detection.wiki

Microsoft-Windows-Kernel-Cache › Event 105

Event ID 105 — Volume Periodic Cache Write Latency Information.

Provider
Microsoft-Windows-Kernel-Cache
Channel
Operational
Level
Informational
Task
CacheVolumeWriteLatencies

Description

Volume Periodic Cache Write Latency Information.

Message #

Volume Periodic Cache Write Latency Information:

                       Device GUID: %1
                       Period Duration (microseconds): %2

                       Latency Bucket Values:  [256us, 1ms, 4ms, 16ms, 64ms, 128ms, 256ms, 2000ms, 6000ms, 10000ms, 20000ms, 20000+ms]

                       Synchronous Write IO Counts: [%3, %4, %5, %6, %7, %8, %9, %10, %11, %12, %13, %14]
                       Synchronous Write IO Total Latencies (us): [%15, %16, %17, %18, %19, %20, %21, %22, %23, %24, %25, %26]
                       Synchronous Write Non-Blocking IO Counts: [%27, %28, %29, %30, %31, %32, %33, %34, %35, %36, %37, %38]
                       Synchronous Write Non-Blocking IO Total Latencies (us): [%39, %40, %41, %42, %43, %44, %45, %46, %47, %48, %49, %50]

Fields #

NameDescription
VolumeDeviceGuid GUID[Volume Periodic Cache Write Latency Information] Device GUID.
PeriodDurationMicroSec UInt64[Volume Periodic Cache Write Latency Information] Period Duration (microseconds).
SynchronousWriteIoCountsBucket1 UInt64—
SynchronousWriteIoCountsBucket2 UInt64—
SynchronousWriteIoCountsBucket3 UInt64—
SynchronousWriteIoCountsBucket4 UInt64—
SynchronousWriteIoCountsBucket5 UInt64—
SynchronousWriteIoCountsBucket6 UInt64—
SynchronousWriteIoCountsBucket7 UInt64—
SynchronousWriteIoCountsBucket8 UInt64—
SynchronousWriteIoCountsBucket9 UInt64—
SynchronousWriteIoCountsBucket10 UInt64—
SynchronousWriteIoCountsBucket11 UInt64—
SynchronousWriteIoCountsBucket12 UInt64—
SynchronousWriteTotalLatencyBucket1 UInt64—
SynchronousWriteTotalLatencyBucket2 UInt64—
SynchronousWriteTotalLatencyBucket3 UInt64—
SynchronousWriteTotalLatencyBucket4 UInt64—
SynchronousWriteTotalLatencyBucket5 UInt64—
SynchronousWriteTotalLatencyBucket6 UInt64—
SynchronousWriteTotalLatencyBucket7 UInt64—
SynchronousWriteTotalLatencyBucket8 UInt64—
SynchronousWriteTotalLatencyBucket9 UInt64—
SynchronousWriteTotalLatencyBucket10 UInt64—
SynchronousWriteTotalLatencyBucket11 UInt64—
SynchronousWriteTotalLatencyBucket12 UInt64—
SynchronousWriteNonBlockingIoCountsBucket1 UInt64—
SynchronousWriteNonBlockingIoCountsBucket2 UInt64—
SynchronousWriteNonBlockingIoCountsBucket3 UInt64—
SynchronousWriteNonBlockingIoCountsBucket4 UInt64—
SynchronousWriteNonBlockingIoCountsBucket5 UInt64—
SynchronousWriteNonBlockingIoCountsBucket6 UInt64—
SynchronousWriteNonBlockingIoCountsBucket7 UInt64—
SynchronousWriteNonBlockingIoCountsBucket8 UInt64—
SynchronousWriteNonBlockingIoCountsBucket9 UInt64—
SynchronousWriteNonBlockingIoCountsBucket10 UInt64—
SynchronousWriteNonBlockingIoCountsBucket11 UInt64—
SynchronousWriteNonBlockingIoCountsBucket12 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket1 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket2 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket3 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket4 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket5 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket6 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket7 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket8 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket9 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket10 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket11 UInt64—
SynchronousWriteNonBlockingTotalLatencyBucket12 UInt64—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-Kernel-Cache",
    "guid": "A2D34BF1-70AB-5B21-C819-5A0DD42748FD",
    "event_source_name": "",
    "event_id": 105,
    "version": 1,
    "level": 4,
    "task": 105,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2023-11-06T01:55:43.038619+00:00",
    "event_record_id": 104,
    "correlation": {},
    "execution": {
      "process_id": 4,
      "thread_id": 20724
    },
    "channel": "Microsoft-Windows-Kernel-Cache/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "VolumeDeviceGuid": "00000000-0000-0000-0000-000000000000",
    "PeriodDurationMicroSec": 3644934575,
    "SynchronousWriteIoCountsBucket1": 0,
    "SynchronousWriteIoCountsBucket2": 0,
    "SynchronousWriteIoCountsBucket3": 0,
    "SynchronousWriteIoCountsBucket4": 0,
    "SynchronousWriteIoCountsBucket5": 0,
    "SynchronousWriteIoCountsBucket6": 0,
    "SynchronousWriteIoCountsBucket7": 0,
    "SynchronousWriteIoCountsBucket8": 0,
    "SynchronousWriteIoCountsBucket9": 0,
    "SynchronousWriteIoCountsBucket10": 0,
    "SynchronousWriteIoCountsBucket11": 0,
    "SynchronousWriteIoCountsBucket12": 0,
    "SynchronousWriteTotalLatencyBucket1": 0,
    "SynchronousWriteTotalLatencyBucket2": 0,
    "SynchronousWriteTotalLatencyBucket3": 0,
    "SynchronousWriteTotalLatencyBucket4": 0,
    "SynchronousWriteTotalLatencyBucket5": 0,
    "SynchronousWriteTotalLatencyBucket6": 0,
    "SynchronousWriteTotalLatencyBucket7": 0,
    "SynchronousWriteTotalLatencyBucket8": 0,
    "SynchronousWriteTotalLatencyBucket9": 0,
    "SynchronousWriteTotalLatencyBucket10": 0,
    "SynchronousWriteTotalLatencyBucket11": 0,
    "SynchronousWriteTotalLatencyBucket12": 0,
    "SynchronousWriteNonBlockingIoCountsBucket1": 0,
    "SynchronousWriteNonBlockingIoCountsBucket2": 0,
    "SynchronousWriteNonBlockingIoCountsBucket3": 0,
    "SynchronousWriteNonBlockingIoCountsBucket4": 0,
    "SynchronousWriteNonBlockingIoCountsBucket5": 0,
    "SynchronousWriteNonBlockingIoCountsBucket6": 0,
    "SynchronousWriteNonBlockingIoCountsBucket7": 0,
    "SynchronousWriteNonBlockingIoCountsBucket8": 0,
    "SynchronousWriteNonBlockingIoCountsBucket9": 0,
    "SynchronousWriteNonBlockingIoCountsBucket10": 0,
    "SynchronousWriteNonBlockingIoCountsBucket11": 0,
    "SynchronousWriteNonBlockingIoCountsBucket12": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket1": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket2": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket3": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket4": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket5": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket6": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket7": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket8": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket9": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket10": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket11": 0,
    "SynchronousWriteNonBlockingTotalLatencyBucket12": 0
  },
  "message": ""
}

References #