Message #

Error %1: %2

Fields #

Description

[P:ProcessId T:ThreadId] Trace: Executing SQL 'SQL'.

Message #

[P:%2 T:%3] Trace: Executing SQL '%1'

Fields #

Description

Error ErrorCode: Failed to open settings at HKLM\Subkey.

Message #

Error %1: Failed to open settings at HKLM\%2

Fields #

Description

Error ErrorCode: Failed to read setting Name.

Message #

Error %1: Failed to read setting %2

Fields #

Message #

Warning %1: %2

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 104,
    "version": 0,
    "level": 3,
    "task": 1,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2026-02-12T04:58:02.340067+00:00",
    "event_record_id": 2326,
    "correlation": {
      "ActivityID": "43A6D212-9A2A-000C-4A21-A9432A9ADC01"
    },
    "execution": {
      "process_id": 9772,
      "thread_id": 11932
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "LAB-WIN11.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ErrorCode": "0x80670007",
    "SQL": "[sqlite3_exec] #5 Database 258B8E48A70: Try 1 (351ms) {90C40975-20C3-4EE8-817F-925B82C1D262} Cpu:8 Mem:5 Io:2 TID:11968 database is locked : SQL BEGIN EXCLUSIVE /*02C51573-873D-451F-AA58-23BF3327583E*/;"
  },
  "message": ""
}

Message #

Info %1: %2

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 105,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-10-25T21:39:12.861376+00:00",
    "event_record_id": 376,
    "correlation": {},
    "execution": {
      "process_id": 6332,
      "thread_id": 6376
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ErrorCode": "0x11b",
    "SQL": "recovered 10 frames from WAL file C:\\ProgramData\\Microsoft\\Windows\\CapabilityAccessManager\\CapabilityAccessManager.db-wal"
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Error ErrorCode: Failed to write setting Name.

Message #

Error %1: Failed to write setting %2

Fields #

Description

CriticalError ErrorCode: SQL.

Message #

CriticalError %1: %2

Fields #

Message #

Verbose %1: %2

Fields #

Description

Error ErrorCode: Entity.Method() failed [WorkId=WorkId].

Message #

Error %1: %2.%3() failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method(Id=Id, Revision=Revision) failed [WorkId=WorkId].

Message #

Error %1: %2.%3(Id=%5, Revision=%6) failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method(Id=Id) failed [WorkId=WorkId].

Message #

Error %1: %2.%3(Id=%5) failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method(Id=Id) failed [WorkId=WorkId].

Message #

Error %1: %2.%3(Id=%5) failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method() failed [WorkId=WorkId].

Message #

Error %1: %2.%3() failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method(Id=Id) failed [WorkId=WorkId].

Message #

Error %1: %2.%3(Id=%5) failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method failed [WorkId=WorkId].

Message #

Error %1: %2.%3 failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method() failed [WorkId=WorkId].

Message #

Error %1: %2.%3() failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method(Id=Id) failed [WorkId=WorkId].

Message #

Error %1: %2.%3(Id=%5) failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method failed [WorkId=WorkId].

Message #

Error %1: %2.%3 failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method failed [WorkId=WorkId].

Message #

Error %1: %2.%3 failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method(Id=Id) failed [WorkId=WorkId].

Message #

Error %1: %2.%3(Id=%5) failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method failed [WorkId=WorkId].

Message #

Error %1: %2.%3 failed [WorkId=%4]

Fields #

Description

Error ErrorCode: Entity.Method failed [ClientId=ClientId].

Message #

Error %1: %2.%3 failed [ClientId=%4]

Fields #

Description

Blocking requests [Options=Options, ClientId=ProcessId].

Message #

Blocking requests [Options=%1, ClientId=%2]

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 214,
    "version": 0,
    "level": 3,
    "task": 2,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-10-25T22:55:29.458620+00:00",
    "event_record_id": 1169,
    "correlation": {},
    "execution": {
      "process_id": 2396,
      "thread_id": 6812
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDevEval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Options": "0x1",
    "ProcessId": 4544
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Unblocking requests [Options=Options, ClientId=ProcessId].

Message #

Unblocking requests [Options=%1, ClientId=%2]

Fields #

Description

StateRepository service started [ProcessId=ProcessId].

Message #

StateRepository service started [ProcessId=%1]

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 216,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-06T06:25:42.462183+00:00",
    "event_record_id": 1406,
    "correlation": {},
    "execution": {
      "process_id": 1096,
      "thread_id": 2084
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ProcessId": 1096
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

StateRepository service stopped [ProcessId=ProcessId].

Message #

StateRepository service stopped [ProcessId=%1]

Fields #

Description

Repository initialized [ProcessId=ProcessId].

Message #

Repository initialized [ProcessId=%1]

Fields #

Description

Repository shutdown [ProcessId=ProcessId].

Message #

Repository shutdown [ProcessId=%1]

Fields #

Description

Error ErrorCode: Entity.Method() failed [WorkId=WorkId].

Message #

Error %1: %2.%3() failed [WorkId=%4]

Fields #

Description

ANALYZE command has run; database statistics are updated [Partition=Partition, ProcessId=ProcessId, Scope=Scope].

Message #

ANALYZE command has run; database statistics are updated [Partition=%1, ProcessId=%2, Scope=%3]

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 221,
    "version": 0,
    "level": 5,
    "task": 2,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-06T06:23:01.636858+00:00",
    "event_record_id": 1367,
    "correlation": {
      "ActivityID": "626F7C94-1079-0001-968C-6F627910DA01"
    },
    "execution": {
      "process_id": 1532,
      "thread_id": 1660
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Partition": 1,
    "ProcessId": 1532,
    "Scope": "(database)"
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Error ErrorCode: StateRepository partition Partition creation failed [Filename=Filename, Disposition=Disposition, FoundSchemaVersion=FoundSchemaVersion, TargetSchemaVersion=CreatedSchemaVersion].

Message #

Error %1: StateRepository partition %2 creation failed [Filename=%3, Disposition=%4, FoundSchemaVersion=%5, TargetSchemaVersion=%6]

Fields #

Description

StateRepository partition Partition exists and ready for use [SchemaVersion=SchemaVersion].

Message #

StateRepository partition %1 exists and ready for use [SchemaVersion=%2]

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 223,
    "version": 0,
    "level": 4,
    "task": 2,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-06T06:25:39.642624+00:00",
    "event_record_id": 1403,
    "correlation": {},
    "execution": {
      "process_id": 1096,
      "thread_id": 2084
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Partition": 2,
    "SchemaVersion": 26624,
    "Filename": "C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\StateRepository-Deployment.srd"
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

StateRepository partition Partition created [SchemaVersion=SchemaVersion].

Message #

StateRepository partition %1 created [SchemaVersion=%2]

Fields #

Description

StateRepository partition Partition upgraded [SchemaVersion=FoundSchemaVersion -> SchemaVersion].

Message #

StateRepository partition %1 upgraded [SchemaVersion=%3 -> %2]

Fields #

Description

Error ErrorCode: Failed to raise Changed event on notification channel ChannelName for user UserSid.

Message #

Error %1: Failed to raise Changed event on notification channel %2 for user %3

Fields #

Description

Error ErrorCode: StateRepository service failed to start [Checkpoint=Checkpoint].

Message #

Error %1: StateRepository service failed to start [Checkpoint=%2]

Fields #

Description

The StateRepository service is starting. The service's last known status cannot be determined [LastStatus=LastKnownStatus].

Message #

The StateRepository service is starting. The service's last known status cannot be determined [LastStatus=%1]

Fields #

Description

The StateRepository service is starting.

Message #

The StateRepository service is starting

Fields #

Description

The StateRepository service is starting. The service did not complete its shutdown work when previously active [LastStatus=LastKnownStatus].

Message #

The StateRepository service is starting. The service did not complete its shutdown work when previously active [LastStatus=%1]

Fields #

Description

RepositoryManagerServerUpgrade with options: Options.

Message #

RepositoryManagerServerUpgrade with options: %1

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 231,
    "version": 0,
    "level": 5,
    "task": 2,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-06T06:25:42.875237+00:00",
    "event_record_id": 1407,
    "correlation": {},
    "execution": {
      "process_id": 1096,
      "thread_id": 3464
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Options": "0x1"
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Error ErrorCode: Entity.Method failed [WorkId=WorkId].

Message #

Error %1: %2.%3 failed [WorkId=%4]

Fields #

Description

Migration starting [Machine: Disposition=MachineDisposition, PreviousVersion=PreviousMachineVersion, Deployment: Disposition=DeploymentDisposition, PreviousVersion=PreviousDeploymentVersion.

Message #

Migration starting [Machine: Disposition=%1, PreviousVersion=%2, Deployment: Disposition=%3, PreviousVersion=%4

Fields #

Description

Migration completed successfully [Machine: Disposition=MachineDisposition, PreviousVersion=PreviousMachineVersion] [Deployment: Disposition=DeploymentDisposition, PreviousVersion=PreviousDeploymentVersion].

Message #

Migration completed successfully [Machine: Disposition=%1, PreviousVersion=%2] [Deployment: Disposition=%3, PreviousVersion=%4]

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 234,
    "version": 0,
    "level": 4,
    "task": 3,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-06T06:21:57.817957+00:00",
    "event_record_id": 1174,
    "correlation": {},
    "execution": {
      "process_id": 1496,
      "thread_id": 1516
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "MachineDisposition": 1,
    "PreviousMachineVersion": 0,
    "DeploymentDisposition": 1,
    "PreviousDeploymentVersion": 0,
    "MigratorErrors": 0
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Migration completed: MigratorErrors migrators encountered errors [Machine: Disposition=MachineDisposition, PreviousVersion=PreviousMachineVersion] [Deployment: Disposition=DeploymentDisposition, PreviousVersion=PreviousDeploymentVersion].

Message #

Migration completed: %5 migrators encountered errors [Machine: Disposition=%1, PreviousVersion=%2] [Deployment: Disposition=%3, PreviousVersion=%4]

Fields #

Description

Migrator 'Name' starting.

Message #

Migrator '%1' starting

Fields #

Description

Migrator 'Name' completed successfully.

Message #

Migrator '%1' completed successfully

Fields #

Description

Migrator 'Name' encountered error ErrorCode.

Message #

Migrator '%2' encountered error %1

Fields #

Description

Error ErrorCode: Migration encountered an error during Phase.

Message #

Error %1: Migration encountered an error during %2

Fields #

Description

Error ErrorCode: Timeout exceeded accessing Filename: SQL.

Message #

Error %1: Timeout exceeded accessing %2: %3

Fields #

Description

Error : Timeout exceeded because is in use by process(es). Process[] = processid , application , package , executable , user username /, session , commandline.

Message #

Error %1: Timeout exceeded because %2 is in use by %3 process(es). Process[%4] = processid %5, application %6, package %7, executable %8, user %9 username %10/%11, session %12, commandline %13

Fields #

Description

Waiting TimeoutMSecmsec for requests in progress to complete.

Message #

Waiting %1msec for requests in progress to complete

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 242,
    "version": 0,
    "level": 5,
    "task": 1,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-06T06:23:40.349139+00:00",
    "event_record_id": 1400,
    "correlation": {},
    "execution": {
      "process_id": 1496,
      "thread_id": 1140
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "TimeoutMSec": 5000,
    "ElapsedTimeMSec": 0
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Waited ElapsedTimeMSecmsec for requests in progress to complete.

Message #

Waited %2msec for requests in progress to complete

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 243,
    "version": 0,
    "level": 5,
    "task": 1,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-06T06:23:40.349210+00:00",
    "event_record_id": 1401,
    "correlation": {},
    "execution": {
      "process_id": 1496,
      "thread_id": 1140
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "TimeoutMSec": 5000,
    "ElapsedTimeMSec": 0
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Timeout exceeded waiting for requests in progress to complete [Timeout=TimeoutMSecmsec, Elapsed=ElapsedTimeMSecmsec].

Message #

Timeout exceeded waiting for requests in progress to complete [Timeout=%1msec, Elapsed=%2msec]

Fields #

Description

Maintenance has been performed.

Message #

Maintenance has been performed

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 245,
    "version": 0,
    "level": 5,
    "task": 2,
    "opcode": 0,
    "keywords": 4611686018427387905,
    "time_created": "2023-11-06T06:25:40.066852+00:00",
    "event_record_id": 1404,
    "correlation": {},
    "execution": {
      "process_id": 1096,
      "thread_id": 2084
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ErrorCode": "0x0",
    "MachineSize_Before": 2097152,
    "MachineJournalSize_Before": 0,
    "DeploymentSize_Before": 5242880,
    "DeploymentJournalSize_Before": 0,
    "MachineSize_After": 2097152,
    "MachineJournalSize_After": 0,
    "DeploymentSize_After": 5242880,
    "DeploymentJournalSize_After": 0,
    "MaintenancePerformed": "0x53"
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Error ErrorCode: Maintenance encountered an error.

Message #

Error %1: Maintenance encountered an error

Fields #

Description

PreImport: Issue [SchemaVersion=SchemaVersion, Found=Found, Deleted=Deleted, Id(s)=Id].

Message #

PreImport: %4 [SchemaVersion=%2, Found=%5, Deleted=%7, Id(s)=%6]

Fields #

Description

Error ErrorCode: Failed to create setting Name.

Message #

Error %1: Failed to create setting %2

Fields #

Description

Error ErrorCode: Failed to delete setting Name.

Message #

Error %1: Failed to delete setting %2

Fields #

Description

Error ErrorCode: Database corruption detected in partition Partition [Action=Action, Try#=Try, Elapsed=ElapsedTimeMSecmsec, Uptime=FirstReportedUptime, FirstReported=FirstReportedWhen].

Message #

Error %1: Database corruption detected in partition %3 [Action=%2, Try#=%6, Elapsed=%7msec, Uptime=%8, FirstReported=%9]

Fields #

Description

Error ErrorCode: Failed to query StateRepository for PackageFamilyName for user UserSID.

Message #

Error %1: Failed to query StateRepository for %3 for user %2

Fields #

Description

Error ErrorCode: Failed to scan Name for user UserSID.

Message #

Error %1: Failed to scan %3 for user %2

Fields #

Description

Error ErrorCode: Failed to delete Name for user UserSID.

Message #

Error %1: Failed to delete %3 for user %2

Fields #

Description

Error ErrorCode: Completed for user UserSID.

Message #

Error %1: Completed for user %2

Fields #

Description

Repairs have been performed for user UserSID [Options=Options, Found=Found, Deleted=Deleted].

Message #

Repairs have been performed for user %2 [Options=%3, Found=%4, Deleted=%5]

Fields #

Description

Error ErrorCode: Repair for user UserSID encountered an error [Options=Options, Found=Found, Deleted=Deleted].

Message #

Error %1: Repair for user %2 encountered an error [Options=%3, Found=%4, Deleted=%5]

Fields #

Description

Repair deleted Context\Name for user UserSID.

Message #

Repair deleted %4\%3 for user %2

Fields #

Description

Repair detected unknown object Context\Name for user UserSID.

Message #

Repair detected unknown object %3\%2 for user %1

Fields #

Description

Count invalid foreign keys detected for Entity.Field [Filename=Filename, Ids=Ids].

Message #

%5 invalid foreign keys detected for %1.%2 [Filename=%3, Ids=%6]

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 259,
    "version": 0,
    "level": 3,
    "task": 1,
    "opcode": 0,
    "keywords": 4611756387171565569,
    "time_created": "2026-02-18T21:51:27.389192+00:00",
    "event_record_id": 2524,
    "correlation": {
      "ActivityID": "A84E255E-A05B-000B-B669-4EA85BA0DC01"
    },
    "execution": {
      "process_id": 9436,
      "thread_id": 316
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "LAB-WIN11.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Entity": "WowDependencyGraph",
    "Field": "DependentPackage",
    "Filename": "C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\StateRepository-Machine.srd",
    "SQL": "SELECT COUNT(*), GROUP_CONCAT(rowid) FROM WowDependencyGraph WHERE (DependentPackage>0) AND (DependentPackage NOT IN (SELECT _PackageID FROM Package));",
    "Count": 2,
    "Ids": "303,304"
  },
  "message": ""
}

Description

Count invalid foreign keys detected for Entity.Field [Filename=Filename, Ids=Ids].

Message #

%5 invalid foreign keys detected for %1.%2 [Filename=%3, Ids=%6]

Fields #

Description

Check repository integrity has been performed [Options=Options, Disposition=Disposition, ErrorsDetected=ErrorCount].

Message #

Check repository integrity has been performed [Options=%2, Disposition=%3, ErrorsDetected=%4]

Fields #

Description

Error ErrorCode: Check repository integrity encountered an error [Options=Options, Disposition=Disposition, ErrorsDetected=ErrorCount].

Message #

Error %1: Check repository integrity encountered an error [Options=%2, Disposition=%3, ErrorsDetected=%4]

Fields #

Description

Fix repository integrity has been performed [Options=Options, ErrorsCorrected=FixCount].

Message #

Fix repository integrity has been performed [Options=%2, ErrorsCorrected=%3]

Fields #

Description

Error ErrorCode: Fix repository integrity encountered an error [Options=Options, ErrorsCorrected=FixCount].

Message #

Error %1: Fix repository integrity encountered an error [Options=%2, ErrorsCorrected=%3]

Fields #

Description

Checkpoint has been performed.

Message #

Checkpoint has been performed

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 265,
    "version": 0,
    "level": 5,
    "task": 2,
    "opcode": 0,
    "keywords": 4611721202799476737,
    "time_created": "2023-11-06T06:21:57.898543+00:00",
    "event_record_id": 1175,
    "correlation": {},
    "execution": {
      "process_id": 1496,
      "thread_id": 1516
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "ErrorCode": "0x0",
    "Options": "0x0",
    "MachineDatabase_Pages": 0,
    "MachineDatabase_PagesCheckpointed": 0,
    "DeploymentDatabase_Pages": 0,
    "DeploymentDatabase_PagesCheckpointed": 0
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Error ErrorCode: Checkpoint encountered an error.

Message #

Error %1: Checkpoint encountered an error

Fields #

Description

Count invalid foreign keys corrected for Entity.Field [Filename=Filename].

Message #

%5 invalid foreign keys corrected for %1.%2 [Filename=%3]

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 267,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 0,
    "keywords": 4611721202799476737,
    "time_created": "2026-02-18T21:51:27.416069+00:00",
    "event_record_id": 2526,
    "correlation": {
      "ActivityID": "A84E255E-A05B-000B-B669-4EA85BA0DC01"
    },
    "execution": {
      "process_id": 9436,
      "thread_id": 316
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "LAB-WIN11.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Entity": "WowDependencyGraph",
    "Field": "DependentPackage",
    "Filename": "C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\StateRepository-Machine.srd",
    "SQL": "DELETE FROM WowDependencyGraph WHERE (DependentPackage>0) AND (DependentPackage NOT IN (SELECT _PackageID FROM Package));",
    "Count": 2
  },
  "message": ""
}

Description

Count invalid foreign keys corrected for Entity.Field [Filename=Filename].

Message #

%5 invalid foreign keys corrected for %1.%2 [Filename=%3]

Fields #

Description

SRCache successfully initialized [Options=Options].

Message #

SRCache successfully initialized [Options=%1]

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 269,
    "version": 0,
    "level": 5,
    "task": 2,
    "opcode": 0,
    "keywords": 4611721202799476737,
    "time_created": "2023-11-06T06:25:42.070188+00:00",
    "event_record_id": 1405,
    "correlation": {},
    "execution": {
      "process_id": 1096,
      "thread_id": 2084
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Options": "0x0"
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Error ErrorCode: SRCache initialization encountered an error [Options=Options].

Message #

Error %1: SRCache initialization encountered an error [Options=%2]

Fields #

Description

SRCache successfully updated [Options=Options].

Message #

SRCache successfully updated [Options=%1]

Fields #

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-StateRepository",
    "guid": "89592015-D996-4636-8F61-066B5D4DD739",
    "event_source_name": "",
    "event_id": 271,
    "version": 0,
    "level": 5,
    "task": 2,
    "opcode": 0,
    "keywords": 4611721202799476737,
    "time_created": "2023-11-06T06:23:19.485458+00:00",
    "event_record_id": 1399,
    "correlation": {
      "ActivityID": "626F7C94-1079-0000-B9AE-6F627910DA01"
    },
    "execution": {
      "process_id": 1496,
      "thread_id": 1864
    },
    "channel": "Microsoft-Windows-StateRepository/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Options": "0x0"
  },
  "message": ""
}

References #

• Example event sourced from https://github.com/NextronSystems/evtx-baseline

Description

Error ErrorCode: SRCache update encountered an error [Options=Options].

Message #

Error %1: SRCache update encountered an error [Options=%2]

Fields #

Description

Check cache integrity has been performed [Options=Options, Disposition=Disposition, ErrorsDetected=ErrorCount].

Message #

Check cache integrity has been performed [Options=%2, Disposition=%3, ErrorsDetected=%4]

Fields #

Description

Error ErrorCode: Check cache integrity encountered an error [Options=Options, Disposition=Disposition, ErrorsDetected=ErrorCount].

Message #

Error %1: Check cache integrity encountered an error [Options=%2, Disposition=%3, ErrorsDetected=%4]

Fields #

Description

Count missing cache entries detected for Entity [Ids=Ids].

Message #

%2 missing cache entries detected for %1 [Ids=%3]

Fields #

Description

Count unexpected cache entries detected for Entity [Ids=Ids].

Message #

%2 unexpected cache entries detected for %1 [Ids=%3]

Fields #

Description

Invalid cache entry detected for Entity [Id=Id, Fields=Fields].

Message #

Invalid cache entry detected for %1 [Id=%2, Fields=%3]

Fields #

Description

Waiting for transaction from TransactionCallerId to complete before setting package status.

Message #

Waiting for transaction from %1 to complete before setting package status.

Fields #

Description

Transaction from TransactionCallerId completed. Proceeding to set package status.

Message #

Transaction from %1 completed. Proceeding to set package status.

Fields #

Message #

PackageDependency: %1[%2 of %3]: Id=%4, UserSid=%5, PackageFullName=%6, PD.PrimaryKey=%7, PD.User=%8, PD.PackageFamilyName=%9, PD.MinVersion=%10, PD.Architectures=%11, PD.LifetimeKind=%12, PD.LifetimeArtifact=%13, PD.Flags=%14, PD.ProcessId=%15

Fields #