Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-IIS-W3SVC-WP",
    "guid": "{670080D9-742A-4187-8D16-41143D1290BD}",
    "event_source_name": "W3SVC-WP",
    "event_id": 2303,
    "version": 0,
    "level": 3,
    "task": 0,
    "opcode": 0,
    "keywords": 36028797018963968,
    "time_created": "2026-03-13T22:03:09.716729+00:00",
    "event_record_id": 3944,
    "correlation": {},
    "execution": {
      "process_id": 0,
      "thread_id": 0
    },
    "channel": "Application",
    "computer": "LAB-DC01.ludus.domain",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "ApplicationPool": "DefaultAppPool",
    "Binary": "02000780"
  },
  "message": ""
}

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Fields #

Message #

For compatibility with previous versions of IIS, the filter '%1' was loaded as a global filter from the registry. To control the filter with the Internet Service Manager, remove the filter from the registry and add it as a global filter with Internet Service Manager.  Filters in the registry are stored at "HKLM\System\CurrentControlSet\Services\W3Svc\Parameters\Filter DLLs".

Message #

A worker process with process id of '%1' serving application pool '%2' paged out due to inactivity. Application Pool timeout-action configuration was set to %3 minutes. A worker process will resume when needed.

Description

The server was unable to read the file due to a lack of access permissions.

Message #

The server was unable to read the file %1 due to a lack of access permissions.

Description

The server stop serving requests for application '%1' because the number of Out of Process component crashes exceed a limit.

Message #

The server stop serving requests for application '%1' because the number of Out of Process component crashes exceed a limit.

Description

The server failed to shut down application '%1'. The error was '%2'.

Message #

The server failed to shut down application '%1'.  The error was '%2'.

Description

The server was unable to read the file . The file does not exist.

Message #

The server was unable to read the file %1. The file does not exist.

Description

The server was unable to read the file . The Windows 32 error returned from the attempt is .

Message #

The server was unable to read the file %1. The Windows 32 error returned from the attempt is %2.

Description

The server was unable to read the file . The file exceeds the maximum allowable size of .

Message #

The server was unable to read the file %1. The file exceeds the maximum allowable size of %2.

Description

The server was unable to allocate a buffer to read the file .

Message #

The server was unable to allocate a buffer to read the file %1.

Description

The server failed to load application '%1'. The error was '%2'.

Message #

The server failed to load application '%1'.  The error was '%2'.

Description

Out of process application '%1' terminated unexpectedly.

Message #

Out of process application '%1' terminated unexpectedly.

Description

Site '%1' hit its CPU Limit. No action was taken.

Message #

Site '%1' hit its CPU Limit. No action was taken.

Description

Site '%1' hit its CPU Limit. The priority of all process on that site has been lowered to idle class.

Message #

Site '%1' hit its CPU Limit. The priority of all process on that site has been lowered to idle class.

Description

Site '%1' hit its CPU Limit. All processes on that site have been terminated.

Message #

Site '%1' hit its CPU Limit. All processes on that site have been terminated.

Description

Site '%1' hit its CPU Limit. The site has been paused.

Message #

Site '%1' hit its CPU Limit. The site has been paused.

Description

The server certificate for instance '%1' has expired or is not yet valid.

Message #

The server certificate for instance '%1' has expired or is not yet valid.

Description

The server certificate for instance '%1' has been revoked.

Message #

The server certificate for instance '%1' has been revoked.

Description

The server certificate chain does not include a trusted root certificate.

Message #

The server certificate chain does not include a trusted root certificate.

Description

A certificate in the server certificate chain has an invalid signature.

Message #

A certificate in the server certificate chain has an invalid signature.

Description

CPU Limits/Accounting failed to queue work item. The data is the error.

Message #

CPU Limits/Accounting failed to queue work item. The data is the error.

Description

The World Wide Web Publishing Service (WWW Service) could not retrieve the server certificate for instance '%1' because the associated IIS configuration store data is invalid. The error is '%2'.

Message #

The World Wide Web Publishing Service (WWW Service) could not retrieve the server certificate for instance '%1' because the associated IIS configuration store data is invalid. The error is '%2'.

Description

The World Wide Web Publishing Service (WWW Service) did not retrieve the server certificate for instance '%1' because of a CryptoAPI error. The error is '%2'.

Message #

The World Wide Web Publishing Service (WWW Service) did not retrieve the server certificate for instance '%1' because of a CryptoAPI error. The error is '%2'.

Description

The World Wide Web Publishing Service (WWW Service) did not retrieve the server certificate for instance '%1' because the certificate could not be found in a certificate store. The error is '%2'.

Message #

The World Wide Web Publishing Service (WWW Service) did not retrieve the server certificate for instance '%1' because the certificate could not be found in a certificate store. The error is '%2'.

Description

The World Wide Web Publishing Service (WWW Service) did not retrieve the server certificate for instance '%1' because of an internal error. The error is '%2'.

Message #

The World Wide Web Publishing Service (WWW Service) did not retrieve the server certificate for instance '%1' because of an internal error. The error is '%2'.

Description

The server Certificate Trust List for instance '%1' had invalid IIS configuration store data associated with it and could not be retrieved; the error encountered was '%2'.

Message #

The server Certificate Trust List for instance '%1' had invalid IIS configuration store data associated with it and could not be retrieved; the error encountered was '%2'.

Description

The World Wide Web Publishing Service (WWW Service) failed to retrieve the server Certificate Trust List for instance '%1' because of a CryptoAPI error. The error is '%2'.

Message #

The World Wide Web Publishing Service (WWW Service) failed to retrieve the server Certificate Trust List for instance '%1' because of a CryptoAPI error. The error is '%2'.

Description

The World Wide Web Publishing Service (WWW Service) did not retrieve the server Certificate Trust List for instance '%1' because it could not be found in the certificate store. The error is '%2'.

Message #

The World Wide Web Publishing Service (WWW Service) did not retrieve the server Certificate Trust List for instance '%1' because it could not be found in the certificate store. The error is '%2'.

Description

The World Wide Web Publishing Service (WWW Service) did not retrieve the server certificate for instance '%1' because of an internal error. The error is %2.

Message #

The World Wide Web Publishing Service (WWW Service) did not retrieve the server certificate for instance '%1' because of an internal error. The error is %2.

Description

The server failed to close client connections to the following URLs during shutdown: '%1'.

Message #

The server failed to close client connections to the following URLs during shutdown:  '%1'.

Description

ISAPI '%1' reported itself as unhealthy for the following reason: '%2'.

Message #

ISAPI '%1' reported itself as unhealthy for the following reason: '%2'.

Description

ISAPI '%1' reported itself as unhealthy. No reason was given by the ISAPI.

Message #

ISAPI '%1' reported itself as unhealthy.  No reason was given by the ISAPI.

Description

The directory specified for caching compressed content is invalid. Static compression is being disabled.

Message #

The directory specified for caching compressed content %1 is invalid.  Static compression is being disabled.

Description

The registry key for IIS subauthenticator is not configured correctly on local machine, the anonymous password sync feature is disabled.

Message #

The registry key for IIS subauthenticator is not configured correctly on local machine, the anonymous password sync feature is disabled.

Description

The account that the current worker process is running under does not have SeTcbPrivilege privilege, the anonymous password sync feature and the Digest authentication feature are disabled.

Message #

The account that the current worker process is running under does not have SeTcbPrivilege privilege, the anonymous password sync feature and the Digest authentication feature are disabled.

Description

The registry key for IIS subauthenticator is not configured correctly on domain controller, the Digest feature is disabled.

Message #

The registry key for IIS subauthenticator is not configured correctly on domain controller, the Digest feature is disabled.

Description

Worker process could not access IIS configuration store due to disconnection error. Marking process as unhealthy.

Message #

Worker process could not access IIS configuration store due to disconnection error.  Marking process as unhealthy.

Description

ETW Tracing support failed to intialize. Execution of IIS will continue although ETW Tracing support (or parts of it) will not be available. The data is the error.

Message #

ETW Tracing support failed to intialize. Execution of IIS will continue although ETW Tracing support (or parts of it) will not be available. The data is the error.

Description

FailedRequestTracing module failed to create directory ''. No logs will be generated until this condition is corrected. The problem happened at least times in the last minutes. The data is the error.

Message #

FailedRequestTracing module failed to create directory '%3'. No logs will be generated until this condition is corrected. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Message #

FailedRequestTracing module failed to write buffered events to log file for the request that matched failure definition. No logs will be generated until this condition is corrected. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Message #

FailedRequestTracing module detected invalid configuration on path '%4'. Trace provider or tracing area name '%3' is not recognized. Check the <traceProviderDefinitions> section for currently supported list or providers and areas. No logs will be generated until this condition is corrected. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Message #

FailedRequestTracing module detected invalid configuration on path '%4'. Attribute "statusCode" contains invalid value '%3'. Examples of valid status are '404' or '403.1'. No logs will be generated until this condition is corrected. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Message #

FailedRequestTracing module encountered problem while reading configuration. Configuration system returned exception '%3' in file %4 on line %5. No logs will be generated until this condition is corrected. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Message #

FailedRequestTracing module encountered problem while reading configuration. No logs will be generated until this condition is corrected. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Description

FailedRequestTracing Module failed to delete at least one log file from the directory '%3'. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Message #

FailedRequestTracing Module failed to delete at least one log file from the directory '%3'. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Description

FailedRequestTracing module encountered runtime error. The problem happened at least times in the last minutes. The data is the error.

Message #

FailedRequestTracing module encountered runtime error. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Message #

FailedRequestTracing module detected invalid configuration on path '%4'. Attribute "guid" in <traceProviderDefinitions> section contains invalid value '%3'. No logs will be generated until this condition is corrected. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Description

FailedRequestTracing module failed to create XSL file '. Friendly rendering of log files will not be available. The problem happened at least times in the last minutes. The data is the error.

Message #

FailedRequestTracing module failed to create XSL file '%3. Friendly rendering of log files will not be available. The problem happened at least %1 times in the last %2 minutes. The data is the error.

Description

The worker process failed to pre-load .Net Runtime version {CLRRunTimeVersion}.

Message #

The worker process failed to pre-load .Net Runtime version {CLRRunTimeVersion}.

Fields #

Description

The globalModules list is empty. No requests can be served successfully.

Message #

The globalModules list is empty. No requests can be served successfully.

Description

The worker process cannot access the CLR configuration file at '%1'. Verify that the file exists and that the worker process has read access to the file.

Message #

The worker process cannot access the CLR configuration file at '%1'.  Verify that the file exists and that the worker process has read access to the file.

Message #

There was an error during processing of the HTTP Application Preload event.  Modules and/or applications relying upon this event may not have been initialized properly.  The data field contains the error code.

Message #

There was an error during processing of the managed application service auto-start for application pool: '%1'.  Some application services may not have been processed correctly.  Please check the configuration for application service auto-start for the application(s) assigned to this application pool.  The data field contains the error code.

Message #

There was an error during processing of the managed application service auto-start for application pool: '%1'.  The configured .Net Framework for this application pool doesn't support managed application services.  As a result, no managed application service auto-start has been completed.  To resolve this issue, please change the .Net Framework version configured for this application pool to one that supports managed application service.  The data field contains the error code.

Message #

There was an error during processing of the managed application service auto-start for application pool: '%1'.  The loading of application service provider objects is not supported if the pipeline mode is set to 'Classic' mode.  As a result, no managed application service auto-start has been completed.  To resolve this issue, please change the pipeline mode for this application pool to 'Integrated' mode.  The data field contains the error code.

Description

HTTP Server could not initialize its security. The data is the error.

Message #

HTTP Server could not initialize its security.  The data is the error.

Description

HTTP Server could not initialize the socket library. The data is the error.

Message #

HTTP Server could not initialize the socket library.  The data is the error.

Description

HTTP Server was unable to initialize due to a shortage of available memory. The data is the error.

Message #

HTTP Server was unable to initialize due to a shortage of available memory.  The data is the error.

Description

HTTP Server could not create the main connection socket. The data is the error.

Message #

HTTP Server could not create the main connection socket.  The data is the error.

Description

HTTP Server could not create a client connection object for user at host . The connection to this user is terminated. The data is the error.

Message #

HTTP Server could not create a client connection object for user at host %1.  The connection to this user is terminated.  The data is the error.

Description

The HTTP Filter DLL failed to load. The data is the error.

Message #

The HTTP Filter DLL %1 failed to load.  The data is the error.

Description

The script started from the URL '%1' has not responded within the configured timeout period. The HTTP server is terminating the script.

Message #

The script started from the URL '%1' has not responded within the configured timeout period.  The HTTP server is terminating the script.

Description

The HTTP server encountered an error processing the server side include file '%1'.<BR>The error was '%2'.<BR>.

Message #

The HTTP server encountered an error processing the server side include file '%1'.<BR>The error was '%2'.<BR>

Description

The HTTP server encountered an unhandled exception while processing the ISAPI Application '%1'.

Message #

The HTTP server encountered an unhandled exception while processing the ISAPI Application '%1'.

Description

The HTTP server was unable to load the ISAPI Application '%1'. The data is the error.

Message #

The HTTP server was unable to load the ISAPI Application '%1'. The data is the error.

Description

A server side include file has included itself or the maximum depth of server side includes has been exceeded.

Message #

A server side include file has included itself or the maximum depth of server side includes has been exceeded.

Description

The server was unable to acquire a license for a SSL connection.

Message #

The server was unable to acquire a license for a SSL connection.

Description

Job object query failed. The data is the error.

Message #

Job object query failed. The data is the error.

Description

Job object set limit failed. The data is the error.

Message #

Job object set limit failed. The data is the error.

Description

Schedule a work item for CPU Accounting or Limits failed. The data is the error.

Message #

Schedule a work item for CPU Accounting or Limits failed. The data is the error.

Description

The COM Application '%1' at '%2' failed to activate out of process.

Message #

The COM Application '%1' at '%2' failed to activate out of process.

Description

An attempt was made to load filter '%1' but it requires the SF_NOTIFY_READ_RAW_DATA filter notification and this notification is not supported in this IIS version.

Message #

An attempt was made to load filter '%1' but it requires the SF_NOTIFY_READ_RAW_DATA filter notification and this notification is not supported in this IIS version.

Description

Could not load all ISAPI filters for site '%1'. Therefore site startup aborted.

Message #

Could not load all ISAPI filters for site '%1'.  Therefore site startup aborted.

Message #

The worker process for app pool '%1', PID='%2', failed to initialize the http.sys communication when asked to start processing http requests and therefore will be considered ill by W3SVC and terminated.  The data field contains the error number.

Description

IIS Client certificate mapping configuration for site failed to be loaded. The data field contains the error number.

Message #

IIS Client certificate mapping configuration for site %1 failed to be loaded. The data field contains the error number.

Description

Could not initialize the logging module for site . The site will therefore be non-functional.

Message #

Could not initialize the logging module for site %1.  The site will therefore be non-functional.

Message #

ISAPI Filter '%1' could not be loaded due to a configuration problem. The current configuration only supports loading images built for a %2 processor architecture. The data field contains the error number. To learn more about this issue, including how to troubleshooting this kind of processor architecture mismatch error, see http://go.microsoft.com/fwlink/?LinkId=29349.

Description

The worker process failed to initialize correctly and therefore could not be started. The data is the error.

Message #

The worker process failed to initialize correctly and therefore could not be started.  The data is the error.

Description

The Module DLL failed to load. The data is the error.

Message #

The Module DLL %1 failed to load.  The data is the error.

Description

The worker process failed to initialize communication with the W3SVC and therefore could not be started. The data is the error.

Message #

The worker process failed to initialize communication with the W3SVC and therefore could not be started.  The data is the error.

Message #

The Module DLL '%1' could not be loaded due to a configuration problem. The current configuration only supports loading images built for a %2 processor architecture. The data field contains the error number. To learn more about this issue, including how to troubleshooting this kind of processor architecture mismatch error, see http://go.microsoft.com/fwlink/?LinkId=29349.

Description

The Module name path returned an error from registration. The data is the error.

Message #

The Module name %1 path %2 returned an error from registration.  The data is the error.

Description

The worker process failed to pre-load .Net Runtime version .

Message #

The worker process failed to pre-load .Net Runtime version %1.

Description

Failed to find the RegisterModule entrypoint in the module DLL . The data is the error.

Message #

Failed to find the RegisterModule entrypoint in the module DLL %1.  The data is the error.

Description

The Module name '%1' path '%2' has an invalid precondition '%3'.

Message #

The Module name '%1' path '%2' has an invalid precondition '%3'.

Description

The worker process for application pool '%1' encountered an error '%2' trying to read global module configuration data from file '%3', line number '%4'. Worker process startup aborted.

Message #

The worker process for application pool '%1' encountered an error '%2' trying to read global module configuration data from file '%3', line number '%4'.  Worker process startup aborted.

Description

An application has reported as being unhealthy. The worker process will now request a recycle. Reason given: . The data is the error.

Message #

An application has reported as being unhealthy. The worker process will now request a recycle. Reason given: %1. The data is the error.

Message #

There was an error during processing of the managed application service auto-start for configuration path: '%1'. The error message returned is: '%2'.  The worker process will be marked unhealthy and be shutdown.  The data field contains the error code.

Description

There was an unexpected error during the loading of managed runtime version: '%1'. The managed runtime loader '%2' was unable to load the managed runtime. The data field contains the error code.

Message #

There was an unexpected error during the loading of managed runtime version: '%1'.  The managed runtime loader '%2' was unable to load the managed runtime.  The data field contains the error code.

Description

The worker process for application pool '%1' encountered an error '%2' trying to read configuration data from file '%3', line number '%4'. The data field contains the error code.

Message #

The worker process for application pool '%1' encountered an error '%2' trying to read configuration data from file '%3', line number '%4'.  The data field contains the error code.

Description

The loghttp module in the worker process with id '%2' could not obtain custom log data for '%1' requests. The data field contains the error code.

Message #

The loghttp module in the worker process with id '%2' could not obtain custom log data for '%1' requests. The data field contains the error code.

Description

The loghttp module in the worker process with id '%2' removed custom log data for '%1' request(s) which was not claimed by the W3C Logging Service.

Message #

The loghttp module in the worker process with id '%2' removed custom log data for '%1' request(s) which was not claimed by the W3C Logging Service.

Message #

The worker process for application pool '%1', PID='%2', failed to duplicate the request queue handle and therefore will not be able to provide transport-level telemetry data during request processing.  The data field contains the error number.