Microsoft-Windows-StateRepository
95 events across 3 channels
Event ID 100 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
SQL | — |
Event ID 101 — [P:%2 T:%3] Trace: Executing SQL '%1'.
Message
Fields
| Name | Description |
|---|---|
SQL | — |
ProcessId | — |
ThreadId | — |
Event ID 102 — Error %1: Failed to open settings at HKLM\%2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Subkey | — |
Event ID 103 — Error %1: Failed to read setting %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Name | — |
Event ID 104 — Warning %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
SQL | — |
Event ID 105 — Info %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
SQL | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 105
version: 0
level: 4
task: 1
opcode: 0
keywords: 4611686018427387905
time_created: '2023-10-25T21:39:12.861376+00:00'
event_record_id: 376
correlation: {}
execution:
process_id: 6332
thread_id: 6376
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDevEval
security:
user_id: S-1-5-18
event_data:
ErrorCode: '0x11b'
SQL: recovered 10 frames from WAL file C:\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-wal
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 106 — Error %1: Failed to write setting %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Name | — |
Event ID 107 — CriticalError %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
SQL | — |
Event ID 108 — Verbose %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
SQL | — |
Event ID 200 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Event ID 201 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Id | — |
Revision | — |
Event ID 202 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Id | — |
Event ID 203 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Id | — |
Event ID 204 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Event ID 205 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Id | — |
Event ID 206 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Event ID 207 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Event ID 208 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Id | — |
Event ID 209 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Event ID 210 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Event ID 211 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Id | — |
Event ID 212 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Event ID 213 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
ClientId | — |
Event ID 214 — Blocking requests [Options=.
Message
Fields
| Name | Description |
|---|---|
Options | — |
ProcessId | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 214
version: 0
level: 3
task: 2
opcode: 0
keywords: 4611686018427387905
time_created: '2023-10-25T22:55:29.458620+00:00'
event_record_id: 1169
correlation: {}
execution:
process_id: 2396
thread_id: 6812
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDevEval
security:
user_id: S-1-5-18
event_data:
Options: '0x1'
ProcessId: 4544
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 215 — Unblocking requests [Options=.
Message
Fields
| Name | Description |
|---|---|
Options | — |
ProcessId | — |
Event ID 216 — StateRepository service started [ProcessId=.
Message
Fields
| Name | Description |
|---|---|
ProcessId | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 216
version: 0
level: 4
task: 2
opcode: 0
keywords: 4611686018427387905
time_created: '2023-11-06T06:25:42.462183+00:00'
event_record_id: 1406
correlation: {}
execution:
process_id: 1096
thread_id: 2084
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
ProcessId: 1096
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 217 — StateRepository service stopped [ProcessId=.
Message
Fields
| Name | Description |
|---|---|
ProcessId | — |
Event ID 218 — Repository initialized [ProcessId=.
Message
Fields
| Name | Description |
|---|---|
ProcessId | — |
ThreadId | — |
Event ID 219 — Repository shutdown [ProcessId=.
Message
Fields
| Name | Description |
|---|---|
ProcessId | — |
ThreadId | — |
Event ID 220 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Event ID 221 — ANALYZE command has run; database statistics are updated [Partition=.
Message
Fields
| Name | Description |
|---|---|
Partition | — |
ProcessId | — |
Scope | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 221
version: 0
level: 5
task: 2
opcode: 0
keywords: 4611686018427387905
time_created: '2023-11-06T06:23:01.636858+00:00'
event_record_id: 1367
correlation:
ActivityID: 626F7C94-1079-0001-968C-6F627910DA01
execution:
process_id: 1532
thread_id: 1660
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Partition: 1
ProcessId: 1532
Scope: (database)
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 222 — Error %1: StateRepository partition %2 creation failed [Filename=%3, Disposition=%4, FoundSchemaVersion=%5, TargetSchemaVersion=%6].
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Partition | — |
Filename | — |
Disposition | — |
FoundSchemaVersion | — |
CreatedSchemaVersion | — |
Event ID 223 — StateRepository partition %1 exists and ready for use [SchemaVersion=%2].
Message
Fields
| Name | Description |
|---|---|
Partition | — |
SchemaVersion | — |
Filename | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 223
version: 0
level: 4
task: 2
opcode: 0
keywords: 4611686018427387905
time_created: '2023-11-06T06:25:39.642624+00:00'
event_record_id: 1403
correlation: {}
execution:
process_id: 1096
thread_id: 2084
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Partition: 2
SchemaVersion: 26624
Filename: C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 224 — StateRepository partition %1 created [SchemaVersion=%2].
Message
Fields
| Name | Description |
|---|---|
Partition | — |
SchemaVersion | — |
Filename | — |
Event ID 225 — StateRepository partition %1 upgraded [SchemaVersion=%3 -> %2].
Message
Fields
| Name | Description |
|---|---|
Partition | — |
SchemaVersion | — |
FoundSchemaVersion | — |
Filename | — |
Event ID 226 — Error %1: Failed to raise Changed event on notification channel %2 for user %3.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
ChannelName | — |
UserSid | — |
Event ID 227 — Error %1: StateRepository service failed to start [Checkpoint=%2].
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Checkpoint | — |
Event ID 228 — The StateRepository service is starting.
Message
Fields
| Name | Description |
|---|---|
LastKnownStatus | — |
Event ID 229 — The StateRepository service is starting
Message
Fields
| Name | Description |
|---|---|
LastKnownStatus | — |
Event ID 230 — The StateRepository service is starting.
Message
Fields
| Name | Description |
|---|---|
LastKnownStatus | — |
Event ID 231 — RepositoryManagerServerUpgrade with options.
Message
Fields
| Name | Description |
|---|---|
Options | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 231
version: 0
level: 5
task: 2
opcode: 0
keywords: 4611686018427387905
time_created: '2023-11-06T06:25:42.875237+00:00'
event_record_id: 1407
correlation: {}
execution:
process_id: 1096
thread_id: 3464
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Options: '0x1'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 232 — Error %1: %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Entity | — |
Method | — |
WorkId | — |
Event ID 233 — Migration starting [Machine: Disposition=.
Message
Fields
| Name | Description |
|---|---|
MachineDisposition | — |
PreviousMachineVersion | — |
DeploymentDisposition | — |
PreviousDeploymentVersion | — |
Event ID 234 — Migration completed successfully [Machine: Disposition=.
Message
Fields
| Name | Description |
|---|---|
MachineDisposition | — |
PreviousMachineVersion | — |
DeploymentDisposition | — |
PreviousDeploymentVersion | — |
MigratorErrors | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 234
version: 0
level: 4
task: 3
opcode: 0
keywords: 4611686018427387905
time_created: '2023-11-06T06:21:57.817957+00:00'
event_record_id: 1174
correlation: {}
execution:
process_id: 1496
thread_id: 1516
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
MachineDisposition: 1
PreviousMachineVersion: 0
DeploymentDisposition: 1
PreviousDeploymentVersion: 0
MigratorErrors: 0
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 235 — Migration completed: %5 migrators encountered errors [Machine: Disposition=%1, PreviousVersion=%2] [Deployment: Disposition=%3, PreviousVersion=%4].
Message
Fields
| Name | Description |
|---|---|
MachineDisposition | — |
PreviousMachineVersion | — |
DeploymentDisposition | — |
PreviousDeploymentVersion | — |
MigratorErrors | — |
Event ID 236 — Migrator '.
Message
Fields
| Name | Description |
|---|---|
Name | — |
Event ID 237 — Migrator '.
Message
Fields
| Name | Description |
|---|---|
Name | — |
Event ID 238 — Migrator '.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Name | — |
Event ID 239 — Error %1: Migration encountered an error during %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Phase | — |
Event ID 240 — Error %1: Timeout exceeded accessing %2: %3.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Filename | — |
SQL | — |
TransactionCallerId | — |
Priorities | — |
Event ID 241 — Error %1: Timeout exceeded because %2 is in use by %3 process(es).
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Filename | — |
ProcessIndex | — |
ProcessCount | — |
ProcessId | — |
ApplicationUserModelId | — |
PackageFullName | — |
ExecutableName | — |
UserSID | — |
UserDomain | — |
UserName | — |
SessionId | — |
CommandLine | — |
Event ID 242 — Waiting %1msec for requests in progress to complete.
Message
Fields
| Name | Description |
|---|---|
TimeoutMSec | — |
ElapsedTimeMSec | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 242
version: 0
level: 5
task: 1
opcode: 0
keywords: 4611686018427387905
time_created: '2023-11-06T06:23:40.349139+00:00'
event_record_id: 1400
correlation: {}
execution:
process_id: 1496
thread_id: 1140
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
TimeoutMSec: 5000
ElapsedTimeMSec: 0
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 243 — Waited %2msec for requests in progress to complete.
Message
Fields
| Name | Description |
|---|---|
TimeoutMSec | — |
ElapsedTimeMSec | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 243
version: 0
level: 5
task: 1
opcode: 0
keywords: 4611686018427387905
time_created: '2023-11-06T06:23:40.349210+00:00'
event_record_id: 1401
correlation: {}
execution:
process_id: 1496
thread_id: 1140
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
TimeoutMSec: 5000
ElapsedTimeMSec: 0
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 244 — Timeout exceeded waiting for requests in progress to complete [Timeout=.
Message
Fields
| Name | Description |
|---|---|
TimeoutMSec | — |
ElapsedTimeMSec | — |
Event ID 245 — Maintenance has been performed
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
MachineSize_Before | — |
MachineJournalSize_Before | — |
DeploymentSize_Before | — |
DeploymentJournalSize_Before | — |
MachineSize_After | — |
MachineJournalSize_After | — |
DeploymentSize_After | — |
DeploymentJournalSize_After | — |
MaintenancePerformed | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 245
version: 0
level: 5
task: 2
opcode: 0
keywords: 4611686018427387905
time_created: '2023-11-06T06:25:40.066852+00:00'
event_record_id: 1404
correlation: {}
execution:
process_id: 1096
thread_id: 2084
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
ErrorCode: '0x0'
MachineSize_Before: 2097152
MachineJournalSize_Before: 0
DeploymentSize_Before: 5242880
DeploymentJournalSize_Before: 0
MachineSize_After: 2097152
MachineJournalSize_After: 0
DeploymentSize_After: 5242880
DeploymentJournalSize_After: 0
MaintenancePerformed: '0x53'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 246 — Error %1: Maintenance encountered an error.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
MachineSize_Before | — |
MachineJournalSize_Before | — |
DeploymentSize_Before | — |
DeploymentJournalSize_Before | — |
MachineSize_After | — |
MachineJournalSize_After | — |
DeploymentSize_After | — |
DeploymentJournalSize_After | — |
MaintenancePerformed | — |
Event ID 247 — PreImport: %4 [SchemaVersion=%2, Found=%5, Deleted=%7, Id(s)=%6].
Message
Fields
| Name | Description |
|---|---|
Partition | — |
SchemaVersion | — |
Filename | — |
Issue | — |
Found | — |
Id | — |
Deleted | — |
Event ID 248 — Error %1: Failed to create setting %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Name | — |
Event ID 249 — Error %1: Failed to delete setting %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Name | — |
Event ID 250 — Error %1: Database corruption detected in partition %3 [Action=%2, Try#=%6, Elapsed=%7msec, Uptime=%8, FirstReported=%9].
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Action | — |
Partition | — |
Filename | — |
SQL | — |
Try | — |
ElapsedTimeMSec | — |
FirstReportedUptime | — |
FirstReportedWhen | — |
Event ID 251 — Error %1: Failed to query StateRepository for %3 for user %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
UserSID | — |
PackageFamilyName | — |
Event ID 252 — Error %1: Failed to scan %3 for user %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
UserSID | — |
Name | — |
Event ID 253 — Error %1: Failed to delete %3 for user %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
UserSID | — |
Name | — |
Event ID 254 — Error %1: Completed for user %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
UserSID | — |
Event ID 255 — Repairs have been performed for user %2 [Options=%3, Found=%4, Deleted=%5].
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
UserSID | — |
Options | — |
Found | — |
Deleted | — |
Event ID 256 — Error %1: Repair for user %2 encountered an error [Options=%3, Found=%4, Deleted=%5].
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
UserSID | — |
Options | — |
Found | — |
Deleted | — |
Event ID 257 — Repair deleted %4\%3 for user %2.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
UserSID | — |
Name | — |
Context | — |
Event ID 258 — Repair detected unknown object %3\%2 for user %1.
Message
Fields
| Name | Description |
|---|---|
UserSID | — |
Name | — |
Context | — |
Event ID 259 — %5 invalid foreign keys detected for %1.
Message
Fields
| Name | Description |
|---|---|
Entity | — |
Field | — |
Filename | — |
SQL | — |
Count | — |
Ids | — |
Event ID 260 — %5 invalid foreign keys detected for %1.
Message
Fields
| Name | Description |
|---|---|
Entity | — |
Field | — |
Filename | — |
SQL | — |
Count | — |
Ids | — |
Event ID 261 — Check repository integrity has been performed [Options=.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Options | — |
Disposition | — |
ErrorCount | — |
Event ID 262 — Error %1: Check repository integrity encountered an error [Options=%2, Disposition=%3, ErrorsDetected=%4].
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Options | — |
Disposition | — |
ErrorCount | — |
Event ID 263 — Fix repository integrity has been performed [Options=.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Options | — |
FixCount | — |
Event ID 264 — Error %1: Fix repository integrity encountered an error [Options=%2, ErrorsCorrected=%3].
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Options | — |
FixCount | — |
Event ID 265 — Checkpoint has been performed
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Options | — |
MachineDatabase_Pages | — |
MachineDatabase_PagesCheckpointed | — |
DeploymentDatabase_Pages | — |
DeploymentDatabase_PagesCheckpointed | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 265
version: 0
level: 5
task: 2
opcode: 0
keywords: 4611721202799476737
time_created: '2023-11-06T06:21:57.898543+00:00'
event_record_id: 1175
correlation: {}
execution:
process_id: 1496
thread_id: 1516
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
ErrorCode: '0x0'
Options: '0x0'
MachineDatabase_Pages: 0
MachineDatabase_PagesCheckpointed: 0
DeploymentDatabase_Pages: 0
DeploymentDatabase_PagesCheckpointed: 0
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 266 — Error %1: Checkpoint encountered an error.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Options | — |
MachineDatabase_Pages | — |
MachineDatabase_PagesCheckpointed | — |
DeploymentDatabase_Pages | — |
DeploymentDatabase_PagesCheckpointed | — |
Event ID 267 — %5 invalid foreign keys corrected for %1.
Message
Fields
| Name | Description |
|---|---|
Entity | — |
Field | — |
Filename | — |
SQL | — |
Count | — |
Event ID 268 — %5 invalid foreign keys corrected for %1.
Message
Fields
| Name | Description |
|---|---|
Entity | — |
Field | — |
Filename | — |
SQL | — |
Count | — |
Event ID 269 — SRCache successfully initialized [Options=.
Message
Fields
| Name | Description |
|---|---|
Options | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 269
version: 0
level: 5
task: 2
opcode: 0
keywords: 4611721202799476737
time_created: '2023-11-06T06:25:42.070188+00:00'
event_record_id: 1405
correlation: {}
execution:
process_id: 1096
thread_id: 2084
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Options: '0x0'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 270 — Error %1: SRCache initialization encountered an error [Options=%2].
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Options | — |
Event ID 271 — SRCache successfully updated [Options=.
Message
Fields
| Name | Description |
|---|---|
Options | — |
Example Event
system:
provider: Microsoft-Windows-StateRepository
guid: 89592015-D996-4636-8F61-066B5D4DD739
event_source_name: ''
event_id: 271
version: 0
level: 5
task: 2
opcode: 0
keywords: 4611721202799476737
time_created: '2023-11-06T06:23:19.485458+00:00'
event_record_id: 1399
correlation:
ActivityID: 626F7C94-1079-0000-B9AE-6F627910DA01
execution:
process_id: 1496
thread_id: 1864
channel: Microsoft-Windows-StateRepository/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
Options: '0x0'
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 272 — Error %1: SRCache update encountered an error [Options=%2].
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Options | — |
Event ID 273 — Check cache integrity has been performed [Options=.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Options | — |
Disposition | — |
ErrorCount | — |
Event ID 274 — Error %1: Check cache integrity encountered an error [Options=%2, Disposition=%3, ErrorsDetected=%4].
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
Options | — |
Disposition | — |
ErrorCount | — |
Event ID 275 — %2 missing cache entries detected for %1 [Ids=%3].
Message
Fields
| Name | Description |
|---|---|
Entity | — |
Count | — |
Ids | — |
Event ID 276 — %2 unexpected cache entries detected for %1 [Ids=%3].
Message
Fields
| Name | Description |
|---|---|
Entity | — |
Count | — |
Ids | — |
Event ID 277 — Invalid cache entry detected for %1 [Id=%2, Fields=%3].
Message
Fields
| Name | Description |
|---|---|
Entity | — |
Id | — |
Fields | — |
Event ID 278 — Waiting for transaction from %1 to complete before setting package status.
Message
Fields
| Name | Description |
|---|---|
TransactionCallerId | — |
Event ID 279 — Transaction from %1 completed.
Message
Fields
| Name | Description |
|---|---|
TransactionCallerId | — |
Event ID 280 — PackageDependency: %1[%2 of %3]: Id=%4, UserSid=%5, PackageFullName=%6, PD.
Message
Fields
| Name | Description |
|---|---|
Category | — |
Index | — |
Count | — |
Id | — |
UserSID | — |
PackageFullName | — |
PackageDependencyPrimaryKey | — |
PackageDependencyUser | — |
PackageDependencyPackageFamilyName | — |
PackageDependencyMinVersion | — |
PackageDependencyArchitectures | — |
PackageDependencyLifetimeKind | — |
PackageDependencyLifetimeArtifact | — |
PackageDependencyFlags | — |
PackageDependencyProcessId | — |
Event ID 281 — PackageDependency Summary: Resolved=.
Message
Fields
| Name | Description |
|---|---|
ResolvedCount | — |
TransientCount | — |
PersistedCount | — |
Event ID 282 — Error %1: Failed to import package status for user %2 and package %3.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
UserSid | — |
PackageFullName | — |
Event ID 283 — ImportPackageUserStatus completed with hr=.
Message
Fields
| Name | Description |
|---|---|
ErrorCode | — |
SuccessCount | — |
FailureCount | — |
Event ID 284 — REINDEX command has run; database indices are updated [Partition=.
Message
Fields
| Name | Description |
|---|---|
Partition | — |
ProcessId | — |
Scope | — |
Event ID 1000 — [P:%3 T:%4] Profile: %1 msec to run SQL '%2'.
Message
Fields
| Name | Description |
|---|---|
ElapsedTime | — |
SQL | — |
ProcessId | — |
ThreadId | — |