Microsoft-Windows-ResumeKeyFilter
96 events across 3 channels
Event ID 1000 — The filter loaded successfully.
Message
Fields
| Name | Description |
|---|---|
Status | — |
Event ID 1001 — The filter was successfully attached to %2.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1002 — The resume database for %2 was loaded successfully.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1003 — The filter received a dismount request for %2.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1004 — The re-mount request for %2 completed successfully.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1005 — The filter was detached from %2.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1006 — The filter unloaded.
Message
Fields
| Name | Description |
|---|---|
Status | — |
Event ID 1007 — The filter detected an incomplete failover recovery and purged the resume database for %2.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1008 — The filter failed to attach to a volume because the volume supports short names but the filter does not support short names.
Message
Fields
| Name | Description |
|---|---|
Status | — |
Event ID 1010 — The filter detected that chkdsk has been run on volume %2 and has purged the resume database.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1011 — The filter detected that a volume snap shot may have been restored on volume %2 and has purged the resume database.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1100 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1100 — The creation of a bypass handle on file %3 completed successfully.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1101 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1101 — The creation of a new resume handle %1 on file %3 completed successfully.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1102 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1102 — The replay creation of resume handle %1 on file %3 completed successfully.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1103 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1103 — The resume of handle %1 on file %3 started successfully.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1104 —
Fields
| Name | Description |
|---|---|
String1Length | — |
String1 | — |
String2Length | — |
String2 | — |
Status | — |
Event ID 1104 — The resume of a handle on file name %2 was successfully reparsed to file name %4.
Message
Fields
| Name | Description |
|---|---|
String1Length | — |
String1 | — |
String2Length | — |
String2 | — |
Status | — |
Event ID 1105 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1105 — The resume of handle %1 on file %3 completed successfully.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1110 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1110 — The resume handle %1 on file %3 was suspended.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1111 — The resume handle %1 on file %3 was timed out and cancelled.
Message
Fields
| Name | Description |
|---|---|
ResumeKey | — |
StringLength | — |
String | — |
Value | — |
Status | — |
RfsKey | — |
NodeId | — |
AppId | — |
DesiredAccess | — |
ShareMode | — |
CreateOptions | — |
FileAttribs | — |
CreateDisp | — |
Event ID 1112 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1112 — The resume handle %1 on file %3 was cancelled successfully.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1113 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1113 — The resume handle %1 on file %3 was closed.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 1114 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1114 — The deferred delete of file %2 completed successfully.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1120 — The filter delayed the creation of a handle on file %2 because the resume database for the volume was still loading.
Message
Fields
| Name | Description |
|---|---|
String1Length | — |
String1 | — |
String2Length | — |
String2 | — |
Status | — |
Event ID 1121 — The filter failed the creation of a handle on file %2 because the file has pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1122 — The filter failed the creation of a handle on file %2 because the file is delete pending.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1123 — The filter failed the creation of a handle on file %2 because the parent directory has pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1124 — The filter failed the creation of a handle on file %2 because the parent directory is delete pending.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1130 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1130 — The filter failed an oplock request on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1131 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1131 — The filter failed a write operation on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1132 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1132 — The filter failed a read operation on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1133 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1133 — The filter failed an exclusive byte range lock request on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1134 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1134 — The filter failed a shared byte range lock request on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1135 — The filter failed the create of a hard link on file %2 because hard links are not supported.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1136 — The filter failed the rename of an alternate data stream on file %2 because rename of alternate data streams is not supported.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1137 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1137 — The filter failed a rename replace to file %2 because this target file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1138 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1138 — The filter failed a set end-of-file request on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1139 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1139 — The filter failed a set zero data request on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1140 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1140 — The filter failed a rename request on file %2 because the resume database was still being processed.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1141 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1141 — The filter failed a rename request on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1142 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1142 — The filter failed a copy offload read operation on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1143 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1143 — The filter failed a copy offload write operation on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1144 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1144 — The filter failed a file trim operation on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1145 —
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1145 — The filter failed a file set read only attribute operation on file %2 because the file has conflicting pending resume handles.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1150 — The creation of a new resume handle on file %2 failed because the file has hard links.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 1151 — The creation of a new handle on file %2 failed because the supersede of a file that has open resume handles on Alternate Data Streams is not suppor...
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 2000 — The filter failed to load with error status %1.
Message
Fields
| Name | Description |
|---|---|
Status | — |
Event ID 2001 — The filter failed to attach to %2 with error status %3.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 2002 — The resume database for %2 failed to load with error status %4.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 2004 — The re-mount request for %2 failed with error status %3.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 2100 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 2100 — The creation of a bypass handle on file %3 failed with error status %5.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 2101 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 2101 — The creation of a new resume handle %1 on file %3 failed with error status %5.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 2102 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 2102 — The replay creation of resume handle %1 on file %3 failed with error status %5.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 2103 — The resume of handle %1 on file %3 failed with error status %5.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 2104 — The resume of a handle on file name %2 failed to reparse to a valid file name with error status %5.
Message
Fields
| Name | Description |
|---|---|
String1Length | — |
String1 | — |
String2Length | — |
String2 | — |
Status | — |
Event ID 2112 —
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 2112 — The resume handle %1 on file %3 failed to cancel with error status %5.
Message
Fields
| Name | Description |
|---|---|
Guid | — |
StringLength | — |
String | — |
Value | — |
Status | — |
Event ID 2114 — The deferred delete of file %2 failed with error status %3.
Message
Fields
| Name | Description |
|---|---|
StringLength | — |
String | — |
Status | — |
Event ID 4000 —
Fields
| Name | Description |
|---|---|
FileObject | — |
FileObjectNameLength | — |
FileObjectName | — |
MajorFunction | — |
MajorFunctionName | — |
MinorFunction | — |
ControlCode | — |
Event ID 4000 — Driver entry pre enter: FileObject %1 (%3), MajorFunction %4 (%5), MinorFunction %6, ControlCode %7.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
FileObjectNameLength | — |
FileObjectName | — |
MajorFunction | — |
MajorFunctionName | — |
MinorFunction | — |
ControlCode | — |
Event ID 4001 —
Fields
| Name | Description |
|---|---|
FileObject | — |
MajorFunction | — |
MajorFunctionName | — |
MinorFunction | — |
ControlCode | — |
Status | — |
IoStatus | — |
IoInformation | — |
FltStatus | — |
Event ID 4001 — Driver entry pre exit: FileObject %1, MajorFunction %2 (%3), MinorFunction %4, ControlCode %5, Status %6, IoStatus %7, IoInformation %8, FltStatus %9.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
MajorFunction | — |
MajorFunctionName | — |
MinorFunction | — |
ControlCode | — |
Status | — |
IoStatus | — |
IoInformation | — |
FltStatus | — |
Event ID 4002 —
Fields
| Name | Description |
|---|---|
FileObject | — |
MajorFunction | — |
MajorFunctionName | — |
MinorFunction | — |
ControlCode | — |
IoStatus | — |
IoInformation | — |
Event ID 4002 — Driver entry post enter: FileObject %1, MajorFunction %2 (%3), MinorFunction %4, ControlCode %5, IoStatus %6, IoInformation %7.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
MajorFunction | — |
MajorFunctionName | — |
MinorFunction | — |
ControlCode | — |
IoStatus | — |
IoInformation | — |
Event ID 4003 —
Fields
| Name | Description |
|---|---|
FileObject | — |
MajorFunction | — |
MajorFunctionName | — |
MinorFunction | — |
ControlCode | — |
Status | — |
Event ID 4003 — Driver entry post exit: FileObject %1, MajorFunction %2 (%3), MinorFunction %4, ControlCode %5, Status %6.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
MajorFunction | — |
MajorFunctionName | — |
MinorFunction | — |
ControlCode | — |
Status | — |
Event ID 4010 —
Fields
| Name | Description |
|---|---|
FileObject | — |
MajorFunction | — |
MajorFunctionName | — |
ControlCode | — |
ByteOffset | — |
Length | — |
Event ID 4010 — Log file enter: FileObject %1, MajorFunction %2 (%3), ControlCode %4, ByteOffset %5, Length %6.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
MajorFunction | — |
MajorFunctionName | — |
ControlCode | — |
ByteOffset | — |
Length | — |
Event ID 4011 —
Fields
| Name | Description |
|---|---|
FileObject | — |
MajorFunction | — |
MajorFunctionName | — |
ControlCode | — |
Status | — |
Event ID 4011 — Log file exit: FileObject %1, MajorFunction %2 (%3), ControlCode %4, Status %5.
Message
Fields
| Name | Description |
|---|---|
FileObject | — |
MajorFunction | — |
MajorFunctionName | — |
ControlCode | — |
Status | — |