Microsoft-Windows-KeyboardFilter
56 events across 3 channels
Event ID 10001 — The Keyboard Filter Service was unable to obtain the session token from the session id: %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10002 — The Keyboard Filter Service was unable to obtain access to Terminal Services: %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10003 — Could not obtain a lock on local policy settings for update detection, %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10004 — Could not update keyboard filter subsystem, %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10005 — The Keyboard Filter Service could not start session monitor.
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10006 — Session Manager handle to Keyboard Filter process was abandoned.
Message
Event ID 10007 — The Keyboard Filter Service failed to launch hook process.
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10008 — 'sdbinst -q' has probably failed, exit code of.
Message
Fields
| Name | Description |
|---|---|
SdbPath | — |
ExitCode | — |
Event ID 10009 — Unsupported.
Message
Event ID 10010 — Keyboard Filter Driver could not start and has unloaded.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Reason | — |
Event ID 10011 — The Keyboard Filter Driver could not attach to keyboard.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Reason | — |
Event ID 10012 — The Keyboard Filter Driver could not properly filter keystroke information.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Reason | — |
Event ID 10013 — The Keyboard Filter Driver could not update filter configuration.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Reason | — |
Event ID 10014 — A non-empty list of keyboard filter rules resulted in an empty scancode list.
Message
Event ID 10015 — Error was returned when trying to transform a keyboard filter rule to a scancode.
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10016 — Attempting to launch the keyboard filter hook process.
Message
Event ID 10050 — Failed to attach session %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10051 — Failed to detach session %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10052 — Missing Breakout keycode
Message
Event ID 10053 — IOCTLReadBreakoutKeyFailed %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10054 — CreateResources failed %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10055 — RPC initialization failed %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10056 — BreakoutKey thread launch failure %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10057 — Run failed while waiting on handles %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10058 — Set KeyboardLayout failed %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10059 — RegisterDeviceNotification failed %1 (%2).
Message
Fields
| Name | Description |
|---|---|
Message | — |
ErrorCode | — |
Event ID 10101 — The Keyboard Filter Service has Started
Message
Event ID 10102 — The Keyboard Filter Service has stopped
Message
Event ID 10103 — Generic Keyboard Filter Service message.
Message
Fields
| Name | Description |
|---|---|
Generic_Keyboard_Filter_Service_message | — |
Command | — |
Event ID 10104 — 'sdbinst -q' executed, exit code
Message
Fields
| Name | Description |
|---|---|
SdbPath | — |
ExitCode | — |
Event ID 10201 — Administrator user %1 is now logged on, keyboard filtering is disabled for this session.
Message
Fields
| Name | Description |
|---|---|
UserName | — |
Event ID 10202 — User %1 logged off.
Message
Fields
| Name | Description |
|---|---|
UserName | — |
Event ID 10203 — User %1 logged off.
Message
Fields
| Name | Description |
|---|---|
UserName | — |
Event ID 10204 — User %1 is now logged on.
Message
Fields
| Name | Description |
|---|---|
UserName | — |
Event ID 10205 — The Keyboard Filter Service has detected Policy changes and is reloading them
Message
Event ID 10206 — The Keyboard Filter Service has detected a layout change to %1.
Message
Fields
| Name | Description |
|---|---|
Layout | — |
Event ID 10207 — The Keyboard Filter Service has found the following enabled policies.
Message
Fields
| Name | Description |
|---|---|
Count | — |
Policy | — |
Event ID 10208 — The Keyboard Filter Service is sending scancodes to the Filter Driver.
Message
Fields
| Name | Description |
|---|---|
Count | — |
KeyData | — |
Event ID 10301 — A custom filter appears to have an invalid modifier (system) key.
Message
Fields
| Name | Description |
|---|---|
Filter | — |
Event ID 10302 — A custom filter appears to have an invalid key.
Message
Fields
| Name | Description |
|---|---|
Filter | — |
Event ID 10303 — A custom filter appears to be invalid.
Message
Fields
| Name | Description |
|---|---|
Filter | — |
Event ID 10304 — Too many custom filters have been enabled.
Message
Fields
| Name | Description |
|---|---|
Maximum | — |