detection.wiki

Microsoft-Windows-ServerManager-ManagementProvider

70 events across 2 channels

Event IDTitleChannel
1Loading the management providerOperational
2Unloading the management providerOperational
12Condition ptzMessage1 failed, throwing ptzMessage2.Debug
14Get performance collector state task start.Operational
15Get performance collector state task complete.Operational
16Get performance collector state task generated an error (hResult).Operational
17Set performance collector state task start.Operational
18Set performance collector state task complete.Operational
19Set performance collector state task generated an error (hResult).Operational
26Get counter sample in time range task start.Operational
27Get counter samples in time range task complete.Operational
28Get counter samples in time range task generated an error (hResult).Operational
29Unable to process log file: Name, error: hResult, last error: hLastError.Debug
30Get counter samples at time task start.Operational
31Get counter samples at time task complete.Operational
32Get counter samples at time task generated an error (hResult).Operational
33Unable to process log file: Name, error: hResult, last error: hLastError.Debug
41Get server inventory task started.Operational
42Get server inventory task complete.Operational
43Get server inventory task failed.Operational
44Get server inventory task failed to query information from facility: facility, …Debug
45Failure opening metadata of the owning provider for channel: Name [hResult = …Operational
46Generic failure querying the localized name for channel: Name [hResult = …Operational
47Get server feature task started, flags: uValue.Operational
48Get server feature task complete, total features returned: uValue.Operational
49Get server feature task failed, error: hResult.Operational
50The feature returned by the ceip provider is not found in the static feature …Operational
51The feature's parent id returned by the ceip provider is not found in the static …Operational
52Get server event detail task started, number of logs: uValue.Operational
53Get server event detail task complete, number of results: uValue.Operational
54Get server event detail task failed, error: hResult.Operational
55Server event detail query: Query.Debug
56Couldn't find event query file: Name [hResult: hResult, hLastResult: …Debug
57Server event detail task failed to process the query file: Name, error code: …Debug
58Server event detail task failed to open the provider's metadata, name: Name.Debug
61The Uxd feature enumeration delay value was not found, using default delay.Debug
62Get bpa result task start: TotalXPaths.Operational
63Get bpa result task complete: ResultsReturned.Operational
64Get bpa result task generated an error: Error, last error: LastError.Operational
65Get cluster name task start.Operational
66Get cluster name task complete.Operational
67Get cluster name task generated an error.Operational
68Events were queried from ADAM.Operational
69Get server service detail task start.Operational
70Get server service detail task complete.Operational
71Get server service detail task generated an error [hResult: Error, hLastResult = …Operational
72Couldn't open service: Name [hResult = hResult, hLastResult = hLastError].Operational
73Can't get description of service: Name [hResult = hResult, hLastResult = …Debug
74Can't get config information of service: Name [hResult = hResult, hLastResult = …Debug
75Generic failure querying service details of service: Name [hResult = hResult, …Debug
76Generic failure querying delayed auto start property of serice: Name [hResult = …Debug
77Remove server performance log task start.Operational
78Remove server performance log task complete.Operational
79Remove server performance log task generated an error 'Collector' [hResult: …Operational
80Remove server performance log task encountered an error processing log: Log …Operational
81Elevated operation Identifier failed to revert to network service token.Operational
82Elevated operation Error failed to impersonate the client back.Operational
83The task thread is not impersonating the client after running a elevated …Operational
84The wmi enumeration operation [Identifier] is being closed without completely …Debug
85Failed to query the results of bpa xpath: XPath.Operational
86Failed to get/query the resource of type Type at index Index.Debug
87Generic failure querying trigger information of serice: Name [hResult = hResult, …Debug
88Failed to get the performance data with error code PDH_LOG_TYPE_NOT_FOUND.Operational
89Failed to check the status of the performance counter DL QFE, error: Error, last …Operational
90Get server event detail extended task started.Operational
91Get server event detail extended task complete, number of results: uValue.Operational
92Get server event detail extended task failed, error: Error, extended error: …Operational
93Server event detail extended query: Query.Debug
94Server event detail extended task failed to process the query: error: Error, …Debug
95Server event detail extended task failed to open the provider's metadata, name: …Debug

Event ID 1 — Loading the management provider

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Providerinitialization
Opcode
Start

Description

Loading the management provider.

Message #

Loading the management provider

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 1,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 1,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:23.603467+00:00",
    "event_record_id": 302,
    "correlation": {},
    "execution": {
      "process_id": 3944,
      "thread_id": 4188
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-20"
    }
  },
  "event_data": {},
  "message": ""
}

References #

Event ID 2 — Unloading the management provider

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Providerinitialization
Opcode
Stop

Description

Unloading the management provider.

Message #

Unloading the management provider

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 2,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 2,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:39:06.282326+00:00",
    "event_record_id": 326,
    "correlation": {},
    "execution": {
      "process_id": 3944,
      "thread_id": 4188
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-20"
    }
  },
  "event_data": {},
  "message": ""
}

References #

Event ID 12 — Condition ptzMessage1 failed, throwing ptzMessage2.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Theerrorcheckingtask

Description

Condition ptzMessage1 failed, throwing ptzMessage2.

Message #

Condition %1 failed, throwing %2.

Fields #

NameDescription
ptzMessage1 UnicodeString—
ptzMessage2 UnicodeString—

Event ID 14 — Get performance collector state task start.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getperformancecollectorstatetask
Opcode
Start

Description

Get performance collector state task start.

Message #

Get performance collector state task start.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 14,
    "version": 0,
    "level": 4,
    "task": 6,
    "opcode": 1,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:26.867981+00:00",
    "event_record_id": 310,
    "correlation": {
      "ActivityID": "C1A9BE91-E77A-4B43-9AF9-F18A1F4C9833"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 4188
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {},
  "message": ""
}

References #

Event ID 15 — Get performance collector state task complete.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getperformancecollectorstatetask
Opcode
Stop

Description

Get performance collector state task complete.

Message #

Get performance collector state task complete.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 15,
    "version": 0,
    "level": 4,
    "task": 6,
    "opcode": 2,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:27.062936+00:00",
    "event_record_id": 314,
    "correlation": {
      "ActivityID": "C1A9BE91-E77A-4B43-9AF9-F18A1F4C9833"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 4188
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {},
  "message": ""
}

References #

Event ID 16 — Get performance collector state task generated an error (hResult).

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getperformancecollectorstatetask

Description

Get performance collector state task generated an error (hResult).

Message #

Get performance collector state task generated an error (%1).

Fields #

NameDescription
hResult HexInt32—

Event ID 17 — Set performance collector state task start.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Setperformancecollectorstatetask
Opcode
Start

Description

Set performance collector state task start.

Message #

Set performance collector state task start.

Event ID 18 — Set performance collector state task complete.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Setperformancecollectorstatetask
Opcode
Stop

Description

Set performance collector state task complete.

Message #

Set performance collector state task complete.

Event ID 19 — Set performance collector state task generated an error (hResult).

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Setperformancecollectorstatetask

Description

Set performance collector state task generated an error (hResult).

Message #

Set performance collector state task generated an error (%1).

Fields #

NameDescription
hResult HexInt32—

Event ID 26 — Get counter sample in time range task start.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getcountersamplesintimerangetask
Opcode
Start

Description

Get counter sample in time range task start.

Message #

Get counter sample in time range task start.

Event ID 27 — Get counter samples in time range task complete.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getcountersamplesintimerangetask
Opcode
Stop

Description

Get counter samples in time range task complete.

Message #

Get counter samples in time range task complete.

Event ID 28 — Get counter samples in time range task generated an error (hResult).

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getcountersamplesintimerangetask

Description

Get counter samples in time range task generated an error (hResult).

Message #

Get counter samples in time range task generated an error (%1).

Fields #

NameDescription
hResult HexInt32—

Event ID 29 — Unable to process log file: Name, error: hResult, last error: hLastError.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getcountersamplesintimerangetask

Description

Unable to process log file: Name, error: hResult, last error: hLastError.

Message #

Unable to process log file: %1, error: %2, last error: %3.

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 30 — Get counter samples at time task start.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getcountersamplesattimetask
Opcode
Start

Description

Get counter samples at time task start.

Message #

Get counter samples at time task start.

Event ID 31 — Get counter samples at time task complete.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getcountersamplesattimetask
Opcode
Stop

Description

Get counter samples at time task complete.

Message #

Get counter samples at time task complete.

Event ID 32 — Get counter samples at time task generated an error (hResult).

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getcountersamplesattimetask

Description

Get counter samples at time task generated an error (hResult).

Message #

Get counter samples at time task generated an error (%1).

Fields #

NameDescription
hResult HexInt32—

Event ID 33 — Unable to process log file: Name, error: hResult, last error: hLastError.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getcountersamplesintimerangetask

Description

Unable to process log file: Name, error: hResult, last error: hLastError.

Message #

Unable to process log file: %1, error: %2, last error: %3

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 41 — Get server inventory task started.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getserverinventorytask

Description

Get server inventory task started.

Message #

Get server inventory task started.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 41,
    "version": 0,
    "level": 4,
    "task": 13,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:23.628840+00:00",
    "event_record_id": 303,
    "correlation": {
      "ActivityID": "E1A8B0A1-AACC-4C2A-8AAC-58D88C5EA105"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 4188
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {},
  "message": ""
}

References #

Event ID 42 — Get server inventory task complete.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getserverinventorytask

Description

Get server inventory task complete.

Message #

Get server inventory task complete.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 42,
    "version": 0,
    "level": 4,
    "task": 13,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:26.860114+00:00",
    "event_record_id": 309,
    "correlation": {
      "ActivityID": "E1A8B0A1-AACC-4C2A-8AAC-58D88C5EA105"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 4188
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {},
  "message": ""
}

References #

Event ID 43 — Get server inventory task failed.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Error
Task
Getserverinventorytask

Description

Get server inventory task failed.

Message #

Get server inventory task failed.

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 43,
    "version": 0,
    "level": 2,
    "task": 13,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-04T13:51:27.375324+00:00",
    "event_record_id": 537,
    "correlation": {
      "ActivityID": "D6029FED-E085-468B-9E69-02033A44F2E2"
    },
    "execution": {
      "process_id": 4740,
      "thread_id": 4776
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-TKC15D7KHUR",
    "security": {
      "user_id": "S-1-5-21-1958040314-2592322477-2606035944-500"
    }
  },
  "event_data": {},
  "message": ""
}

References #

Event ID 44 — Get server inventory task failed to query information from facility: facility, error code: error, last error: lasterror.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getserverinventorytask

Description

Get server inventory task failed to query information from facility: facility, error code: error, last error: lasterror.

Message #

Get server inventory task failed to query information from facility: %1, error code: %2, last error: %3.

Fields #

NameDescription
facility UnicodeString—
error HexInt32—
lasterror HexInt32—

Event ID 45 — Failure opening metadata of the owning provider for channel: Name [hResult = hResult, hLastResult = hLastError].

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Warning
Task
Getserverinventorytask

Description

Failure opening metadata of the owning provider for channel: Name [hResult = hResult, hLastResult = hLastError].

Message #

Failure opening metadata of the owning provider for channel: %1 [hResult = %2, hLastResult = %3].

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 45,
    "version": 0,
    "level": 3,
    "task": 13,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:26.323488+00:00",
    "event_record_id": 308,
    "correlation": {
      "ActivityID": "E1A8B0A1-AACC-4C2A-8AAC-58D88C5EA105"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 4188
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "Name": "Microsoft-Windows-SPB-HIDI2C/Analytic",
    "hResult": "0x8007065b",
    "hLastError": "0x80070002"
  },
  "message": ""
}

References #

Event ID 46 — Generic failure querying the localized name for channel: Name [hResult = hResult, hLastResult = hLastError].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getserverinventorytask

Description

Generic failure querying the localized name for channel: Name [hResult = hResult, hLastResult = hLastError].

Message #

Generic failure querying the localized name for channel: %1 [hResult = %2, hLastResult = %3].

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 47 — Get server feature task started, flags: uValue.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getserverfeaturetask

Description

Get server feature task started, flags: uValue.

Message #

Get server feature task started, flags: %1.

Fields #

NameDescription
uValue UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 47,
    "version": 0,
    "level": 4,
    "task": 14,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:26.868610+00:00",
    "event_record_id": 311,
    "correlation": {
      "ActivityID": "4ACAA8DE-FAC8-4188-A6B0-EFCD7D7B46CA"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 1536
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "uValue": 2
  },
  "message": ""
}

References #

Event ID 48 — Get server feature task complete, total features returned: uValue.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getserverfeaturetask

Description

Get server feature task complete, total features returned: uValue.

Message #

Get server feature task complete, total features returned: %1.

Fields #

NameDescription
uValue UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 48,
    "version": 0,
    "level": 4,
    "task": 14,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:27.505527+00:00",
    "event_record_id": 315,
    "correlation": {
      "ActivityID": "4ACAA8DE-FAC8-4188-A6B0-EFCD7D7B46CA"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 1536
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "uValue": 25
  },
  "message": ""
}

References #

Event ID 49 — Get server feature task failed, error: hResult.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Error
Task
Getserverfeaturetask

Description

Get server feature task failed, error: hResult.

Message #

Get server feature task failed, error: %1.

Fields #

NameDescription
hResult HexInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 49,
    "version": 0,
    "level": 2,
    "task": 14,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T08:14:08.883719+00:00",
    "event_record_id": 102,
    "correlation": {
      "ActivityID": "050D8FFF-1276-45D9-A3D0-6F704D3210E5"
    },
    "execution": {
      "process_id": 4456,
      "thread_id": 2488
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "hResult": "0x1"
  },
  "message": ""
}

References #

Event ID 50 — The feature returned by the ceip provider is not found in the static feature information xml.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getserverfeaturetask

Description

The feature returned by the ceip provider is not found in the static feature information xml. Id: Id, Name: Name.

Message #

The feature returned by the ceip provider is not found in the static feature information xml. Id: %1, Name: %2.

Fields #

NameDescription
Id Int32—
Name UnicodeString—

Event ID 51 — The feature's parent id returned by the ceip provider is not found in the static feature information xml.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getserverfeaturetask

Description

The feature's parent id returned by the ceip provider is not found in the static feature information xml. Feature Id: Id, Parent Id: ParentId.

Message #

The feature's parent id returned by the ceip provider is not found in the static feature information xml. Feature Id: %1, Parent Id: %2

Fields #

NameDescription
Id Int32—
ParentId Int32—

Event ID 52 — Get server event detail task started, number of logs: uValue.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getservereventdetailtask

Description

Get server event detail task started, number of logs: uValue.

Message #

Get server event detail task started, number of logs: %1.

Fields #

NameDescription
uValue UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 52,
    "version": 0,
    "level": 4,
    "task": 15,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:27.513998+00:00",
    "event_record_id": 323,
    "correlation": {
      "ActivityID": "C9DB0EBB-AD74-4A6D-A36D-C691522795E3"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 4188
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "uValue": 6
  },
  "message": ""
}

References #

Event ID 53 — Get server event detail task complete, number of results: uValue.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getservereventdetailtask

Description

Get server event detail task complete, number of results: uValue.

Message #

Get server event detail task complete, number of results: %1.

Fields #

NameDescription
uValue UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 53,
    "version": 0,
    "level": 4,
    "task": 15,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:27.539932+00:00",
    "event_record_id": 325,
    "correlation": {
      "ActivityID": "C9DB0EBB-AD74-4A6D-A36D-C691522795E3"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 4188
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "uValue": 0
  },
  "message": ""
}

References #

Event ID 54 — Get server event detail task failed, error: hResult.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getservereventdetailtask

Description

Get server event detail task failed, error: hResult.

Message #

Get server event detail task failed, error: %1.

Fields #

NameDescription
hResult HexInt32—

Event ID 55 — Server event detail query: Query.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getservereventdetailtask

Description

Server event detail query: Query.

Message #

Server event detail query: %1.

Fields #

NameDescription
Query UnicodeString—

Event ID 56 — Couldn't find event query file: Name [hResult: hResult, hLastResult: hLastError].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getservereventdetailtask

Description

Couldn't find event query file: Name [hResult: hResult, hLastResult: hLastError].

Message #

Couldn't find event query file: %1 [hResult: %2, hLastResult: %3].

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 57 — Server event detail task failed to process the query file: Name, error code: hResult, last error: hLastError.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getservereventdetailtask

Description

Server event detail task failed to process the query file: Name, error code: hResult, last error: hLastError.

Message #

Server event detail task failed to process the query file: %1, error code: %2, last error: %3.

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 58 — Server event detail task failed to open the provider's metadata, name: Name.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getservereventdetailtask

Description

Server event detail task failed to open the provider's metadata, name: Name.

Message #

Server event detail task failed to open the provider's metadata, name: %1.

Fields #

NameDescription
Name UnicodeString—

Event ID 61 — The Uxd feature enumeration delay value was not found, using default delay.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getserverfeaturetask

Description

The Uxd feature enumeration delay value was not found, using default delay.

Message #

The Uxd feature enumeration delay value was not found, using default delay.

Event ID 62 — Get bpa result task start: TotalXPaths.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getserverbparesulttask

Description

Get bpa result task start: TotalXPaths.

Message #

Get bpa result task start: %1.

Fields #

NameDescription
TotalXPaths UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 62,
    "version": 0,
    "level": 4,
    "task": 16,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:27.511464+00:00",
    "event_record_id": 316,
    "correlation": {
      "ActivityID": "7E9799E8-7833-472A-9A67-4EBE3235C039"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 1536
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "TotalXPaths": 12
  },
  "message": ""
}

References #

Event ID 63 — Get bpa result task complete: ResultsReturned.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getserverbparesulttask

Description

Get bpa result task complete: ResultsReturned.

Message #

Get bpa result task complete: %1.

Fields #

NameDescription
ResultsReturned UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 63,
    "version": 0,
    "level": 4,
    "task": 16,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:27.517455+00:00",
    "event_record_id": 324,
    "correlation": {
      "ActivityID": "7E9799E8-7833-472A-9A67-4EBE3235C039"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 1536
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "ResultsReturned": 12
  },
  "message": ""
}

References #

Event ID 64 — Get bpa result task generated an error: Error, last error: LastError.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getserverbparesulttask

Description

Get bpa result task generated an error: Error, last error: LastError.

Message #

Get bpa result task generated an error: %1, last error: %2

Fields #

NameDescription
Error HexInt32—
LastError HexInt32—

Event ID 65 — Get cluster name task start.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getserverclusternametask

Description

Get cluster name task start.

Message #

Get cluster name task start.

Event ID 66 — Get cluster name task complete.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getserverclusternametask

Description

Get cluster name task complete.

Message #

Get cluster name task complete.

Event ID 67 — Get cluster name task generated an error.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getserverclusternametask

Description

Get cluster name task generated an error.

Message #

Get cluster name task generated an error.

Event ID 68 — Events were queried from ADAM.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getservereventdetailtask

Description

Events were queried from ADAM (ADAM.Events.xml) but the provider was not able to find any instances [hResult = Error, hLastResult = LastError].

Message #

Events were queried from ADAM (ADAM.Events.xml) but the provider was not able to find any instances [hResult = %1, hLastResult = %2].

Fields #

NameDescription
Error HexInt32—
LastError HexInt32—

Event ID 69 — Get server service detail task start.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getserverservicedetailtask

Description

Get server service detail task start. Number of service requested: uValue.

Message #

Get server service detail task start. Number of service requested: %1

Fields #

NameDescription
uValue UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 69,
    "version": 0,
    "level": 4,
    "task": 18,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:26.870735+00:00",
    "event_record_id": 312,
    "correlation": {
      "ActivityID": "F5F2E135-0CD1-4E7C-9EF4-0FB3D7C663E7"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 3164
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "uValue": 0
  },
  "message": ""
}

References #

Event ID 70 — Get server service detail task complete.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Informational
Task
Getserverservicedetailtask

Description

Get server service detail task complete. Number of services returned: uValue.

Message #

Get server service detail task complete. Number of services returned: %1

Fields #

NameDescription
uValue UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 70,
    "version": 0,
    "level": 4,
    "task": 18,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:27.048889+00:00",
    "event_record_id": 313,
    "correlation": {
      "ActivityID": "F5F2E135-0CD1-4E7C-9EF4-0FB3D7C663E7"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 3164
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "uValue": 0
  },
  "message": ""
}

References #

Event ID 71 — Get server service detail task generated an error [hResult: Error, hLastResult = LastError].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getserverservicedetailtask

Description

Get server service detail task generated an error [hResult: Error, hLastResult = LastError].

Message #

Get server service detail task generated an error [hResult: %1, hLastResult = %2].

Fields #

NameDescription
Error HexInt32—
LastError HexInt32—

Event ID 72 — Couldn't open service: Name [hResult = hResult, hLastResult = hLastError].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getserverservicedetailtask

Description

Couldn't open service: Name [hResult = hResult, hLastResult = hLastError].

Message #

Couldn't open service: %1 [hResult = %2, hLastResult = %3].

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 73 — Can't get description of service: Name [hResult = hResult, hLastResult = hLastError].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getserverservicedetailtask

Description

Can't get description of service: Name [hResult = hResult, hLastResult = hLastError].

Message #

Can't get description of service: %1 [hResult = %2, hLastResult = %3].

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 74 — Can't get config information of service: Name [hResult = hResult, hLastResult = hLastError].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getserverservicedetailtask

Description

Can't get config information of service: Name [hResult = hResult, hLastResult = hLastError].

Message #

Can't get config information of service: %1 [hResult = %2, hLastResult = %3].

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 75 — Generic failure querying service details of service: Name [hResult = hResult, hLastResult = hLastError].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getserverservicedetailtask

Description

Generic failure querying service details of service: Name [hResult = hResult, hLastResult = hLastError].

Message #

Generic failure querying service details of service: %1 [hResult = %2, hLastResult = %3].

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 76 — Generic failure querying delayed auto start property of serice: Name [hResult = hResult, hLastResult = hLastError].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getserverservicedetailtask

Description

Generic failure querying delayed auto start property of serice: Name [hResult = hResult, hLastResult = hLastError].

Message #

Generic failure querying delayed auto start property of serice: %1 [hResult = %2, hLastResult = %3].

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 77 — Remove server performance log task start.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Removeserverperformancelogtask

Description

Remove server performance log task start. Collector name: Collector, CutOff time in milliseconds: MillisecondCutOff.

Message #

Remove server performance log task start. Collector name: %1, CutOff time in milliseconds: %2.

Fields #

NameDescription
Collector UnicodeString—
MillisecondCutOff UInt64—

Event ID 78 — Remove server performance log task complete.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Removeserverperformancelogtask

Description

Remove server performance log task complete. Number of logs removed: Count.

Message #

Remove server performance log task complete. Number of logs removed: %1.

Fields #

NameDescription
Count UInt32—

Event ID 79 — Remove server performance log task generated an error 'Collector' [hResult: ErrorCode, hLastResult = LastErrorCode].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Removeserverperformancelogtask

Description

Remove server performance log task generated an error 'Collector' [hResult: ErrorCode, hLastResult = LastErrorCode].

Message #

Remove server performance log task generated an error '%1' [hResult: %2, hLastResult = %3].

Fields #

NameDescription
Collector UnicodeString—
ErrorCode HexInt32—
LastErrorCode HexInt32—

Event ID 80 — Remove server performance log task encountered an error processing log: Log [hResult: Error, hLastResult = LastError].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Removeserverperformancelogtask

Description

Remove server performance log task encountered an error processing log: Log [hResult: Error, hLastResult = LastError].

Message #

Remove server performance log task encountered an error processing log: %1 [hResult: %2, hLastResult = %3].

Fields #

NameDescription
Log UnicodeString—
Error HexInt32—
LastError HexInt32—

Event ID 81 — Elevated operation Identifier failed to revert to network service token.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
ElevatedOperation

Description

Elevated operation Identifier failed to revert to network service token. error: Error.

Message #

Elevated operation %1 failed to revert to network service token. error: %2.

Fields #

NameDescription
Identifier UnicodeString—
Error Int32—

Event ID 82 — Elevated operation Error failed to impersonate the client back.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
ElevatedOperation

Description

Elevated operation Error failed to impersonate the client back. error: Error.

Message #

Elevated operation %2 failed to impersonate the client back. error: %2.

Fields #

NameDescription
Identifier UnicodeString—
Error Int32—

Event ID 83 — The task thread is not impersonating the client after running a elevated operation Identifier.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
ElevatedOperation

Description

The task thread is not impersonating the client after running a elevated operation Identifier.

Message #

The task thread is not impersonating the client after running a elevated operation %1.

Fields #

NameDescription
Identifier UnicodeString—

Event ID 84 — The wmi enumeration operation [Identifier] is being closed without completely enumerating the result.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
WMIOperation

Description

The wmi enumeration operation [Identifier] is being closed without completely enumerating the result. This is not supported in wmi API and will result in unpredictable results.

Message #

The wmi enumeration operation [%1] is being closed without completely enumerating the result. This is not supported in wmi API and will result in unpredictable results.

Fields #

NameDescription
Identifier UnicodeString—

Event ID 85 — Failed to query the results of bpa xpath: XPath.

#
Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Level
Warning
Task
Getserverbparesulttask

Description

Failed to query the results of bpa xpath: XPath. error: Error, last error: LastError.

Message #

Failed to query the results of bpa xpath: %1. error: %2, last error: %3.

Fields #

NameDescription
XPath UnicodeString—
Error HexInt32—
LastError HexInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-ServerManager-ManagementProvider",
    "guid": "C2E6D0D9-5DF8-4C77-A82B-C96C84579543",
    "event_source_name": "",
    "event_id": 85,
    "version": 0,
    "level": 3,
    "task": 16,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2022-04-07T17:38:27.513401+00:00",
    "event_record_id": 322,
    "correlation": {
      "ActivityID": "7E9799E8-7833-472A-9A67-4EBE3235C039"
    },
    "execution": {
      "process_id": 3944,
      "thread_id": 1536
    },
    "channel": "Microsoft-Windows-ServerManager-MgmtProvider/Operational",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-21-2121334350-1110938707-2888912545-500"
    }
  },
  "event_data": {
    "XPath": "Microsoft/Windows/FileServices:$reports$\\*\\Result.xml:/ResultDatabase/Result",
    "Error": "0x1f",
    "LastError": "0x3"
  },
  "message": ""
}

References #

Event ID 86 — Failed to get/query the resource of type Type at index Index.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Theerrorcheckingtask

Description

Failed to get/query the resource of type Type at index Index. error: Error, last error: LastError.

Message #

Failed to get/query the resource of type %1 at index %2. error: %3, last error: %4.

Fields #

NameDescription
Type UnicodeString—
Index UInt32—
Error HexInt32—
LastError HexInt32—

Event ID 87 — Generic failure querying trigger information of serice: Name [hResult = hResult, hLastResult = hLastError].

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getserverservicedetailtask

Description

Generic failure querying trigger information of serice: Name [hResult = hResult, hLastResult = hLastError].

Message #

Generic failure querying trigger information of serice: %1 [hResult = %2, hLastResult = %3].

Fields #

NameDescription
Name UnicodeString—
hResult HexInt32—
hLastError HexInt32—

Event ID 88 — Failed to get the performance data with error code PDH_LOG_TYPE_NOT_FOUND.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Theerrorcheckingtask

Description

Failed to get the performance data with error code PDH_LOG_TYPE_NOT_FOUND. Error: LastError, Qfe Check: QfeCheck.

Message #

Failed to get the performance data with error code PDH_LOG_TYPE_NOT_FOUND. Error: %1, Qfe Check: %2

Fields #

NameDescription
LastError HexInt32—
QfeCheck Boolean—

Event ID 89 — Failed to check the status of the performance counter DL QFE, error: Error, last error: LastError.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Theerrorcheckingtask

Description

Failed to check the status of the performance counter DL QFE, error: Error, last error: LastError.

Message #

Failed to check the status of the performance counter DL QFE, error: %1, last error: %2

Fields #

NameDescription
Error HexInt32—
LastError HexInt32—

Event ID 90 — Get server event detail extended task started.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getservereventdetailextendedtask

Description

Get server event detail extended task started.

Message #

Get server event detail extended task started.

Fields #

NameDescription
uValue UInt32—

Event ID 91 — Get server event detail extended task complete, number of results: uValue.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getservereventdetailextendedtask

Description

Get server event detail extended task complete, number of results: uValue.

Message #

Get server event detail extended task complete, number of results: %1.

Fields #

NameDescription
uValue UInt32—

Event ID 92 — Get server event detail extended task failed, error: Error, extended error: LastError.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Operational
Task
Getservereventdetailextendedtask

Description

Get server event detail extended task failed, error: Error, extended error: LastError.

Message #

Get server event detail extended task failed, error: %1, extended error: %2.

Fields #

NameDescription
Error HexInt32—
LastError HexInt32—

Event ID 93 — Server event detail extended query: Query.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getservereventdetailextendedtask

Description

Server event detail extended query: Query.

Message #

Server event detail extended query: %1.

Fields #

NameDescription
Query UnicodeString—

Event ID 94 — Server event detail extended task failed to process the query: error: Error, last error: LastError.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getservereventdetailextendedtask

Description

Server event detail extended task failed to process the query: error: Error, last error: LastError.

Message #

Server event detail extended task failed to process the query: error: %1, last error: %2

Fields #

NameDescription
Error HexInt32—
LastError HexInt32—

Event ID 95 — Server event detail extended task failed to open the provider's metadata, name: Name.

Provider
Microsoft-Windows-ServerManager-ManagementProvider
Channel
Debug
Task
Getservereventdetailextendedtask

Description

Server event detail extended task failed to open the provider's metadata, name: Name.

Message #

Server event detail extended task failed to open the provider's metadata, name: %1.

Fields #

NameDescription
Name UnicodeString—