Microsoft-Windows-Servicing

154 events across 3 channels

Event ID	Title	Channel
1	Initiating changes for package %1.	Setup
2	Package %1 was successfully changed to the %2 state.	Setup
3	Package %1 failed to be changed to the %2 state.	Setup
4	A reboot is necessary before package %1 can be changed to the %2 state.	Setup
5	The servicing request received for package %1 cannot be satisfied since the …	Setup
6	Package %1 failed to be changed to the %2 state and is now partially installed.	Setup
7	Initiating changes to turn on update %1 of package %2.	Setup
8	Initiating changes to turn off update %1 of package %2.	Setup
9	Selectable update %1 of package %2 was successfully turned on.	Setup
10	Selectable update %1 of package %2 was successfully turned off.	Setup
11	Update %1 of package %2 failed to be turned on.	Setup
12	Update %1 of package %2 failed to be turned off.	Setup
13	A reboot is necessary before the selectable update %1 of package %2 can be …	Setup
14	A reboot is necessary before the selectable update %1 of package %2 can be …	Setup
15	Selectable update %1 of package %2 was successfully turned off with its payload …	Setup
16	Update %1 of package %2 failed to be turned off.	Setup
17	Report:[.	Debug
18	START [Resolve]:[.	Debug
20	END [Resolve]:[.	Debug
21	START [Execute]:[.	Debug
23	END [Execute]:[.	Debug
24	START [Stage]:[.	Debug
26	END [Stage]:[.	Debug
33	START [DPX Expansion]:[.	Debug
34	END [DPX Expansion]:[.	Debug
35	START [Doq Stage]:[.	Debug
37	END [Doq Stage]:[.	Debug
38	START [Doq Unstage]:[.	Debug
39	END [Doq Unstage]:[.	Debug
40	START [Doq Critical Install]:[.	Debug
41	END [Doq Critical Install]:[.	Debug
42	START [Doq Install]:[.	Debug
43	END [Doq Install]:[.	Debug
44	STARt [Doq Critical Uninstall]:[.	Debug
45	END [Doq Critical Uninstall]:[.	Debug
46	START [Doq Uninstall]:[.	Debug
47	END [Doq Uninstall]:[.	Debug
48	START [Doq Device Install]:[.	Debug
49	END [Doq Device Install]:[.	Debug
50	START [InstallUninstall]:[.	Debug
51	END [InstallUninstall]:[.	Debug
52	START [Poqexec]:[.	Debug
53	END [Poqexec]:[.	Debug
54	START [Shutdown Processing]:[.	Debug
55	END [Shutdown Processing]:[.	Debug
56	START [Non-Critical Doq]:[.	Debug
57	END [Non-Critical Doq]:[.	Debug
58	START [Critical Doq]:[.	Debug
59	END [Critical Doq]:[.	Debug
60	START [Plan Package]:[.	Debug
61	END [Plan Package]:[.	Debug
62	TrustedInstaller Finalize Event Report:[.	Debug
63	TrustedInstaller Initialize Event Report:[.	Debug
64	Doq Stage Progress Event Report:[.	Debug
65	Doq Unstage Progress Event Report:[.	Debug
66	Doq Install Progress Event Report:[.	Debug
67	Doq Uninstall Progress Event Report:[.	Debug
68	Startup Complete Event Report:[.	Debug
69	START [AI Queue Processing]:[.	Debug
70	END [AI Queue Processing]:[.	Debug
71	START [AI Install]:[Description = [.	Debug
72	END [AI Install]:[Status=[.	Debug
73	Report: [.	Debug
74	CSI INSTALL Deployment Event Report: [.	Debug
75	CSI UNINSTALL Deployment Event Report: [.	Debug
76	START [KTM Transaction]:[.	Debug
77	END [KTM Transaction]:[.	Debug
78	CSI COMPRESS Event Report: [.	Debug
79	CSI Stage Component Event Report: [.	Debug
80	CSI AI Completion Event Report: [.	Debug
82	START [CSI SMIPI]:[.	Debug
83	END [CSI SMIPI]:[.	Debug
84	CSI SMIPI INSTALL Event Report: [.	Debug
85	CSI Transaction Start Event Report: [.	Debug
86	CSI Transaction End Event Report: [.	Debug
87	START [CSI Corruption Detection Event]:[.	Debug
88	END [CSI Corruption Detection Event]:[.	Debug
89	START [CSI Corruption Repair Event]:[.	Debug
90	END [CSI Corruption Repair Event]:[.	Debug
91	START [CSI Scavenge]:[.	Debug
92	END [CSI Scavenge]:[.	Debug
93	START [CBS Scavenge]:[.	Debug
94	END [CBS Scavenge]:[.	Debug
95	START [Archive Logs]:[.	Debug
96	END [Archive Logs]:[.	Debug
97	START [Drain Catalogs]:[.	Debug
98	END [Drain Catalogs]:[.	Debug
99	START [Automatic Deepclean]:[.	Debug
100	END [Automatic Deepclean]:[.	Debug
101	START [Manual Deepclean]:[.	Debug
102	END [Manual Deepclean]:[.	Debug
103	START [Delete Session Files]:[.	Debug
104	END [Delete Session Files]:[.	Debug
105	Progress: UI message updated.	Debug
1000	Windows Servicing is processing hotpatch package %1(%2).	Setup
1001	Windows Servicing disabled hotpatching for package %2(%3) because update %1 is …	Setup
1002	Windows Servicing disabled hotpatching for package %1(%2) because servicing is …	Setup
1003	Windows Servicing disabled hotpatching for package %1(%2) because a reboot is …	Setup
1004	Windows Servicing successfully installed hotpatching package %1(%2).	Setup
1005	Windows Servicing has required a reboot to complete the installation of …	Setup
1006	Windows Servicing disabled hotpatching for package %1(%2) because a file could …	Setup
1007	Windows Servicing disabled hotpatching for package %1(%2) because required files …	Setup
1008	Windows Servicing failed to perform hotpatching for package %1(%2) because the …	Setup
1009	Windows Servicing failed to perform hotpatching for package %1(%2) because of an …	Setup
1010	Windows Servicing disabled hotpatching for package %2(%3) because update %1 is …	Setup
1011	Windows Servicing disabled hotpatching for package %2(%3) because hotpatch …	Setup
1012	Windows Servicing disabled hotpatching for package %2(%3) to process regular …	Setup
1013	Initiating system store corruption detection and repair.	Setup
1014	System store corruption detection and repair has completed.	Setup
1015	%2 of %3 instances of system store corruption have been repaired.	Setup
4371		Operational
4372		Operational
4373		Operational
4374		Operational
4375		Operational
4376		Operational
4383		Operational
4385		Operational
4386		Operational
4400		Operational
4401		Operational
4402		Operational
4403		Operational
4404		Operational
4405		Operational
4406		Operational
4407		Operational
4408		Operational
4409		Operational
4416		Operational
4417		Operational
4418		Operational
1073746195	Windows Servicing started a process of changing package %1(%2) state from %3(%4) …	Operational
1073746196	Windows Servicing is setting package %1(%2) state to %3(%4).	Operational
1073746197	Windows Servicing successfully set package %1(%2) state to %3(%4).	Operational
1073746207	Windows Servicing completed the process of changing update %1 from package %2 …	Operational
1073746224	Windows Servicing is processing hotpatch package %1(%2).	Operational
1073746225	Windows Servicing disabled hotpatching for package %2(%3) because update %1 is …	Operational
1073746226	Windows Servicing disabled hotpatching for package %1(%2) because servicing is …	Operational
1073746227	Windows Servicing disabled hotpatching for package %1(%2) because a reboot is …	Operational
1073746228	Windows Servicing successfully installed hotpatching package %1(%2).	Operational
1073746229	Windows Servicing has required a reboot to complete the installation of …	Operational
1073746240	Windows Servicing disabled hotpatching for package %2(%3) because update %1 is …	Operational
2147488022	Windows Servicing identified that package %1(%2) is not applicable for this …	Operational
2147488024	Servicing has required reboot to complete the operation of setting package …	Operational
2147488034	Windows Servicing required reboot to complete the process of changing update %1 …	Operational
2147488054	Windows Servicing disabled hotpatching for package %1(%2) because a file could …	Operational
2147488055	Windows Servicing disabled hotpatching for package %1(%2) because required files …	Operational
2147488056	Windows Servicing failed to perform hotpatching for package %1(%2) because the …	Operational
2147488057	Windows Servicing failed to perform hotpatching for package %1(%2) because of an …	Operational
2147488065	Windows Servicing disabled hotpatching for package %2(%3) because hotpatch …	Operational
2147488066	Windows Servicing disabled hotpatching for package %2(%3) to process regular …	Operational
3221229847	Windows Servicing failed to complete the process of setting package %1 (%2) into …	Operational
3221229857	Windows Servicing failed to complete the process of changing update %1 from …	Operational

Event ID 1 — Initiating changes for package %1.

Provider: Microsoft-Windows-Servicing
Channel: Setup
Samples: 1

Message

Initiating changes for package %1. Current state is %2. Target state is %4. Client id: %6.

Fields

Name	Description
`CbsPackageInitiateChanges.PackageIdentifier`	—
`CbsPackageInitiateChanges.InitialPackageState`	—
`CbsPackageInitiateChanges.InitialPackageStateTextized`	—
`CbsPackageInitiateChanges.IntendedPackageState`	—
`CbsPackageInitiateChanges.IntendedPackageStateTextized`	—
`CbsPackageInitiateChanges.Client`	4. Client id.

Example Event

system:
  provider: Microsoft-Windows-Servicing
  guid: BD12F3B8-FC40-4A61-A307-B7A013A069C1
  event_source_name: ''
  event_id: 1
  version: 0
  level: 0
  task: 1
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2023-11-05T22:27:07.962339+00:00'
  event_record_id: 11
  correlation: {}
  execution:
    process_id: 5140
    thread_id: 5984
  channel: Setup
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-18
user_data:
  CbsPackageInitiateChanges:
    PackageIdentifier: KB5032381
    InitialPackageState: 5000
    InitialPackageStateTextized: Absent
    IntendedPackageState: 5112
    IntendedPackageStateTextized: Installed
    Client: WindowsUpdateAgent
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 2 — Package %1 was successfully changed to the %2 state.

Provider: Microsoft-Windows-Servicing
Channel: Setup
Samples: 1

Message

Package %1 was successfully changed to the %2 state.

Fields

Name	Description
`CbsPackageChangeState.PackageIdentifier`	—
`CbsPackageChangeState.IntendedPackageState`	—
`CbsPackageChangeState.IntendedPackageStateTextized`	—
`CbsPackageChangeState.ErrorCode`	—
`CbsPackageChangeState.Client`	—

Example Event

system:
  provider: Microsoft-Windows-Servicing
  guid: BD12F3B8-FC40-4A61-A307-B7A013A069C1
  event_source_name: ''
  event_id: 2
  version: 0
  level: 0
  task: 1
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2023-11-05T22:27:38.467765+00:00'
  event_record_id: 12
  correlation: {}
  execution:
    process_id: 5140
    thread_id: 5124
  channel: Setup
  computer: WinDev2310Eval
  security:
    user_id: S-1-5-18
user_data:
  CbsPackageChangeState:
    PackageIdentifier: KB5032381
    IntendedPackageState: 5112
    IntendedPackageStateTextized: Installed
    ErrorCode: '0x0'
    Client: WindowsUpdateAgent
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 3 — Package %1 failed to be changed to the %2 state.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Package %1 failed to be changed to the %2 state. Status: %4.

Fields

Name	Description
`identifier`	—
`targetPackageState`	—
`targetPackageStateTextized`	—
`errorCode`	—
`client`	—

Event ID 4 — A reboot is necessary before package %1 can be changed to the %2 state.

Provider: Microsoft-Windows-Servicing
Channel: Setup
Samples: 1

Message

A reboot is necessary before package %1 can be changed to the %2 state.

Fields

Name	Description
`CbsPackageChangeState.PackageIdentifier`	—
`CbsPackageChangeState.IntendedPackageState`	—
`CbsPackageChangeState.IntendedPackageStateTextized`	—
`CbsPackageChangeState.ErrorCode`	—
`CbsPackageChangeState.Client`	—

Example Event

system:
  provider: Microsoft-Windows-Servicing
  guid: BD12F3B8-FC40-4A61-A307-B7A013A069C1
  event_source_name: ''
  event_id: 4
  version: 0
  level: 0
  task: 1
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2022-04-07T08:29:46.442470+00:00'
  event_record_id: 30
  correlation: {}
  execution:
    process_id: 6644
    thread_id: 5384
  channel: Setup
  computer: WIN-FPV0DSIC9O6.sigma.fr
  security:
    user_id: S-1-5-18
user_data:
  CbsPackageChangeState:
    PackageIdentifier: KB5009470
    IntendedPackageState: 5112
    IntendedPackageStateTextized: Installed
    ErrorCode: '0x0'
    Client: WindowsUpdateAgent
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 5 — The servicing request received for package %1 cannot be satisfied since the package is not applicable.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

The servicing request received for package %1 cannot be satisfied since the package is not applicable.

Fields

Name	Description
`identifier`	—
`targetPackageState`	—
`targetPackageStateTextized`	—
`errorCode`	—
`client`	—

Event ID 6 — Package %1 failed to be changed to the %2 state and is now partially installed.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Package %1 failed to be changed to the %2 state and is now partially installed. Status: %4.

Fields

Name	Description
`identifier`	—
`targetPackageState`	—
`targetPackageStateTextized`	—
`errorCode`	—
`client`	—

Event ID 7 — Initiating changes to turn on update %1 of package %2.

Provider: Microsoft-Windows-Servicing
Channel: Setup
Samples: 1

Message

Initiating changes to turn on update %1 of package %2. Client id: %4.

Fields

Name	Description
`CbsUpdateChangeState.UpdateName`	—
`CbsUpdateChangeState.PackageIdentifier`	—
`CbsUpdateChangeState.ErrorCode`	—
`CbsUpdateChangeState.Client`	2. Client id.

Example Event

system:
  provider: Microsoft-Windows-Servicing
  guid: BD12F3B8-FC40-4A61-A307-B7A013A069C1
  event_source_name: ''
  event_id: 7
  version: 0
  level: 0
  task: 1
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2022-04-07T17:06:38.742653+00:00'
  event_record_id: 9
  correlation: {}
  execution:
    process_id: 4748
    thread_id: 3888
  channel: Setup
  computer: WIN-FPV0DSIC9O6
  security:
    user_id: S-1-5-18
user_data:
  CbsUpdateChangeState:
    UpdateName: DirectoryServices-AdministrativeCenter
    PackageIdentifier: DirectoryServices-AdministrativeCenter-Package
    ErrorCode: null
    Client: DISM Package Manager Provider
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 8 — Initiating changes to turn off update %1 of package %2.

Provider: Microsoft-Windows-Servicing
Channel: Setup
Samples: 1

Message

Initiating changes to turn off update %1 of package %2. Client id: %4.

Fields

Name	Description
`updateName`	—
`identifier`	—
`errorCode`	—
`client`	—

Example Event

system:
  provider: Microsoft-Windows-Servicing
  guid: BD12F3B8-FC40-4A61-A307-B7A013A069C1
  event_source_name: ''
  event_id: 8
  version: 0
  level: 0
  task: 1
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2022-04-04T09:34:23.102927Z'
  event_record_id: 21
  correlation:
    '#attributes':
      ActivityID: 5E3EF0A6-D286-4320-A2E8-AE15128166B5
  execution:
    process_id: 14668
    thread_id: 19008
  channel: Setup
  computer: N900B7FFD.kapsch.co.at
  security:
    user_id: S-1-5-18
user_data:
  CbsUpdateChangeState:
    '#attributes':
      xmlns: http://manifests.microsoft.com/win/2004/08/windows/setup_provider
    UpdateName: Windows-Defender-Default-Definitions
    PackageIdentifier: Windows-Defender-Client
    ErrorCode: null
    Client: DISM Package Manager Provider

References

Example event sourced from https://github.com/Yamato-Security/hayabusa-sample-evtx

Event ID 9 — Selectable update %1 of package %2 was successfully turned on.

Provider: Microsoft-Windows-Servicing
Channel: Setup
Samples: 1

Message

Selectable update %1 of package %2 was successfully turned on.

Fields

Name	Description
`CbsUpdateChangeState.UpdateName`	—
`CbsUpdateChangeState.PackageIdentifier`	—
`CbsUpdateChangeState.ErrorCode`	—
`CbsUpdateChangeState.Client`	—

Example Event

system:
  provider: Microsoft-Windows-Servicing
  guid: BD12F3B8-FC40-4A61-A307-B7A013A069C1
  event_source_name: ''
  event_id: 9
  version: 0
  level: 0
  task: 1
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2022-04-07T17:07:00.973337+00:00'
  event_record_id: 18
  correlation: {}
  execution:
    process_id: 4748
    thread_id: 3888
  channel: Setup
  computer: WIN-FPV0DSIC9O6
  security:
    user_id: S-1-5-18
user_data:
  CbsUpdateChangeState:
    UpdateName: DirectoryServices-AdministrativeCenter
    PackageIdentifier: DirectoryServices-AdministrativeCenter-Package
    ErrorCode: '0x0'
    Client: DISM Package Manager Provider
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 10 — Selectable update %1 of package %2 was successfully turned off.

Provider: Microsoft-Windows-Servicing
Channel: Setup
Samples: 1

Message

Selectable update %1 of package %2 was successfully turned off.

Fields

Name	Description
`updateName`	—
`identifier`	—
`errorCode`	—
`client`	—

Example Event

system:
  provider: Microsoft-Windows-Servicing
  guid: BD12F3B8-FC40-4A61-A307-B7A013A069C1
  event_source_name: ''
  event_id: 10
  version: 0
  level: 0
  task: 1
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2022-04-04T09:34:28.558432Z'
  event_record_id: 22
  correlation:
    '#attributes':
      ActivityID: 5E3EF0A6-D286-4320-A2E8-AE15128166B5
  execution:
    process_id: 14668
    thread_id: 19008
  channel: Setup
  computer: N900B7FFD.kapsch.co.at
  security:
    user_id: S-1-5-18
user_data:
  CbsUpdateChangeState:
    '#attributes':
      xmlns: http://manifests.microsoft.com/win/2004/08/windows/setup_provider
    UpdateName: Windows-Defender-Default-Definitions
    PackageIdentifier: Windows-Defender-Client
    ErrorCode: '0x0'
    Client: DISM Package Manager Provider

References

Example event sourced from https://github.com/Yamato-Security/hayabusa-sample-evtx

Event ID 11 — Update %1 of package %2 failed to be turned on.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Update %1 of package %2 failed to be turned on. Status: %3.

Fields

Name	Description
`updateName`	—
`identifier`	—
`errorCode`	—
`client`	—

Event ID 12 — Update %1 of package %2 failed to be turned off.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Update %1 of package %2 failed to be turned off. Status: %3.

Fields

Name	Description
`updateName`	—
`identifier`	—
`errorCode`	—
`client`	—

Event ID 13 — A reboot is necessary before the selectable update %1 of package %2 can be turned on.

Provider: Microsoft-Windows-Servicing
Channel: Setup
Samples: 1

Message

A reboot is necessary before the selectable update %1 of package %2 can be turned on.

Fields

Name	Description
`CbsUpdateChangeState.UpdateName`	—
`CbsUpdateChangeState.PackageIdentifier`	—
`CbsUpdateChangeState.ErrorCode`	—
`CbsUpdateChangeState.Client`	—

Example Event

system:
  provider: Microsoft-Windows-Servicing
  guid: BD12F3B8-FC40-4A61-A307-B7A013A069C1
  event_source_name: ''
  event_id: 13
  version: 0
  level: 0
  task: 1
  opcode: 0
  keywords: 9223372036854775808
  time_created: '2022-04-04T10:59:07.927880+00:00'
  event_record_id: 85
  correlation: {}
  execution:
    process_id: 3472
    thread_id: 2576
  channel: Setup
  computer: WIN-TKC15D7KHUR
  security:
    user_id: S-1-5-18
user_data:
  CbsUpdateChangeState:
    UpdateName: TFTP
    PackageIdentifier: Microsoft-Windows-TFTP-Client
    ErrorCode: '0x0'
    Client: DISM Package Manager Provider
message: ''

References

Example event sourced from https://github.com/NextronSystems/evtx-baseline

Event ID 14 — A reboot is necessary before the selectable update %1 of package %2 can be turned off.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

A reboot is necessary before the selectable update %1 of package %2 can be turned off.

Fields

Name	Description
`updateName`	—
`identifier`	—
`errorCode`	—
`client`	—

Event ID 15 — Selectable update %1 of package %2 was successfully turned off with its payload removed.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Selectable update %1 of package %2 was successfully turned off with its payload removed.

Fields

Name	Description
`updateName`	—
`identifier`	—
`errorCode`	—
`client`	—

Event ID 16 — Update %1 of package %2 failed to be turned off.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Update %1 of package %2 failed to be turned off. Payload removal was requested. Status: %3.

Fields

Name	Description
`updateName`	—
`identifier`	—
`errorCode`	—
`client`	—

Event ID 17 — Report:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

Report:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 18 — START [Resolve]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Resolve]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 20 — END [Resolve]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Resolve]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 21 — START [Execute]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Execute]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 23 — END [Execute]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Execute]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 24 — START [Stage]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Stage]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 26 — END [Stage]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Stage]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 33 — START [DPX Expansion]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [DPX Expansion]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 34 — END [DPX Expansion]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [DPX Expansion]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 35 — START [Doq Stage]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Doq Stage]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 37 — END [Doq Stage]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Doq Stage]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 38 — START [Doq Unstage]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Doq Unstage]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 39 — END [Doq Unstage]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Doq Unstage]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 40 — START [Doq Critical Install]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Doq Critical Install]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 41 — END [Doq Critical Install]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Doq Critical Install]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 42 — START [Doq Install]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Doq Install]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 43 — END [Doq Install]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Doq Install]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 44 — STARt [Doq Critical Uninstall]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

STARt [Doq Critical Uninstall]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 45 — END [Doq Critical Uninstall]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Doq Critical Uninstall]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 46 — START [Doq Uninstall]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Doq Uninstall]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 47 — END [Doq Uninstall]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Doq Uninstall]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 48 — START [Doq Device Install]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Doq Device Install]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 49 — END [Doq Device Install]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Doq Device Install]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 50 — START [InstallUninstall]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [InstallUninstall]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 51 — END [InstallUninstall]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [InstallUninstall]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 52 — START [Poqexec]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Poqexec]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 53 — END [Poqexec]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Poqexec]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 54 — START [Shutdown Processing]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Shutdown Processing]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 55 — END [Shutdown Processing]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Shutdown Processing]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 56 — START [Non-Critical Doq]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Non-Critical Doq]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 57 — END [Non-Critical Doq]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Non-Critical Doq]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 58 — START [Critical Doq]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Critical Doq]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 59 — END [Critical Doq]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Critical Doq]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 60 — START [Plan Package]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Plan Package]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 61 — END [Plan Package]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Plan Package]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 62 — TrustedInstaller Finalize Event Report:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

TrustedInstaller Finalize Event Report:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 63 — TrustedInstaller Initialize Event Report:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

TrustedInstaller Initialize Event Report:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 64 — Doq Stage Progress Event Report:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

Doq Stage Progress Event Report:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 65 — Doq Unstage Progress Event Report:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

Doq Unstage Progress Event Report:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 66 — Doq Install Progress Event Report:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

Doq Install Progress Event Report:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 67 — Doq Uninstall Progress Event Report:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

Doq Uninstall Progress Event Report:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 68 — Startup Complete Event Report:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

Startup Complete Event Report:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 69 — START [AI Queue Processing]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [AI Queue Processing]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 70 — END [AI Queue Processing]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [AI Queue Processing]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 71 — START [AI Install]:[Description = [.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [AI Install]:[Description = [%1], Phase = [%2], Mode = [%3], PrevComponent=[%4], NewComponent=[%5]]

Fields

Name	Description
`DescString`	—
`Phase`	—
`Mode`	—
`PrevComponent`	—
`NewComponent`	—

Event ID 72 — END [AI Install]:[Status=[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [AI Install]:[Status=[%1]]

Fields

Name	Description
`DescString`	—
`InstallerEndEvent`	—

Event ID 73 — Report: [.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

Report: [%1]

Fields

Name	Description
`DescString`	—

Event ID 74 — CSI INSTALL Deployment Event Report: [.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

CSI INSTALL Deployment Event Report: [%1]

Fields

Name	Description
`DescString`	—

Event ID 75 — CSI UNINSTALL Deployment Event Report: [.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

CSI UNINSTALL Deployment Event Report: [%1]

Fields

Name	Description
`DescString`	—

Event ID 76 — START [KTM Transaction]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [KTM Transaction]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 77 — END [KTM Transaction]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [KTM Transaction]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 78 — CSI COMPRESS Event Report: [.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

CSI COMPRESS Event Report: [%1]

Fields

Name	Description
`DescString`	—

Event ID 79 — CSI Stage Component Event Report: [.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

CSI Stage Component Event Report: [%1]

Fields

Name	Description
`DescString`	—

Event ID 80 — CSI AI Completion Event Report: [.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

CSI AI Completion Event Report: [%1]

Fields

Name	Description
`DescString`	—

Event ID 82 — START [CSI SMIPI]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [CSI SMIPI]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 83 — END [CSI SMIPI]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [CSI SMIPI]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 84 — CSI SMIPI INSTALL Event Report: [.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

CSI SMIPI INSTALL Event Report: [%1]

Fields

Name	Description
`DescString`	—

Event ID 85 — CSI Transaction Start Event Report: [.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

CSI Transaction Start Event Report: [%1]

Fields

Name	Description
`DescString`	—

Event ID 86 — CSI Transaction End Event Report: [.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

CSI Transaction End Event Report: [%1]

Fields

Name	Description
`DescString`	—

Event ID 87 — START [CSI Corruption Detection Event]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [CSI Corruption Detection Event]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 88 — END [CSI Corruption Detection Event]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [CSI Corruption Detection Event]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 89 — START [CSI Corruption Repair Event]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [CSI Corruption Repair Event]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 90 — END [CSI Corruption Repair Event]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [CSI Corruption Repair Event]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 91 — START [CSI Scavenge]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [CSI Scavenge]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 92 — END [CSI Scavenge]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [CSI Scavenge]:[%1]

Fields

Name	Description
`DescString`	—

Event ID 93 — START [CBS Scavenge]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [CBS Scavenge]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 94 — END [CBS Scavenge]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [CBS Scavenge]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 95 — START [Archive Logs]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Archive Logs]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 96 — END [Archive Logs]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Archive Logs]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 97 — START [Drain Catalogs]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Drain Catalogs]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 98 — END [Drain Catalogs]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Drain Catalogs]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 99 — START [Automatic Deepclean]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Automatic Deepclean]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 100 — END [Automatic Deepclean]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Automatic Deepclean]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 101 — START [Manual Deepclean]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Manual Deepclean]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 102 — END [Manual Deepclean]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Manual Deepclean]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 103 — START [Delete Session Files]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

START [Delete Session Files]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 104 — END [Delete Session Files]:[.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

END [Delete Session Files]:[%1]

Fields

Name	Description
`EventReport`	—

Event ID 105 — Progress: UI message updated.

Provider: Microsoft-Windows-Servicing
Channel: Debug

Message

Progress: UI message updated. %1

Fields

Name	Description
`EventReport`	—

Event ID 1000 — Windows Servicing is processing hotpatch package %1(%2).

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing is processing hotpatch package %1(%2).

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1001 — Windows Servicing disabled hotpatching for package %2(%3) because update %1 is not enabled for hotpatching.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing disabled hotpatching for package %2(%3) because update %1 is not enabled for hotpatching.

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 1002 — Windows Servicing disabled hotpatching for package %1(%2) because servicing is being performed offline.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing disabled hotpatching for package %1(%2) because servicing is being performed offline.

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1003 — Windows Servicing disabled hotpatching for package %1(%2) because a reboot is required to complete a prior operation.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing disabled hotpatching for package %1(%2) because a reboot is required to complete a prior operation.

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1004 — Windows Servicing successfully installed hotpatching package %1(%2).

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing successfully installed hotpatching package %1(%2).

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1005 — Windows Servicing has required a reboot to complete the installation of hotpatching package %1(%2).

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing has required a reboot to complete the installation of hotpatching package %1(%2).

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1006 — Windows Servicing disabled hotpatching for package %1(%2) because a file could not be replaced immediately.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing disabled hotpatching for package %1(%2) because a file could not be replaced immediately.

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1007 — Windows Servicing disabled hotpatching for package %1(%2) because required files or custom actions are incompatible with hotpatching.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing disabled hotpatching for package %1(%2) because required files or custom actions are incompatible with hotpatching.

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1008 — Windows Servicing failed to perform hotpatching for package %1(%2) because the hotpatch installer required a reboot.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing failed to perform hotpatching for package %1(%2) because the hotpatch installer required a reboot.

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1009 — Windows Servicing failed to perform hotpatching for package %1(%2) because of an error (%8).

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing failed to perform hotpatching for package %1(%2) because of an error (%8).

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1010 — Windows Servicing disabled hotpatching for package %2(%3) because update %1 is being set to state %4(%5).

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing disabled hotpatching for package %2(%3) because update %1 is being set to state %4(%5).

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 1011 — Windows Servicing disabled hotpatching for package %2(%3) because hotpatch update %1 will not be installed.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing disabled hotpatching for package %2(%3) because hotpatch update %1 will not be installed.

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 1012 — Windows Servicing disabled hotpatching for package %2(%3) to process regular update %1.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Windows Servicing disabled hotpatching for package %2(%3) to process regular update %1.

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 1013 — Initiating system store corruption detection and repair.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

Initiating system store corruption detection and repair. Detection Only: %1, Automatically Triggered: %2.

Fields

Name	Description
`detectionType`	—
`triggerType`	—

Event ID 1014 — System store corruption detection and repair has completed.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

System store corruption detection and repair has completed. Status: %1, Total instances of corruption found: %3, total instances of corruption repaired: %2.

Fields

Name	Description
`errorCode`	—
`repaired`	—
`totalCorruption`	—

Event ID 1015 — %2 of %3 instances of system store corruption have been repaired.

Provider: Microsoft-Windows-Servicing
Channel: Setup

Message

%2 of %3 instances of system store corruption have been repaired. Unrepaired corruptions may lead to failures in future system servicing.

Fields

Name	Description
`errorCode`	—
`repaired`	—
`totalCorruption`	—

Event ID 4371 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`initialPackageStateLoc`	—
`initialPackageState`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`client`	—
`supportInformation`	—

Event ID 4372 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4373 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4374 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4375 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4376 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4383 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 4385 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 4386 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 4400 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4401 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 4402 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4403 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4404 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4405 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4406 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4407 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4408 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4409 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 4416 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 4417 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 4418 —

Provider: Microsoft-Windows-Servicing
Channel: Operational

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 1073746195 — Windows Servicing started a process of changing package %1(%2) state from %3(%4) to %5(%6).

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing started a process of changing package %1(%2) state from %3(%4) to %5(%6)

Fields

Name	Description
`identifier`	—
`releaseType`	—
`initialPackageStateLoc`	—
`initialPackageState`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`client`	—
`supportInformation`	—

Event ID 1073746196 — Windows Servicing is setting package %1(%2) state to %3(%4).

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing is setting package %1(%2) state to %3(%4)

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1073746197 — Windows Servicing successfully set package %1(%2) state to %3(%4).

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing successfully set package %1(%2) state to %3(%4)

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1073746207 — Windows Servicing completed the process of changing update %1 from package %2 (%3) into %4(%5) state.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing completed the process of changing update %1 from package %2 (%3) into %4(%5) state

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 1073746224 — Windows Servicing is processing hotpatch package %1(%2).

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing is processing hotpatch package %1(%2).

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1073746225 — Windows Servicing disabled hotpatching for package %2(%3) because update %1 is not enabled for hotpatching.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing disabled hotpatching for package %2(%3) because update %1 is not enabled for hotpatching.

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 1073746226 — Windows Servicing disabled hotpatching for package %1(%2) because servicing is being performed offline.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing disabled hotpatching for package %1(%2) because servicing is being performed offline.

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1073746227 — Windows Servicing disabled hotpatching for package %1(%2) because a reboot is required to complete a prior operation.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing disabled hotpatching for package %1(%2) because a reboot is required to complete a prior operation.

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1073746228 — Windows Servicing successfully installed hotpatching package %1(%2).

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing successfully installed hotpatching package %1(%2).

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1073746229 — Windows Servicing has required a reboot to complete the installation of hotpatching package %1(%2).

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing has required a reboot to complete the installation of hotpatching package %1(%2).

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 1073746240 — Windows Servicing disabled hotpatching for package %2(%3) because update %1 is being set to state %4(%5).

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing disabled hotpatching for package %2(%3) because update %1 is being set to state %4(%5).

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 2147488022 — Windows Servicing identified that package %1(%2) is not applicable for this system.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing identified that package %1(%2) is not applicable for this system

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 2147488024 — Servicing has required reboot to complete the operation of setting package %1(%2) into %3(%4) state.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Servicing has required reboot to complete the operation of setting package %1(%2) into %3(%4) state

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 2147488034 — Windows Servicing required reboot to complete the process of changing update %1 from package %2(%3) into %4(%5) state.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing required reboot to complete the process of changing update %1 from package %2(%3) into %4(%5) state

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 2147488054 — Windows Servicing disabled hotpatching for package %1(%2) because a file could not be replaced immediately.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing disabled hotpatching for package %1(%2) because a file could not be replaced immediately.

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 2147488055 — Windows Servicing disabled hotpatching for package %1(%2) because required files or custom actions are incompatible with hotpatching.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing disabled hotpatching for package %1(%2) because required files or custom actions are incompatible with hotpatching.

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 2147488056 — Windows Servicing failed to perform hotpatching for package %1(%2) because the hotpatch installer required a reboot.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing failed to perform hotpatching for package %1(%2) because the hotpatch installer required a reboot.

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 2147488057 — Windows Servicing failed to perform hotpatching for package %1(%2) because of an error (%8).

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing failed to perform hotpatching for package %1(%2) because of an error (%8).

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 2147488065 — Windows Servicing disabled hotpatching for package %2(%3) because hotpatch update %1 will not be installed.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing disabled hotpatching for package %2(%3) because hotpatch update %1 will not be installed.

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 2147488066 — Windows Servicing disabled hotpatching for package %2(%3) to process regular update %1.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing disabled hotpatching for package %2(%3) to process regular update %1.

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—

Event ID 3221229847 — Windows Servicing failed to complete the process of setting package %1 (%2) into %3(%4) state.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing failed to complete the process of setting package %1 (%2) into %3(%4) state

Fields

Name	Description
`identifier`	—
`releaseType`	—
`packageStateLoc`	—
`packageState`	—
`packageAssembly`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—
`missingElements`	—

Event ID 3221229857 — Windows Servicing failed to complete the process of changing update %1 from package %2(%3) into %4(%5) state.

Provider: Microsoft-Windows-Servicing
Channel: Operational

Message

Windows Servicing failed to complete the process of changing update %1 from package %2(%3) into %4(%5) state

Fields

Name	Description
`updateName`	—
`identifier`	—
`releaseType`	—
`updateStateLoc`	—
`updateState`	—
`packageAssembly`	—
`updateDisplayName`	—
`operation`	—
`operationCompleted`	—
`errorCode`	—
`rebootOption`	—