Microsoft-Windows-SystemHealthAgent

31 events across 1 channel

Event IDTitleChannel
1000The Windows Security Health Agent detected a change in the status of …Operational
1001The Windows Security Health Agent detected a change in the status of …Operational
1002The Windows Security Health Agent was initialized successfully.Operational
1003The Windows Security Health Agent could not be initialized.Operational
1004The Windows Security Health Agent was uninitialized successfully.Operational
1005The Windows Security Health Agent completed an online scan.Operational
1006The Windows Security Health Agent failed to complete an online scan.Operational
1007The Windows Security Health Agent completed an offline scan.Operational
1008The Windows Security Health Agent failed to complete an offline scan.Operational
1009The Windows Security Health Agent completed a download of security updates.Operational
1010The Windows Security Health Agent failed to complete a download of security …Operational
1011The Windows Security Health Agent completed an install of security updates.Operational
1012The Windows Security Health Agent failed to complete an install of security …Operational
1013Automatic remediation for firewall succeeded.Operational
1014Automatic remediation for firewall failed.Operational
1015Automatic remediation for Automatic Updates succeeded.Operational
1016Automatic remediation for Automatic Updates failed.Operational
1017Automatic remediation for Windows Security Center service succeeded.Operational
1018Automatic remediation for Windows Security Center service failed.Operational
1019Automatic remediation for antispyware succeeded.Operational
1020Automatic remediation for antispyware failed.Operational
1021Automatic remediation for antispyware signatures succeeded.Operational
1022Automatic remediation for antispyware signatures failed.Operational
1023The Windows Security Center detected a system health state change.Operational
1024Windows Security Center detected a system health state change but the Windows …Operational
1025The Windows Security Health Agent specified a new security health state for the …Operational
1026The Windows Security Health Agent failed to specify a new security health state …Operational
1027The Windows Security Health Agent notified the Windows Network Access Protection …Operational
1028The Windows Security Health Agent failed to notify the Windows Network Access …Operational
1029The Windows Security Health Agent successfully processed a response from the …Operational
1030The Windows Security Health Agent failed to process a response from the Windows …Operational

Event ID 1000 — The Windows Security Health Agent detected a change in the status of {ProductCategory}.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent detected a change in the status of {ProductCategory}

Fields

NameDescription
ProductCategory

Event ID 1001 — The Windows Security Health Agent detected a change in the status of {ProductCategory}.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent detected a change in the status of {ProductCategory}

Fields

NameDescription
ProductCategory

Event ID 1002 — The Windows Security Health Agent was initialized successfully.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent was initialized successfully. Scan Interval: {ScanInterval} minutes.Time delay before first scan: {StartScanAfter} seconds.Time interval between manual remediation state change: {ManualRemediationStateChangeCheckInterval} seconds.Manual remediation timeout interval: {ManualRemediationTimeoutInterval} seconds.

Fields

NameDescription
ScanInterval
StartScanAfter
ManualRemediationStateChangeCheckInterval
ManualRemediationTimeoutInterval

Event ID 1003 — The Windows Security Health Agent could not be initialized.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent could not be initialized. Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1004 — The Windows Security Health Agent was uninitialized successfully.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent was uninitialized successfully.

Event ID 1005 — The Windows Security Health Agent completed an online scan.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent completed an online scan.

Event ID 1006 — The Windows Security Health Agent failed to complete an online scan.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent failed to complete an online scan.Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1007 — The Windows Security Health Agent completed an offline scan.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent completed an offline scan.

Event ID 1008 — The Windows Security Health Agent failed to complete an offline scan.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent failed to complete an offline scan.Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1009 — The Windows Security Health Agent completed a download of security updates.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent completed a download of security updates.

Event ID 1010 — The Windows Security Health Agent failed to complete a download of security updates.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent failed to complete a download of security updates.Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1011 — The Windows Security Health Agent completed an install of security updates.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent completed an install of security updates.

Event ID 1012 — The Windows Security Health Agent failed to complete an install of security updates.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent failed to complete an install of security updates.Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1013 — Automatic remediation for firewall succeeded.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Automatic remediation for firewall succeeded. Windows Firewall was turned on successfully.

Event ID 1014 — Automatic remediation for firewall failed.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Automatic remediation for firewall failed. Windows could not turn on Windows Firewall. Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1015 — Automatic remediation for Automatic Updates succeeded.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Automatic remediation for Automatic Updates succeeded. Automatic Updates was turned on successfully.

Event ID 1016 — Automatic remediation for Automatic Updates failed.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Automatic remediation for Automatic Updates failed. Windows could not turn on Automatic Updates. Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1017 — Automatic remediation for Windows Security Center service succeeded.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Automatic remediation for Windows Security Center service succeeded. Windows Security Center service was turned on successfully.

Event ID 1018 — Automatic remediation for Windows Security Center service failed.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Automatic remediation for Windows Security Center service failed. Windows could not turn on Windows Security Center service. Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1019 — Automatic remediation for antispyware succeeded.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Automatic remediation for antispyware succeeded. Windows defender was turned on successfully.

Event ID 1020 — Automatic remediation for antispyware failed.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Automatic remediation for antispyware failed. Windows could not turn on Windows Defender. Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1021 — Automatic remediation for antispyware signatures succeeded.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Automatic remediation for antispyware signatures succeeded. Windows Defender signatures were updated successfully.

Event ID 1022 — Automatic remediation for antispyware signatures failed.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Automatic remediation for antispyware signatures failed. Windows could not update signatures for Windows Defender. Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1023 — The Windows Security Center detected a system health state change.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Center detected a system health state change. The change in state was also successfully detected by the Windows Security Health Agent.

Event ID 1024 — Windows Security Center detected a system health state change but the Windows Security Health Agent could not enumerate the state change.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

Windows Security Center detected a system health state change but the Windows Security Health Agent could not enumerate the state change. Failure Code: {FailureCode}

Fields

NameDescription
FailureCode

Event ID 1025 — The Windows Security Health Agent specified a new security health state for the computer.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent specified a new security health state for the computer.The correlation id for this transaction is {SuccessString}

Fields

NameDescription
SuccessString

Event ID 1026 — The Windows Security Health Agent failed to specify a new security health state for the computer.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent failed to specify a new security health state for the computer. Failure Code: {FailureCode}. The correlation id for this transaction is {FailureString}

Fields

NameDescription
FailureCode
FailureString

Event ID 1027 — The Windows Security Health Agent notified the Windows Network Access Protection Service of a change in the security health state of the computer.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent notified the Windows Network Access Protection Service of a change in the security health state of the computer.

Event ID 1028 — The Windows Security Health Agent failed to notify the Windows Network Access Protection Service of a change in the security health state of the co...

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent failed to notify the Windows Network Access Protection Service of a change in the security health state of the computer. Failure Code: {FailureCode}.

Fields

NameDescription
FailureCode

Event ID 1029 — The Windows Security Health Agent successfully processed a response from the Windows Security Health Validator.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent successfully processed a response from the Windows Security Health Validator. The correlation id for this transaction is {SuccessString}.

Fields

NameDescription
SuccessString

Event ID 1030 — The Windows Security Health Agent failed to process a response from the Windows Security Health Validator.

Provider
Microsoft-Windows-SystemHealthAgent
Channel
Operational

Message

The Windows Security Health Agent failed to process a response from the Windows Security Health Validator. Failure Code: {FailureCode}.The correlation id for this transaction is {FailureString}.

Fields

NameDescription
FailureCode
FailureString