Microsoft-Windows-RPC

17 events across 2 channels

Event ID	Title	Channel
1	Extended Error Information: ProcessName: %1 ComputerName: %2 ProcessId: %3 …	EEInfo
2	An RPC call was blocked by an RPC firewall filter.	Debug
3	An error occured.	Debug
4	RPC Log Event.	Debug
5	Client RPC call started.	Debug
6	Server RPC call started.	Debug
7	Client RPC call completed.	Debug
8	Server RPC call was completed.	Debug
9	Call failed due to RpcRaiseException.	Debug
10	RPC received a packet	Debug
11	RPC sent a packet	Debug
12	RPC/HTTP start event	Debug
13	RPC/HTTP stop event	Debug
14	RPC interface registered.	Debug
15	RPC interface unregistered.	Debug
16	RPC Server bound to protocol.	Debug
17	RPC interface re-triggering failed with error %1.	Debug

Event ID 1 — Extended Error Information: ProcessName: %1 ComputerName: %2 ProcessId: %3 Status: %6 DetectionLocation: %7.

Provider: Microsoft-Windows-RPC
Channel: EEInfo

Message

Extended Error Information: 
	ProcessName: 	%1 
	ComputerName: 	%2 
	ProcessId: 	%3 
	Status: 	%6 
	DetectionLocation: 	%7

Fields

Name	Description
`ProcessName`	[Extended Error Information] ProcessName.
`ComputerName`	[Extended Error Information] ComputerName.
`ProcessId`	[Extended Error Information] ProcessId.
`Status`	—
`DetectionLocation`	—
`ImageName`	—
`ProcessID`	—
`TimeStamp`	—
`GeneratingComponent`	—
`Flags`	—
`NumberOfParameters`	—
`Params`	—

Event ID 2 — An RPC call was blocked by an RPC firewall filter.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

An RPC call was blocked by an RPC firewall filter. 
	ProcessName: 	%1 
	InterfaceUuid: 	%2 
	RpcFilterKey:	%3

Fields

Name	Description
`ProcessName`	—
`InterfaceUuid`	—
`RpcFilterKey`	—
`ImangeName`	—
`FilterKey`	—

Event ID 3 — An error occured.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

An error occured. 
	ProcessName: 	%1 
	DetectionLocation: 	%2 
	Status: 	%3 
	AdditionaData: 	%4 
	AddtionalData: 	%5

Fields

Name	Description
`ProcessName`	—
`DetectionLocation`	—
`Status`	—
`AdditionaData`	—
`AddtionalData`	—
`ImageName`	—
`AdditionalData1`	—
`AdditionalData2`	—

Event ID 4 — RPC Log Event.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

RPC Log Event. 
	Subject: 	%1 	Verb: 	%2 	SubjectPointer: 	%3 	ObjectPointer: 	%4 	Data: 	%5

Fields

Name	Description
`Subject`	—
`Verb`	—
`SubjectPointer`	—
`ObjectPointer`	—
`Data`	—
`DataPointer`	—

Event ID 5 — Client RPC call started.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

Client RPC call started. 	InterfaceUuid: 	%1 	OpNum: 	%2 	Protocol: 	%3 	NetworkAddress 	%4 	Endpoint 	%5 	Binding Options 	%6 	Authentication Level 	%7 	Authentication Service 	%8 Impersonation Level 	%9

Fields

Name	Description
`InterfaceUuid`	—
`OpNum`	—
`Protocol`	—
`ProcNum`	—
`NetworkAddress`	—
`Endpoint`	—
`Options`	—
`AuthenticationLevel`	—
`AuthenticationService`	—
`ImpersonationLevel`	—

Event ID 6 — Server RPC call started.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

Server RPC call started. 	InterfaceUuid: 	%1 	OpNum: 	%2 	Protocol: 	%3 	Endpoint 	%5 	Authentication Level 	%7 	Authentication Service 	%8

Fields

Name	Description
`InterfaceUuid`	—
`OpNum`	—
`Protocol`	—
`ProcNum`	—
`NetworkAddress`	—
`Endpoint`	—
`Options`	—
`AuthenticationLevel`	—
`AuthenticationService`	—
`ImpersonationLevel`	—

Event ID 7 — Client RPC call completed.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

Client RPC call completed. 	Status: 	%1

Fields

Name	Description
`Status`	—

Event ID 8 — Server RPC call was completed.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

Server RPC call was completed. 	Status: 	%1

Fields

Name	Description
`Status`	—

Event ID 9 — Call failed due to RpcRaiseException.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

Call failed due to RpcRaiseException. 	Status: 	%1

Fields

Name	Description
`Status`	—

Event ID 10 — RPC received a packet

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

RPC received a packet

Fields

Name	Description
`SubjectPointer`	—
`FragmentSize`	—
`Fragment`	—

Event ID 11 — RPC sent a packet

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

RPC sent a packet

Fields

Name	Description
`SubjectPointer`	—
`FragmentSize`	—
`Fragment`	—

Event ID 12 — RPC/HTTP start event

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

RPC/HTTP start event

Fields

Name	Description
`ObjectType`	—
`Operation`	—
`Address`	—
`Data`	—

Event ID 13 — RPC/HTTP stop event

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

RPC/HTTP stop event

Fields

Name	Description
`ObjectType`	—
`Operation`	—
`Address`	—
`Data`	—

Event ID 14 — RPC interface registered.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

RPC interface registered. 	Interface UUID %1	TypeMgr %2	Flags %3	Max Calls %4

Fields

Name	Description
`InterfaceUuid`	—
`TypeMgrUuid`	—
`Flags`	—
`Max Calls`	—
`SDSize`	—
`SD`	—
`MaxCalls`	—

Event ID 15 — RPC interface unregistered.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

RPC interface unregistered. 	Interface UUID %1	TypeMgr

Fields

Name	Description
`InterfaceUuid`	—
`TypeMgrUuid`	—
`Flags`	—
`Max Calls`	—
`MaxCalls`	—

Event ID 16 — RPC Server bound to protocol.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

RPC Server bound to protocol. 	Protocol %1	Endpoint %2

Fields

Name	Description
`Protocol`	—
`Endpoint`	—
`NetworkAddress`	—
`PendingQueueSize`	—
`EndpointFlags`	—
`NicFlags`	—

Event ID 17 — RPC interface re-triggering failed with error %1.

Provider: Microsoft-Windows-RPC
Channel: Debug

Message

RPC interface re-triggering failed with error %1.

Fields

Name	Description
`RPC Status`	—
`RPCStatus`	—