Microsoft-Windows-Push-To-Install-Service

6 events across 1 channel

Event ID	Title	Channel
6001	%1 Error Code: %3 Function: %2 Source: %4 (%5).	Operational
6002	%1 Exception Details: %5 Function: %4 Source: %3 (%2).	Operational
6003	%1 Error Code: %3 Function: %2 Source: %4 (%5).	Operational
6004	%1 Error Code: %3 Function: %2 Source: %4 (%5).	Operational
6005	%1 Error Code: %3 Function: %2 Source: %4 (%5).	Operational
6006	Process Name: %1 Module Name: %2 Build: %3.	Operational

Event ID 6001 — %1 Error Code: %3 Function: %2 Source: %4 (%5).

Provider: Microsoft-Windows-Push-To-Install-Service
Channel: Operational

Message

%1
Error Code: %3
Function: %2
Source: %4 (%5)

Fields

Name	Description
`Function`	—
`Error_Code`	—
`Source`	—
`Message`	—
`ErrorCode`	—
`LineNumber`	—

Event ID 6002 — %1 Exception Details: %5 Function: %4 Source: %3 (%2).

Provider: Microsoft-Windows-Push-To-Install-Service
Channel: Operational

Message

%1
Exception Details: %5
Function: %4
Source: %3 (%2)

Fields

Name	Description
`Source`	—
`Function`	—
`Exception_Details`	Source.
`Message`	—
`LineNumber`	—
`FileName`	—
`ExceptionDetails`	—

Event ID 6003 — %1 Error Code: %3 Function: %2 Source: %4 (%5).

Provider: Microsoft-Windows-Push-To-Install-Service
Channel: Operational
Level: 3
Samples: 1

Message

%1
Error Code: %3
Function: %2
Source: %4 (%5)

Fields

Name	Description
`Message`	—
`Function`	—
`Error Code`	—
`Source`	—
`Line Number`	—

Example Event

system:
  provider: Microsoft-Windows-Push-To-Install-Service
  guid: 3A718A68-6974-4075-ABD3-E8243CAEF398
  event_source_name: ''
  event_id: 6003
  version: 0
  level: 3
  task: 6003
  opcode: 0
  keywords: 9223372036854775809
  time_created: '2023-11-05T22:41:18.071601+00:00'
  event_record_id: 4715
  correlation: {}
  execution:
    process_id: 6332
    thread_id: 1108
  channel: Microsoft-Windows-Store/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-18
event_data:
  Message: ''
  Function: HttpRequest::Send
  Error Code: -2147012889
  Source: onecoreuap\enduser\winstore\servicescommon\lib\httpforservices.cpp
  Line Number: 589
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 6004 — %1 Error Code: %3 Function: %2 Source: %4 (%5).

Provider: Microsoft-Windows-Push-To-Install-Service
Channel: Operational
Level: 4
Samples: 1

Message

%1
Error Code: %3
Function: %2
Source: %4 (%5)

Fields

Name	Description
`Message`	—
`Function`	—
`Error Code`	—
`Source`	—
`Line Number`	—

Example Event

system:
  provider: Microsoft-Windows-Push-To-Install-Service
  guid: 3A718A68-6974-4075-ABD3-E8243CAEF398
  event_source_name: ''
  event_id: 6004
  version: 0
  level: 4
  task: 6004
  opcode: 0
  keywords: 9223372036854775809
  time_created: '2023-11-05T22:41:18.074673+00:00'
  event_record_id: 4716
  correlation: {}
  execution:
    process_id: 6332
    thread_id: 1108
  channel: Microsoft-Windows-Store/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-18
event_data:
  Message: 'onecoreuap\enduser\winstore\servicescommon\lib\httpforservices.cpp(589)\pushtoinstall.dll!00007FFABDAE8BA3:
    Exception(1) tid(454) 80072EE7     [HttpRequest::Send]

    '
  Function: ''
  Error Code: -2147012889
  Source: onecoreuap\enduser\winstore\pushtoinstall\lib\service.cpp
  Line Number: 207
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 6005 — %1 Error Code: %3 Function: %2 Source: %4 (%5).

Provider: Microsoft-Windows-Push-To-Install-Service
Channel: Operational

Message

%1
Error Code: %3
Function: %2
Source: %4 (%5)

Fields

Name	Description
`Function`	—
`Error_Code`	—
`Source`	—
`Message`	—
`ErrorCode`	—
`LineNumber`	—

Event ID 6006 — Process Name: %1 Module Name: %2 Build: %3.

Provider: Microsoft-Windows-Push-To-Install-Service
Channel: Operational
Level: 4
Samples: 1

Message

Process Name: %1
Module Name: %2
Build: %3

Fields

Name	Description
`Process Name`	—
`Module Name`	—
`Build Name`	Build.

Example Event

system:
  provider: Microsoft-Windows-Push-To-Install-Service
  guid: 3A718A68-6974-4075-ABD3-E8243CAEF398
  event_source_name: ''
  event_id: 6006
  version: 0
  level: 4
  task: 6006
  opcode: 0
  keywords: 9223372036854775810
  time_created: '2023-11-05T22:41:16.929882+00:00'
  event_record_id: 4709
  correlation: {}
  execution:
    process_id: 6332
    thread_id: 2600
  channel: Microsoft-Windows-Store/Operational
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-18
event_data:
  Process Name: C:\Windows\System32\svchost.exe
  Module Name: c:\windows\system32\pushtoinstall.dll
  Build Name: 22621.1.amd64fre.ni_release.220506-1250
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline