Microsoft-Windows-Narrator
231 events across 1 channel
Event ID 1: LaunchAppStart
#Event ID 2: LaunchAppStop
#Event ID 3: ScrapeWindowStart
#Event ID 4: ScrapeWindowStop
#Event ID 19: NarratorCheckSAPIVoicesStart
#Event ID 20: NarratorCheckSAPIVoicesStop
#Event ID 23: LaunchSearchAndSelectStart
#Event ID 24: LaunchSearchAndSelectStop
#Event ID 25: QueueAppEvent
#Fields #
| Name | Description |
|---|---|
Priority Int32 | |
EventClass UnicodeString | |
Parameter Int32 |
Event ID 27: AppClose
#Event ID 29: SetProgressBarHandlerStart
#Event ID 30: SetProgressBarHandlerStop
#Event ID 33: ConsoleUpdated
#Event ID 39: TaskbarIsFlashing
#Event ID 43: ProcessFocusChangeStart
#Event ID 47: ProcessNarratorCommandStart
#Fields #
| Name | Description |
|---|---|
CommandId Int32 | |
CommandName UnicodeString |
Event ID 48: ProcessNarratorCommandStop
#Fields #
| Name | Description |
|---|---|
CommandId Int32 | |
CommandName UnicodeString |
Event ID 49: SAPISpeechComplete
#Event ID 82: InitializeGlobalsStart
#Event ID 83: InitializeGlobalsStop
#Event ID 84: InitializeMonitorsStart
#Event ID 85: InitializeMonitorsStop
#Event ID 86: BeginMonitoringStart
#Event ID 87: BeginMonitoringStop
#Event ID 88: CreateUiStart
#Event ID 89: CreateUiStop
#Event ID 90: ExitNarratorSpeechStart
#Event ID 91: ExitNarratorSpeechStop
#Event ID 92: ShutdownMonitorsStart
#Event ID 93: ShutdownMonitorsStop
#Event ID 94: ClearWindowTreeCacheStart
#Event ID 95: ClearWindowTreeCacheStop
#Event ID 98: ClearEventQueueStart
#Event ID 99: ClearEventQueueStop
#Event ID 100: ShutdownComponentsStart
#Event ID 101: ShutdownComponentsStop
#Event ID 102: ShutdownUiaStart
#Event ID 103: ShutdownUiaStop
#Event ID 116: CalculateEchoCharacterStart
#Event ID 117: CalculateEchoCharacterStop
#Event ID 121: TextEventPreprocessingStart
#Event ID 122: TextEventPreprocessingStop
#Event ID 145: ShutdownFocusMonitorStart
#Event ID 146: ShutdownFocusMonitorStop
#Event ID 147: ShutdownMouseMonitorStart
#Event ID 148: ShutdownMouseMonitorStop
#Event ID 149: ShutdownTouchMonitorStart
#Event ID 150: ShutdownTouchMonitorStop
#Event ID 151: ShutdownCommandGeneratorStart
#Event ID 152: ShutdownCommandGeneratorStop
#Event ID 153: ShutdownSystemMonitorStart
#Event ID 154: ShutdownSystemMonitorStop
#Event ID 160: DetailedReadingDataStart
#Event ID 161: DetailedReadingDataStop
#Event ID 164: RebuildCacheStart
#Event ID 165: RebuildCacheStop
#Event ID 168: CancellationCheckStart
#Event ID 169: CancellationCheckStop
#Event ID 172: FocusProcessingEnqueuedStart
#Event ID 173: FocusProcessingEnqueuedStop
#Event ID 176: IsElementInPeripheralUIStart
#Event ID 178: UpdateNarratorCursorStart
#Event ID 179: UpdateNarratorCursorStop
#Event ID 180: UpdateCursorPositionStart
#Event ID 181: UpdateCursorPositionStop
#Event ID 182: IsElementOnSoftKeyboardStart
#Event ID 183: IsElementOnSoftKeyboardStop
#Event ID 188: ProcessTextPatternCommandStart
#Event ID 189: ProcessTextPatternCommandStop
#Event ID 190: JumpToHeadingStart
#Event ID 191: JumpToHeadingStop
#Event ID 194: PlaceCaretStart
#Event ID 195: PlaceCaretStop
#Event ID 196: ProcessSelectionChangeStart
#Event ID 197: ProcessSelectionChangeStop
#Event ID 200: ProcessDegenerateSelectionStart
#Event ID 201: ProcessDegenerateSelectionStop
#Event ID 202: ContinuousReading_GenerateSegmentStart
#Event ID 203: ContinuousReading_GenerateSegmentStop
#Event ID 204: GetNextChunkStart
#Event ID 205: GetNextChunkStop
#Event ID 206: IsPlaceCaretPositionStart
#Event ID 207: IsPlaceCaretPositionStop
#Event ID 208: UiaEventHandlerStart
#Fields #
| Name | Description |
|---|---|
EventType UnicodeString | |
HandlerObject UnicodeString |
Event ID 209: UiaEventHandlerStop
#Event ID 210: ProcessHookMessageStart
#Event ID 211: ProcessHookMessageStop
#Event ID 212: AutomationEventProcessingEnqueuedStart
#Event ID 213: AutomationEventProcessingEnqueuedStop
#Event ID 214: TextSelectionChangedEventProcessingStart
#Event ID 215: TextSelectionChangedEventProcessingStop
#Event ID 216: SAPIOneCoreSSMLProcessingStart
#Event ID 217: SAPIOneCoreSSMLProcessingStop
#Event ID 218: SAPIOneCorePopulateAudioStart
#Event ID 219: SAPIOneCorePopulateAudioStop
#Event ID 220: CacheSessionStart
#Event ID 221: CacheSessionStop
#Fields #
| Name | Description |
|---|---|
HitCount Int32 | |
MissCount Int32 | |
IgnoreCount Int32 | |
RemoveCount Int32 |
Event ID 222: SAPIOneCorePopulateAudio
#Event ID 223: NarratorTouchInterpretationStart
#Event ID 224: NarratorTouchInterpretationStop
#Event ID 225: ProcessTextSegmentStart
#Event ID 226: ProcessTextSegmentStop
#Event ID 227: ContinuousReadingModeStart
#Event ID 228: ContinuousReadingModeStop
#Event ID 231: AudioPlayBackCompleted
#Event ID 233: NarratorInitializeStart
#Event ID 234: NarratorInitializeStop
#Event ID 235: NarratorRunStart
#Event ID 236: NarratorShortcutDisabled
#Event ID 237: NarratorAlreadyRunning
#Event ID 239: NarratorFindStart
#Event ID 240: NarratorFindStop
#Event ID 241: ContinuousReading_SetUpScopeStart
#Event ID 242: ContinuousReading_SetUpScopeStop
#Event ID 243: ContinuousReading_ProcessSingleChunkStart
#Event ID 244: ContinuousReading_ProcessSingleChunkStop
#Event ID 245: ContinuousReading_GetCompleteTextFragmentStart
#Event ID 246: ContinuousReading_GetCompleteTextFragmentStop
#Event ID 247: ChunkGenerator_GenerateChunksStart
#Event ID 248: ChunkGenerator_GenerateChunksStop
#Event ID 249: ChunkGenerator_GenerateSingleChunkStart
#Event ID 250: ChunkGenerator_GenerateSingleChunkStop
#Event ID 252: ControlTemplateReadingStart
#Event ID 253: ControlTemplateReadingStop
#Event ID 254: GenerateAudioStreamStart
#Event ID 255: GenerateAudioStreamStop
#Fields #
| Name | Description |
|---|---|
IsCachedStream Boolean | |
IsCancelled Boolean | |
TextLength Int32 |
Event ID 260: ChunkGenerator_GenerateChunksInnerLoopStart
#Event ID 261: ChunkGenerator_GenerateChunksInnerLoopStop
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 835b79e2-e76a-44c4-9885-26ad122d3b4d
Defined in srh.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893 · schema read from the registered manifest · binary version 10.0.20348.1 · captured 2026-06-02
- Win11-26200.6584 · schema read from the registered manifest · binary version 10.0.26100.4768 · captured 2026-06-02
Downloads
- Microsoft-Windows-Narrator registered manifest XML (WS2022-20348.4893) manifest-xml
- Microsoft-Windows-Narrator registered manifest XML (Win11-26200.6584) manifest-xml