

Event ID 2065 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
CachePolicy
TimeToLive

Event ID 2065 — OUTPUT_CACHE_UPDATE_START: CachePolicy='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

OUTPUT_CACHE_UPDATE_START: CachePolicy='%2',TimeToLive='%3'

Fields

NameDescription
ContextId
CachePolicy
TimeToLive

Event ID 2066 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Result

Event ID 2066 — OUTPUT_CACHE_UPDATE_END: Result='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

OUTPUT_CACHE_UPDATE_END: Result='%2'

Fields

NameDescription
ContextId
Result

Event ID 2067 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 2067 — OUTPUT_CACHE_DISABLED

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

OUTPUT_CACHE_DISABLED

Fields

NameDescription
ContextId

Event ID 2068 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
FileName
UserName
DomainName

Event ID 2068 — FILE_CACHE_CREATE_FILE: FileName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FILE_CACHE_CREATE_FILE: FileName='%2',UserName='%3',DomainName='%4'

Fields

NameDescription
ContextId
FileName
UserName
DomainName

Event ID 2305 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Notification
fIsPostNotification

Event ID 2305 — NOTIFY_MODULE_START: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

NOTIFY_MODULE_START: ModuleName='%2',Notification='%3',fIsPostNotification='%4'

Fields

NameDescription
ContextId
ModuleName
Notification
fIsPostNotification

Event ID 2306 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Notification
fIsPostNotificationEvent
NotificationStatus

Event ID 2306 — NOTIFY_MODULE_END: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

NOTIFY_MODULE_END: ModuleName='%2',Notification='%3',fIsPostNotificationEvent='%4',NotificationStatus='%5'

Fields

NameDescription
ContextId
ModuleName
Notification
fIsPostNotificationEvent
NotificationStatus

Event ID 2307 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Notification
fIsPostNotificationEvent
CompletionBytes
ErrorCode

Event ID 2307 — NOTIFY_MODULE_COMPLETION: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

NOTIFY_MODULE_COMPLETION: ModuleName='%2',Notification='%3',fIsPostNotificationEvent='%4',CompletionBytes='%5',ErrorCode='%6'

Fields

NameDescription
ContextId
ModuleName
Notification
fIsPostNotificationEvent
CompletionBytes
ErrorCode

Event ID 2308 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName

Event ID 2308 — PRE_BEGIN_REQUEST_START: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

PRE_BEGIN_REQUEST_START: ModuleName='%2'

Fields

NameDescription
ContextId
ModuleName

Event ID 2309 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
NotificationStatus

Event ID 2309 — PRE_BEGIN_REQUEST_END: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

PRE_BEGIN_REQUEST_END: ModuleName='%2',NotificationStatus='%3'

Fields

NameDescription
ContextId
ModuleName
NotificationStatus

Event ID 2319 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Notification
ErrorCode

Event ID 2319 — REQUEST_PROCESSING_ERROR: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

REQUEST_PROCESSING_ERROR: ModuleName='%2',Notification='%3',ErrorCode='%4'

Fields

NameDescription
ContextId
ModuleName
Notification
ErrorCode

Event ID 2320 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Notification
HttpStatus
HttpReason
HttpSubStatus
ErrorCode
ConfigExceptionInfo

Event ID 2320 — MODULE_SET_RESPONSE_ERROR_STATUS: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

MODULE_SET_RESPONSE_ERROR_STATUS: ModuleName='%2',Notification='%3',HttpStatus='%4',HttpReason='%5',HttpSubStatus='%6',ErrorCode='%7',ConfigExceptionInfo='%8'

Fields

NameDescription
ContextId
ModuleName
Notification
HttpStatus
HttpReason
HttpSubStatus
ErrorCode
ConfigExceptionInfo

Event ID 2321 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Notification
HttpStatus
HttpReason

Event ID 2321 — MODULE_SET_RESPONSE_SUCCESS_STATUS: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

MODULE_SET_RESPONSE_SUCCESS_STATUS: ModuleName='%2',Notification='%3',HttpStatus='%4',HttpReason='%5'

Fields

NameDescription
ContextId
ModuleName
Notification
HttpStatus
HttpReason

Event ID 2322 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorDescription

Event ID 2322 — SET_RESPONSE_ERROR_DESCRIPTION: ErrorDescription='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

SET_RESPONSE_ERROR_DESCRIPTION: ErrorDescription='%2'

Fields

NameDescription
ContextId
ErrorDescription

Event ID 2561 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2561 — MODULE_START: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

MODULE_START: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2562 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2562 — MODULE_END: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

MODULE_END: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2563 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2563 — MODULE_CRITICAL_ERROR: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

MODULE_CRITICAL_ERROR: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2564 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2564 — MODULE_ERROR: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

MODULE_ERROR: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2565 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2565 — MODULE_WARNING: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

MODULE_WARNING: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2566 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2566 — MODULE_INFORMATION: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

MODULE_INFORMATION: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2567 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 2567 — MODULE_VERBOSE: ModuleName='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

MODULE_VERBOSE: ModuleName='%2',Data1='%3',Data2='%4',ErrorCode='%5'

Fields

NameDescription
ContextId
ModuleName
Data1
Data2
ErrorCode

Event ID 3329 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3329 — FASTCGI_ACTIVITY_TIMEOUT

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_ACTIVITY_TIMEOUT

Fields

NameDescription
ContextId

Event ID 3330 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3330 — FASTCGI_REQUEST_TIMEOUT

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_REQUEST_TIMEOUT

Fields

NameDescription
ContextId

Event ID 3331 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3331 — FASTCGI_UNEXPECTED_EXIT

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_UNEXPECTED_EXIT

Fields

NameDescription
ContextId

Event ID 3332 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3332 — FASTCGI_RAPID_FAILURE_PROTECTION

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_RAPID_FAILURE_PROTECTION

Fields

NameDescription
ContextId

Event ID 3333 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3333 — FASTCGI_PATH_NOT_FOUND

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_PATH_NOT_FOUND

Fields

NameDescription
ContextId

Event ID 3334 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3334 — FASTCGI_SCRIPT_PROCESSOR_MISSING

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_SCRIPT_PROCESSOR_MISSING

Fields

NameDescription
ContextId

Event ID 3335 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3335 — FASTCGI_ADD_JOBOBJECT_FAIL

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_ADD_JOBOBJECT_FAIL

Fields

NameDescription
ContextId

Event ID 3336 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3336 — FASTCGI_APPLICATION_MANAGER_SHUTDOWN

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_APPLICATION_MANAGER_SHUTDOWN

Fields

NameDescription
ContextId

Event ID 3337 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3337 — FASTCGI_QUEUE_FULL

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_QUEUE_FULL

Fields

NameDescription
ContextId

Event ID 3338 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 3338 — FASTCGI_UNKNOWN_ERROR: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_UNKNOWN_ERROR: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 3339 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3339 — FASTCGI_RESPONSE_WRITTEN

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_RESPONSE_WRITTEN

Fields

NameDescription
ContextId

Event ID 3340 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3340 — FASTCGI_WAITING_FOR_RESPONSE

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_WAITING_FOR_RESPONSE

Fields

NameDescription
ContextId

Event ID 3341 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Message

Event ID 3341 — FASTCGI_STDERR_TRACE_ERROR: Message='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_STDERR_TRACE_ERROR: Message='%2'

Fields

NameDescription
ContextId
Message

Event ID 3342 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Message

Event ID 3342 — FASTCGI_STDERR_TRACE_WARNING: Message='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_STDERR_TRACE_WARNING: Message='%2'

Fields

NameDescription
ContextId
Message

Event ID 3343 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Message

Event ID 3343 — FASTCGI_STDERR_TRACE_INFO: Message='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_STDERR_TRACE_INFO: Message='%2'

Fields

NameDescription
ContextId
Message

Event ID 3344 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
PositionInQueue
MaxInstances

Event ID 3344 — FASTCGI_QUEUE_REQUEST: PositionInQueue='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_QUEUE_REQUEST: PositionInQueue='%2',MaxInstances='%3'

Fields

NameDescription
ContextId
PositionInQueue
MaxInstances

Event ID 3345 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
CommandLine
IsNewProcess
ProcessId
RequestNumber

Event ID 3345 — FASTCGI_ASSIGN_PROCESS: CommandLine='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_ASSIGN_PROCESS: CommandLine='%2',IsNewProcess='%3',ProcessId='%4',RequestNumber='%5'

Fields

NameDescription
ContextId
CommandLine
IsNewProcess
ProcessId
RequestNumber

Event ID 3346 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3346 — FASTCGI_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_START

Fields

NameDescription
ContextId

Event ID 3347 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3347 — FASTCGI_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

FASTCGI_END

Fields

NameDescription
ContextId

Event ID 3585 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3585 — ISAPI_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

ISAPI_START

Fields

NameDescription
ContextId

Event ID 3586 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3586 — ISAPI_END

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

ISAPI_END

Fields

NameDescription
ContextId

Event ID 3841 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 3841 — WEBSOCKET_INITIALIZE_FAILED: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_INITIALIZE_FAILED: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 3842 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3842 — WEBSOCKET_HANDSHAKE_START

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_HANDSHAKE_START

Fields

NameDescription
ContextId

Event ID 3843 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3843 — WEBSOCKET_HANDSHAKE_SUCCESS

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_HANDSHAKE_SUCCESS

Fields

NameDescription
ContextId

Event ID 3844 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 3844 — WEBSOCKET_HANDSHAKE_NOT_SUCCESS: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_HANDSHAKE_NOT_SUCCESS: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 3845 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
BufferSize

Event ID 3845 — WEBSOCKET_READ_FRAGMENT_START: BufferSize='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_READ_FRAGMENT_START: BufferSize='%2'

Fields

NameDescription
ContextId
BufferSize

Event ID 3846 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3846 — WEBSOCKET_READ_FRAGMENT_END_PENDING

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_READ_FRAGMENT_END_PENDING

Fields

NameDescription
ContextId

Event ID 3847 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
BytesReceived

Event ID 3847 — WEBSOCKET_READ_FRAGMENT_END_SUCCESS: BytesReceived='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_READ_FRAGMENT_END_SUCCESS: BytesReceived='%2'

Fields

NameDescription
ContextId
BytesReceived

Event ID 3848 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 3848 — WEBSOCKET_READ_FRAGMENT_END_NOT_SUCCESS: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_READ_FRAGMENT_END_NOT_SUCCESS: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 3849 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
DataType
DataSize

Event ID 3849 — WEBSOCKET_WRITE_FRAGMENT_START: DataType='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_WRITE_FRAGMENT_START: DataType='%2',DataSize='%3'

Fields

NameDescription
ContextId
DataType
DataSize

Event ID 3850 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3850 — WEBSOCKET_WRITE_FRAGMENT_END_PENDING

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_WRITE_FRAGMENT_END_PENDING

Fields

NameDescription
ContextId

Event ID 3851 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
BytesSent

Event ID 3851 — WEBSOCKET_WRITE_FRAGMENT_END_SUCCESS: BytesSent='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_WRITE_FRAGMENT_END_SUCCESS: BytesSent='%2'

Fields

NameDescription
ContextId
BytesSent

Event ID 3852 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 3852 — WEBSOCKET_WRITE_FRAGMENT_END_NOT_SUCCESS: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_WRITE_FRAGMENT_END_NOT_SUCCESS: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 3853 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3853 — WEBSOCKET_APPLICATION_CLOSE_CONNECTION

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_APPLICATION_CLOSE_CONNECTION

Fields

NameDescription
ContextId

Event ID 3854 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Reason

Event ID 3854 — WEBSOCKET_MODULE_CLOSE_CONNECTION: Reason='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_MODULE_CLOSE_CONNECTION: Reason='%2'

Fields

NameDescription
ContextId
Reason

Event ID 3855 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 3855 — WEBSOCKET_READ_IO_NOT_SUCCESS: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_READ_IO_NOT_SUCCESS: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 3856 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 3856 — WEBSOCKET_WRITE_IO_NOT_SUCCESS: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_WRITE_IO_NOT_SUCCESS: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode

Event ID 3857 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Status
Reason

Event ID 3857 — WEBSOCKET_RECEIVED_CLOSE: Status='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_RECEIVED_CLOSE: Status='%2',Reason='%3'

Fields

NameDescription
ContextId
Status
Reason

Event ID 3858 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
Status
Reason

Event ID 3858 — WEBSOCKET_SEND_CLOSE_START: Status='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_SEND_CLOSE_START: Status='%2',Reason='%3'

Fields

NameDescription
ContextId
Status
Reason

Event ID 3859 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId

Event ID 3859 — WEBSOCKET_SEND_CLOSE_END_SUCCESS

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_SEND_CLOSE_END_SUCCESS

Fields

NameDescription
ContextId

Event ID 3860 —

Provider
Microsoft-Windows-IIS
Channel
Operational

Fields

NameDescription
ContextId
ErrorCode

Event ID 3860 — WEBSOCKET_SEND_CLOSE_END_NOT_SUCCESS: ErrorCode='.

Provider
Microsoft-Windows-IIS
Channel
Diagnostic

Message

WEBSOCKET_SEND_CLOSE_END_NOT_SUCCESS: ErrorCode='%2'

Fields

NameDescription
ContextId
ErrorCode