Event ID 548 — The miniport logged a health event.
Description
The miniport logged a health event.
Message #
Fields #
| Name | Description |
|---|---|
MiniportName UnicodeString | — |
MiniportEventId UInt32 | — |
MiniportEventDescription UnicodeString | — |
PortNumber UInt32 | — |
AdapterGuid GUID | — |
PathID UInt8 | — |
TargetID UInt8 | — |
LUN UInt8 | — |
ClassDeviceGuid GUID | — |
VendorId AnsiString | — |
ProductId AnsiString | — |
SerialNumber AnsiString | — |
BootDevice Boolean | — |
Parameter1Name UnicodeString | — |
Parameter1Value UInt64 | — |
Parameter2Name UnicodeString | — |
Parameter2Value UInt64 | — |
Parameter3Name UnicodeString | — |
Parameter3Value UInt64 | — |
Parameter4Name UnicodeString | — |
Parameter4Value UInt64 | — |
Parameter5Name UnicodeString | — |
Parameter5Value UInt64 | — |
Parameter6Name UnicodeString | — |
Parameter6Value UInt64 | — |
Parameter7Name UnicodeString | — |
Parameter7Value UInt64 | — |
Parameter8Name UnicodeString | — |
Parameter8Value UInt64 | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-StorPort",
"guid": "C4636A1E-7986-4646-BF10-7BC3B4A76E8E",
"event_source_name": "",
"event_id": 548,
"version": 3,
"level": 3,
"task": 201,
"opcode": 1,
"keywords": 144150389627813888,
"time_created": "2022-04-07T16:52:37.665830+00:00",
"event_record_id": 151,
"correlation": {},
"execution": {
"process_id": 4,
"thread_id": 80
},
"channel": "Microsoft-Windows-Storage-Storport/Health",
"computer": "WIN-FPV0DSIC9O6.lab.local",
"security": {
"user_id": ""
}
},
"event_data": {
"MiniportName": "storahci",
"MiniportEventId": 30,
"MiniportEventDescription": "Device Start Fail:DET Timeout",
"PortNumber": 2,
"AdapterGuid": "61E10B56-B69A-11EC-9774-806E6F6E6963",
"PathID": 29,
"TargetID": 0,
"LUN": 0,
"ClassDeviceGuid": "00000000-0000-0000-0000-000000000000",
"VendorId": "",
"ProductId": "",
"SerialNumber": "",
"BootDevice": false,
"Parameter1Name": "StateFlag",
"Parameter1Value": 2049,
"Parameter2Name": "StartState",
"Parameter2Value": 1041,
"Parameter3Name": "PortReset|StartFailed",
"Parameter3Value": 0,
"Parameter4Name": "ErrorRecovery|BusChange",
"Parameter4Value": 0,
"Parameter5Name": "Parameter1",
"Parameter5Value": 0,
"Parameter6Name": "Parameter2",
"Parameter6Value": 30,
"Parameter7Name": "Parameter3",
"Parameter7Value": 0,
"Parameter8Name": "Parameter4",
"Parameter8Value": 0
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline