Microsoft-Windows-UserModePowerService
59 events across 2 channels
| Event ID | Title | Channel |
|---|---|---|
| 1 | Diagnostic | |
| 2 | Diagnostic | |
| 3 | Diagnostic | |
| 4 | Diagnostic | |
| 5 | Diagnostic | |
| 7 | Diagnostic | |
| 8 | Diagnostic | |
| 9 | Diagnostic | |
| 10 | Diagnostic | |
| 11 | Diagnostic | |
| 12 | Process %1 (process ID:%2) reset policy scheme from %3 to %4. | System |
| 13 | Diagnostic | |
| 14 | Diagnostic | |
| 15 | Diagnostic | |
| 16 | Diagnostic | |
| 17 | Diagnostic | |
| 18 | Diagnostic | |
| 19 | Diagnostic | |
| 22 | Reapply power settings upon completion of the provisioning engine's turn %1. | System |
| 23 | Diagnostic | |
| 24 | Diagnostic | |
| 25 | Diagnostic | |
| 26 | Diagnostic | |
| 27 | Diagnostic | |
| 28 | Diagnostic | |
| 29 | Diagnostic | |
| 30 | Diagnostic | |
| 31 | Diagnostic | |
| 32 | Diagnostic | |
| 33 | Diagnostic | |
| 34 | Diagnostic | |
| 35 | Diagnostic | |
| 36 | Diagnostic | |
| 37 | Diagnostic | |
| 38 | Diagnostic | |
| 39 | Diagnostic | |
| 40 | Diagnostic | |
| 41 | Diagnostic | |
| 42 | Diagnostic | |
| 43 | Diagnostic | |
| 44 | Diagnostic | |
| 45 | Diagnostic | |
| 46 | Diagnostic | |
| 47 | Diagnostic | |
| 48 | Diagnostic | |
| 49 | Diagnostic | |
| 50 | Diagnostic | |
| 51 | Process %1 (process ID:%2) reset overlay policy scheme from %3 to %4. | System |
| 52 | Diagnostic | |
| 53 | Diagnostic | |
| 54 | Diagnostic | |
| 55 | Diagnostic | |
| 56 | Diagnostic | |
| 57 | Diagnostic | |
| 58 | Diagnostic | |
| 59 | Diagnostic | |
| 60 | Diagnostic | |
| 61 | Diagnostic | |
| 62 | Diagnostic |
Event ID 1 —
Fields
| Name | Description |
|---|---|
PlatformRole | — |
Event ID 2 —
Fields
| Name | Description |
|---|---|
SchemeGuid | — |
Event ID 3 —
Fields
| Name | Description |
|---|---|
SubgroupGuid | — |
SettingGuid | — |
ValueIndex | — |
Type | — |
DataSize | — |
Data | — |
Altitude | — |
Event ID 4 —
Fields
| Name | Description |
|---|---|
SubgroupGuid | — |
SettingGuid | — |
ValueIndex | — |
Type | — |
DataSize | — |
Data | — |
Altitude | — |
Event ID 5 —
Fields
| Name | Description |
|---|---|
Timeout | — |
Event ID 7 —
Fields
| Name | Description |
|---|---|
Name | — |
Event ID 8 —
Fields
| Name | Description |
|---|---|
DeviceName | — |
ManufacturerName | — |
ManufactureDay | — |
ManufactureMonth | — |
ManufactureYear | — |
SerialNumber | — |
Capabilities | — |
Technology | — |
Pad | — |
Chemistry | — |
DesignCapacity | — |
FullChargeCapacity | — |
DefaultAlert1 | — |
DefaultAlert2 | — |
CriticalBias | — |
CycleCount | — |
GranularityScaleCount | — |
GranularityScale | — |
UniqueId | — |
Event ID 9 —
Fields
| Name | Description |
|---|---|
State | — |
Capacity | — |
Voltage | — |
Rate | — |
EstimatedRuntime | — |
UniqueId | — |
Event ID 10 —
Fields
| Name | Description |
|---|---|
BrightnessCapable | — |
Event ID 11 —
Fields
| Name | Description |
|---|---|
AcOnline | — |
Event ID 12 — Process %1 (process ID:%2) reset policy scheme from %3 to %4.
Message
Fields
| Name | Description |
|---|---|
ProcessPath | — |
ProcessPid | — |
OldSchemeGuid | — |
NewSchemeGuid | — |
Example Event
system:
provider: Microsoft-Windows-UserModePowerService
guid: CE8DEE0B-D539-4000-B0F8-77BED049C590
event_source_name: ''
event_id: 12
version: 0
level: 4
task: 10
opcode: 0
keywords: 4611686018427387904
time_created: '2022-04-04T13:15:18.534497+00:00'
event_record_id: 1678
correlation: {}
execution:
process_id: 724
thread_id: 2708
channel: System
computer: WIN-TKC15D7KHUR
security:
user_id: S-1-5-18
event_data:
ProcessPath: C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.20348.557_none_f1edaeb8515fa10d\TiWorker.exe
ProcessPid: 1292
OldSchemeGuid: 381B4222-F694-41F0-9685-FF5BB260DF2E
NewSchemeGuid: 381B4222-F694-41F0-9685-FF5BB260DF2E
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 13 —
Fields
| Name | Description |
|---|---|
MeterId | — |
value | — |
Event ID 14 —
Fields
| Name | Description |
|---|---|
MeterId | — |
SamplingPeriod | — |
MeterNameLength | — |
MeterName | — |
MeteredHardwareCount | — |
MeteredHardwareName | — |
Event ID 15 —
Fields
| Name | Description |
|---|---|
Flags | — |
ProcessorVendor | — |
ProcessorType | — |
Event ID 16 —
Fields
| Name | Description |
|---|---|
SchemeGuid | — |
SubgroupGuid | — |
SettingGuid | — |
Flags | — |
DataType | — |
DataSize | — |
Data | — |
ProfileGuid | — |
Event ID 17 —
Fields
| Name | Description |
|---|---|
ProfileGuid | — |
SubgroupGuid | — |
SettingGuid | — |
SchemePersonalityGuid | — |
Flags | — |
ValueIndex | — |
Type | — |
DataSize | — |
Data | — |
Altitude | — |
Event ID 18 —
Fields
| Name | Description |
|---|---|
MeterId | — |
AbsoluteEnergy | — |
AbsoluteTime | — |
Event ID 19 —
Fields
| Name | Description |
|---|---|
MeterId | — |
SamplingPeriod | — |
ChannelNameLength | — |
ChannelName | — |
Event ID 22 — Reapply power settings upon completion of the provisioning engine's turn %1.
Message
Fields
| Name | Description |
|---|---|
Turn | — |
Event ID 23 —
Fields
| Name | Description |
|---|---|
SessionId | — |
Event ID 24 —
Fields
| Name | Description |
|---|---|
Event | — |
SessionId | — |
Event ID 25 —
Fields
| Name | Description |
|---|---|
UserContextToken | — |
SessionId | — |
UserSid | — |
Event ID 26 —
Fields
| Name | Description |
|---|---|
Event | — |
UserContextToken | — |
SessionId | — |
UserSid | — |
Event ID 27 —
Fields
| Name | Description |
|---|---|
Supported | — |
GlobalUserPresent | — |
UserPredictionMode | — |
MinConfidence | — |
SuspendCount | — |
LastUserAwayEndSystemTime | — |
Event ID 28 —
Fields
| Name | Description |
|---|---|
UserSid | — |
IntervalCount | — |
AwayIntervals | — |
Flags | — |
Event ID 29 —
Fields
| Name | Description |
|---|---|
UserSid | — |
IntervalCount | — |
AwayIntervals | — |
Flags | — |
Event ID 30 —
Fields
| Name | Description |
|---|---|
UserSid | — |
Event ID 31 —
Fields
| Name | Description |
|---|---|
UserAwayEndSystemTime | — |
Event ID 32 —
Fields
| Name | Description |
|---|---|
Suspend | — |
SuspendCount | — |
GlobalUserPresent | — |
UserPredictionMode | — |
Event ID 33 —
Fields
| Name | Description |
|---|---|
SystemTimeShift | — |
Event ID 34 —
Fields
| Name | Description |
|---|---|
Type | — |
Id | — |
Event ID 35 —
Fields
| Name | Description |
|---|---|
Type | — |
Id | — |
ErrorCode | — |
Event ID 36 —
Fields
| Name | Description |
|---|---|
Type | — |
Id | — |
Event ID 37 —
Fields
| Name | Description |
|---|---|
Type | — |
Id | — |
Event ID 38 —
Fields
| Name | Description |
|---|---|
Type | — |
Id | — |
ErrorCode | — |
Event ID 39 —
Fields
| Name | Description |
|---|---|
Type | — |
Id | — |
Event ID 40 —
Fields
| Name | Description |
|---|---|
Type | — |
Id | — |
ErrorCode | — |
Event ID 41 —
Fields
| Name | Description |
|---|---|
Type | — |
Id | — |
Event ID 42 —
Fields
| Name | Description |
|---|---|
Type | — |
Id | — |
ErrorCode | — |
Event ID 43 —
Fields
| Name | Description |
|---|---|
EffectiveBrightnessPercentage | — |
EffectiveBrightnessMillinits | — |
NewBrightnessTransitionTime | — |
DimmingTransitionTime | — |
DimmedBrightnessPercentage | — |
DimmedBrightnessMillinits | — |
NewDimmedTransitionTime | — |
UnDimmingTransitionTime | — |
Event ID 44 —
Fields
| Name | Description |
|---|---|
TimeInStandby | — |
GracePeriod | — |
RemainingBatteryPercentage | — |
RemainingBatteryTime | — |
ReserveBatteryTime | — |
ExecuteAction | — |
RejectReason | — |
DataSources | — |
CsSessionId | — |
Event ID 45 —
Fields
| Name | Description |
|---|---|
TimeInStandby | — |
GracePeriod | — |
RemainingBatteryPercentage | — |
StandbyBatteryDrainPercentage | — |
BatteryDrainPercentageThreshold | — |
ExecuteAction | — |
RejectReason | — |
DataSources | — |
CsSessionId | — |
Event ID 46 —
Fields
| Name | Description |
|---|---|
ActualTimeRange | — |
RemainingBatteryPercentage | — |
Event ID 47 —
Fields
| Name | Description |
|---|---|
Action | — |
Error | — |
Event ID 48 —
Fields
| Name | Description |
|---|---|
Id | — |
GpuCount | — |
IdV2 | — |
Event ID 49 —
Fields
| Name | Description |
|---|---|
OverlaySchemeGuid | — |
SubgroupGuid | — |
SettingGuid | — |
Flags | — |
ValueIndex | — |
Type | — |
DataSize | — |
Data | — |
Altitude | — |
Event ID 50 —
Fields
| Name | Description |
|---|---|
SchemeGuid | — |
AcOverlay | — |
Event ID 51 — Process %1 (process ID:%2) reset overlay policy scheme from %3 to %4.
Message
Fields
| Name | Description |
|---|---|
ProcessPath | — |
ProcessPid | — |
OldSchemeGuid | — |
NewSchemeGuid | — |
Event ID 52 —
Fields
| Name | Description |
|---|---|
SchemeGuid | — |
Event ID 53 —
Fields
| Name | Description |
|---|---|
Reason | — |
Event ID 54 —
Fields
| Name | Description |
|---|---|
Reason | — |
Suspend | — |
Event ID 55 —
Event ID 56 —
Fields
| Name | Description |
|---|---|
SchemeGuid | — |
SubgroupGuid | — |
SettingGuid | — |
Flags | — |
DataType | — |
DataSize | — |
Data | — |
ProfileGuid | — |
Event ID 57 —
Fields
| Name | Description |
|---|---|
Reason | — |
Event ID 58 —
Fields
| Name | Description |
|---|---|
Reason | — |
Event ID 59 —
Fields
| Name | Description |
|---|---|
IsSystem | — |
IsAc | — |
ProcessPid | — |
ProcessName | — |
DataSize | — |
Data | — |
Event ID 60 —
Fields
| Name | Description |
|---|---|
TimeInStandby | — |
GracePeriod | — |
RemainingBatteryPercentage | — |
StandbyBatteryDrainPercentage | — |
BatteryDrainPercentageThreshold | — |
ExecuteAction | — |
RejectReason | — |
DataSources | — |
CsSessionId | — |
Event ID 61 —
Fields
| Name | Description |
|---|---|
TargetState | — |
SearchIndex | — |
SearchStartTime | — |
SearchEndTime | — |
EntryTime | — |
ExitTime | — |
Error | — |
Flags | — |
ProbabilityThreshold | — |
ConfidenceThreshold | — |
ProbabilityActual | — |
ConfidenceActual | — |
Event ID 62 —
Fields
| Name | Description |
|---|---|
State | — |
DisableReason | — |
ThresholdCount | — |
Thresholds | — |