Microsoft-Windows-WAS
430 events across 1 channel
Event ID 5001 —
Event ID 5002 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5003 —
Event ID 5004 —
Event ID 5005 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5006 —
Event ID 5007 —
Event ID 5008 —
Event ID 5009 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
ExitCode UnicodeString | — |
Event ID 5010 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5011 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5012 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5013 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5014 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5015 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
OrphanAction UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5016 —
Event ID 5017 —
Event ID 5018 —
Event ID 5019 —
Event ID 5020 —
Event ID 5021 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5022 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5023 —
Event ID 5024 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
LogFileTruncateBytes UnicodeString | — |
Event ID 5025 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5026 —
Event ID 5027 —
Event ID 5028 —
Fields #
| Name | Description |
|---|---|
ProcessID UnicodeString | — |
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5029 —
Event ID 5030 —
Event ID 5031 —
Event ID 5032 —
Event ID 5033 —
Event ID 5034 —
Event ID 5035 —
Event ID 5036 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5037 —
Event ID 5038 —
Event ID 5039 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5040 —
Event ID 5041 —
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | — |
param2 UnicodeString | — |
Property UnicodeString | — |
Value UnicodeString | — |
RangeLow UnicodeString | — |
RangeHigh UnicodeString | — |
DefaultValue UnicodeString | — |
Event ID 5042 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
CmdValue UnicodeString | — |
Event ID 5043 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5044 —
Event ID 5045 —
Event ID 5046 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
CmdValue UnicodeString | — |
Event ID 5047 —
Fields #
| Name | Description |
|---|---|
Application UnicodeString | — |
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5048 —
Fields #
| Name | Description |
|---|---|
Application UnicodeString | — |
SiteID UnicodeString | — |
AppPoolID UnicodeString | — |
Event ID 5049 —
Event ID 5050 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
NameLength UnicodeString | — |
MaxLength UnicodeString | — |
Event ID 5051 —
Event ID 5052 —
Fields #
| Name | Description |
|---|---|
Application UnicodeString | — |
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5053 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5054 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
AutoStopAction UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5055 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
AppPoolID UnicodeString | — |
Event ID 5056 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5057 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5058 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5059 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5060 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5061 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5062 —
Event ID 5063 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5064 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5065 —
Fields #
| Name | Description |
|---|---|
Bytes UnicodeString | — |
Event ID 5066 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5067 —
Fields #
| Name | Description |
|---|---|
Property UnicodeString | — |
Value UnicodeString | — |
RangeLow UnicodeString | — |
RangeHigh UnicodeString | — |
DefaultValue UnicodeString | — |
Event ID 5068 —
Event ID 5069 —
Event ID 5070 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5071 —
Event ID 5072 —
Event ID 5073 —
Event ID 5074 —
Fields #
| Name | Description |
|---|---|
ProcessID UnicodeString | — |
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5075 —
Fields #
| Name | Description |
|---|---|
ProcessID UnicodeString | — |
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5076 —
Fields #
| Name | Description |
|---|---|
ProcessID UnicodeString | — |
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5077 —
Fields #
| Name | Description |
|---|---|
ProcessID UnicodeString | — |
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5078 —
Fields #
| Name | Description |
|---|---|
ProcessID UnicodeString | — |
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5079 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
Binary | — |
__binLength UInt32 | — |
binary Binary | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-WAS",
"guid": "{524B5D04-133C-4A62-8362-64E8EDB9CE40}",
"event_source_name": "WAS",
"event_id": 5079,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-03-13T20:16:26.174943+00:00",
"event_record_id": 11750,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "System",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"AppPoolID": "EvtGenPool1",
"Binary": ""
},
"message": ""
}
Event ID 5080 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5081 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5082 —
Fields #
| Name | Description |
|---|---|
ProcessID UnicodeString | — |
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5083 —
Event ID 5084 —
Event ID 5085 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5086 —
Event ID 5087 —
Event ID 5088 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5089 —
Event ID 5090 —
Event ID 5091 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5092 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5093 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5094 —
Fields #
| Name | Description |
|---|---|
Application UnicodeString | — |
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5095 —
Event ID 5096 —
Event ID 5097 —
Event ID 5098 —
Event ID 5099 —
Event ID 5100 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
Application UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5101 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5102 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5103 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
Application UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5104 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5105 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5106 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
Application UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5107 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5108 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5109 —
Event ID 5110 —
Event ID 5111 —
Event ID 5112 —
Event ID 5113 —
Event ID 5114 —
Event ID 5115 —
Event ID 5116 —
Event ID 5117 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5118 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5119 —
Event ID 5120 —
Event ID 5121 —
Event ID 5122 —
Event ID 5123 —
Event ID 5124 —
Event ID 5125 —
Event ID 5126 —
Event ID 5127 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5128 —
Event ID 5129 —
Event ID 5130 —
Event ID 5131 —
Event ID 5132 —
Event ID 5133 —
Event ID 5134 —
Event ID 5135 —
Event ID 5136 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5137 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
param3 UnicodeString | — |
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5138 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
param3 UnicodeString | — |
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5139 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
param3 UnicodeString | — |
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5140 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5141 —
Event ID 5142 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5143 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5144 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5145 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5146 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5147 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5148 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
AppPoolID UnicodeString | — |
Event ID 5149 —
Fields #
| Name | Description |
|---|---|
Property UnicodeString | — |
Value UnicodeString | — |
DefaultValue UnicodeString | — |
Event ID 5150 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
SiteID UnicodeString | — |
Application UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5151 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
SiteID UnicodeString | — |
Application UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5152 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
IdleTimeout UnicodeString | — |
PeriodicRestartTime UnicodeString | — |
Event ID 5153 —
Event ID 5154 —
Event ID 5155 —
Event ID 5156 —
Event ID 5157 —
Event ID 5158 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
param3 UnicodeString | — |
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5159 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5160 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5161 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5162 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
Application UnicodeString | — |
BadAppRoot UnicodeString | — |
RequiredAppRoot UnicodeString | — |
Event ID 5163 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5164 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5165 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5167 —
Fields #
| Name | Description |
|---|---|
ProcessID UnicodeString | — |
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5168 —
Event ID 5169 —
Fields #
| Name | Description |
|---|---|
ListenerAdapter UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5170 —
Fields #
| Name | Description |
|---|---|
ListenerAdapter UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5171 —
Fields #
| Name | Description |
|---|---|
ListenerAdapter UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5172 —
Fields #
| Name | Description |
|---|---|
File UnicodeString | — |
LineNumber UnicodeString | — |
Error UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5173 —
Fields #
| Name | Description |
|---|---|
ConfigSection UnicodeString | — |
File UnicodeString | — |
LineNumber UnicodeString | — |
Error UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5174 —
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | — |
param2 UnicodeString | — |
Property UnicodeString | — |
Value UnicodeString | — |
DefaultValue UnicodeString | — |
Event ID 5175 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5176 —
Event ID 5177 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
Application UnicodeString | — |
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5178 —
Fields #
| Name | Description |
|---|---|
ProtocolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5179 —
Fields #
| Name | Description |
|---|---|
ConfigNode UnicodeString | — |
Property UnicodeString | — |
Value UnicodeString | — |
DefaultValue UnicodeString | — |
Event ID 5180 —
Fields #
| Name | Description |
|---|---|
ConfigNode UnicodeString | — |
Property UnicodeString | — |
Value UnicodeString | — |
DefaultValue UnicodeString | — |
ValidValues UnicodeString | — |
Event ID 5181 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5182 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5183 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5184 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5185 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5186 —
Fields #
| Name | Description |
|---|---|
ProcessID UnicodeString | — |
AppPoolID UnicodeString | — |
Minutes UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-WAS",
"guid": "{524B5D04-133C-4A62-8362-64E8EDB9CE40}",
"event_source_name": "WAS",
"event_id": 5186,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-03-13T23:39:15.838543+00:00",
"event_record_id": 12532,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "System",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"ProcessID": "12504",
"AppPoolID": "DefaultAppPool",
"Minutes": "20"
},
"message": ""
}
Event ID 5187 —
Fields #
| Name | Description |
|---|---|
ListenerAdapter UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5188 —
Event ID 5189 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ErrorType UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5190 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5191 —
Event ID 5192 —
Fields #
| Name | Description |
|---|---|
DynamicIdleLoad UnicodeString | — |
NumWorkerProcesses UnicodeString | — |
TotalCommitMB UnicodeString | — |
PhysMemoryMB UnicodeString | — |
PhysMemoryFreeMB UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5193 —
Fields #
| Name | Description |
|---|---|
DynamicIdleLoad UnicodeString | — |
NumWorkerProcesses UnicodeString | — |
TotalCommitMB UnicodeString | — |
PhysMemoryMB UnicodeString | — |
PhysMemoryFreeMB UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5194 —
Fields #
| Name | Description |
|---|---|
DynamicIdleLoad UnicodeString | — |
NumWorkerProcesses UnicodeString | — |
TotalCommitMB UnicodeString | — |
PhysMemoryMB UnicodeString | — |
PhysMemoryFreeMB UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5195 —
Fields #
| Name | Description |
|---|---|
ProcessID UnicodeString | — |
AppPoolID UnicodeString | — |
Minutes UnicodeString | — |
DynamicIdle UnicodeString | — |
Event ID 5196 —
Fields #
| Name | Description |
|---|---|
Threshold UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5197 —
Event ID 5198 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5199 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5200 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5201 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5202 —
Fields #
| Name | Description |
|---|---|
ErrorCode UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5203 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5204 —
Fields #
| Name | Description |
|---|---|
ErrorCode UnicodeString | — |
ConfigPath UnicodeString | — |
ConfigFile UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5205 —
Event ID 5207 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5208 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5209 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
ProcessID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5210 —
Fields #
| Name | Description |
|---|---|
AppPoolID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5211 —
#Fields #
| Name | Description |
|---|---|
RunningMode UnicodeString | — |
ConfigurationReader UnicodeString | — |
Binary | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-WAS",
"guid": "{524B5D04-133C-4A62-8362-64E8EDB9CE40}",
"event_source_name": "WAS",
"event_id": 5211,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2022-04-04T13:11:26.622206+00:00",
"event_record_id": 1622,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "System",
"computer": "WIN-TKC15D7KHUR",
"security": {
"user_id": ""
}
},
"event_data": {
"RunningMode": "Classic",
"ConfigurationReader": "ConfigurationSystem",
"Binary": ""
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 5212 —
Fields #
| Name | Description |
|---|---|
SiteID UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5213 —
Fields #
| Name | Description |
|---|---|
BindingInformation UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5214 —
Fields #
| Name | Description |
|---|---|
ConfigErrorDescription UnicodeString | — |
__binLength UInt32 | — |
binary Binary | — |
Event ID 5215 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5216 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 5217 —
Fields #
| Name | Description |
|---|---|
__binLength UInt32 | — |
binary Binary | — |
Event ID 1073746898 — A worker process with process id of '%1' serving application pool '%2' has requested a recycle because the worker process reached its allowed proce...
Description
A worker process with process id of '%1' serving application pool '%2' has requested a recycle because the worker process reached its allowed processing time limit.
Message #
Event ID 1073746899 — A worker process with process id of '%1' serving application pool '%2' has requested a recycle because it reached its allowed request limit.
Description
A worker process with process id of '%1' serving application pool '%2' has requested a recycle because it reached its allowed request limit.
Message #
Event ID 1073746900 — A worker process with process id of '%1' serving application pool '%2' has requested a recycle because it reached its scheduled recycle time.
Description
A worker process with process id of '%1' serving application pool '%2' has requested a recycle because it reached its scheduled recycle time.
Message #
Event ID 1073746901 — A worker process with process id of '%1' serving application pool '%2' has requested a recycle because it reached its virtual memory limit.
Description
A worker process with process id of '%1' serving application pool '%2' has requested a recycle because it reached its virtual memory limit.
Message #
Event ID 1073746902 — An ISAPI reported an unhealthy condition to its worker process.
Description
An ISAPI reported an unhealthy condition to its worker process. Therefore, the worker process with process id of '%1' serving application pool '%2' has requested a recycle.
Message #
Event ID 1073746903 — An administrator has requested a recycle of all worker processes in application pool '%1'.
Description
An administrator has requested a recycle of all worker processes in application pool '%1'.
Message #
Event ID 1073746904 — The worker processes serving application pool '%1' are being recycled due to 1 or more configuration changes in the application pool properties whi...
Description
The worker processes serving application pool '%1' are being recycled due to 1 or more configuration changes in the application pool properties which necessitate a restart of the processes.
Message #
Event ID 1073746905 — The worker processes serving application pool '%1' are being recycled due to detected problems with the IIS configuration store that may make curre...
Description
The worker processes serving application pool '%1' are being recycled due to detected problems with the IIS configuration store that may make current cached metadata invalid.
Message #
Event ID 1073746906 — A worker process with pid '%2' that serves application pool '%1' has been determined to be unhealthy (see previous event log message), but because ...
Message #
Event ID 1073746941 — A worker process serving application pool '%1' has requested a recycle because it reached its private bytes memory limit.
Description
A worker process serving application pool '%1' has requested a recycle because it reached its private bytes memory limit.
Message #
Event ID 1073747008 — The Windows Process Activation Service recovered from a previous error creating app pool '%1'.
Description
The Windows Process Activation Service recovered from a previous error creating app pool '%1'. See previously logged event(s).
Message #
Event ID 1073747009 — The Windows Process Activation Service recovered from a previous error creating site '%1'.
Description
The Windows Process Activation Service recovered from a previous error creating site '%1'. See previously logged event(s).
Message #
Event ID 1073747010 — A worker process with process id of '%1' serving application pool '%2' was shutdown due to inactivity.
Message #
Event ID 1073747016 — The dynamic idle load is '%1' percent of the dynamic idle threshold.
Message #
Event ID 1073747018 — The dynamic idle load is '%1' percent of the dynamic idle threshold.
Message #
Event ID 1073747019 — A worker process with process id of '%1' serving application pool '%2' was shutdown due to inactivity.
Message #
Event ID 1073747021 — The dynamic idle has been disabled in configuration.
Description
The dynamic idle has been disabled in configuration. The Windows Process Activation Service (WAS) will return worker process idle timeouts to their configured settings.
Message #
Event ID 1073747029 — The Windows Process Activation Service (WAS) was able to recover from the configuration read error condition and successfully read the configuratio...
Description
The Windows Process Activation Service (WAS) was able to recover from the configuration read error condition and successfully read the configuration file.
Message #
Event ID 1073747035 — The Windows Process Activation Service (WAS) started with '%1' mode using '%2'.
Description
The Windows Process Activation Service (WAS) started with '%1' mode using '%2'.
Message #
Event ID 2147488649 — Not used.
Message #
Event ID 2147488656 — Not used.
Message #
Event ID 2147488657 — A process serving application pool '%1' terminated unexpectedly.
Description
A process serving application pool '%1' terminated unexpectedly. The process id was '%2'. The process exit code was '0x%3'.
Message #
Event ID 2147488658 — A process serving application pool '%1' failed to respond to a ping.
Description
A process serving application pool '%1' failed to respond to a ping. The process id was '%2'.
Message #
Event ID 2147488659 — A process serving application pool '%1' suffered a fatal communication error with the Windows Process Activation Service.
Description
A process serving application pool '%1' suffered a fatal communication error with the Windows Process Activation Service. The process id was '%2'. The data field contains the error number.
Message #
Event ID 2147488660 — A process serving application pool '%1' exceeded time limits during start up.
Description
A process serving application pool '%1' exceeded time limits during start up. The process id was '%2'.
Message #
Event ID 2147488661 — A process serving application pool '%1' exceeded time limits during shut down.
Description
A process serving application pool '%1' exceeded time limits during shut down. The process id was '%2'.
Message #
Event ID 2147488662 — The Windows Process Activation Service encountered an internal error in its process management of worker process '%2' serving application pool '%1'.
Description
The Windows Process Activation Service encountered an internal error in its process management of worker process '%2' serving application pool '%1'. The data field contains the error number.
Message #
Event ID 2147488664 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 2147488667 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 2147488669 — The identity of application pool %1 is invalid.
Message #
Event ID 2147488670 — The Windows Process Activation Service failed to create a worker process for the application pool '%1'.
Description
The Windows Process Activation Service failed to create a worker process for the application pool '%1'. The data field contains the error number.
Message #
Event ID 2147488673 — Application pool '%1' exceeded its job limit settings.
Description
Application pool '%1' exceeded its job limit settings.
Message #
Event ID 2147488687 — A process serving application pool '%1' reported a failure.
Description
A process serving application pool '%1' reported a failure. The process id was '%2'. The data field contains the error number.
Message #
Event ID 2147488689 — The '%1' '%2' failed range validation for property '%3'.
Description
The '%1' '%2' failed range validation for property '%3'. The configured value '%4' is outside of the range '%5' to '%6'. The value will default to '%7'.
Message #
Event ID 2147488690 — The AppPoolCommand property set on the application pool '%1' is not a valid value.
Description
The AppPoolCommand property set on the application pool '%1' is not a valid value. It is '%2'. It must be either MD_APPPOOL_COMMAND_START = 1 or MD_APPPOOL_COMMAND_STOP = 2.
Message #
Event ID 2147488691 — The virtual site %1 is invalid because valid site bindings could not be configured or no site bindings exist for the site.
Description
The virtual site is invalid because valid site bindings could not be configured or no site bindings exist for the site.
Message #
Event ID 2147488692 — Not used.
Message #
Event ID 2147488693 — Not used.
Message #
Event ID 2147488694 — The server command property for virtual site '%1' is not a valid value.
Message #
Event ID 2147488695 — The application '%2' belonging to site '%1' has an AppPoolId set, but the property is empty.
Description
The application '%2' belonging to site '%1' has an AppPoolId set, but the property is empty. Therefore, the application will be ignored.
Message #
Event ID 2147488696 — The application '%2' belonging to site '%1' has an invalid AppPoolId '%3' set.
Description
The application '%2' belonging to site '%1' has an invalid AppPoolId '%3' set. Therefore, the application will be ignored.
Message #
Event ID 2147488697 — This message has become deprecated in IIS 7.
Description
This message has become deprecated in IIS 7.
Message #
Event ID 2147488698 — The application pool id '%1' exceeds length limits.
Description
The application pool id '%1' exceeds length limits. It is '%2' characters and can not be more than '%3' characters. The application pool will therefore be ignored.
Message #
Event ID 2147488699 — An application pool id was defined as a zero length string.
Description
An application pool id was defined as a zero length string. An application pool id must not be a zero length string. The application pool will therefore be ignored.
Message #
Event ID 2147488700 — The application '%2' belongs to an invalid site '%1'.
Description
The application '%2' belongs to an invalid site '%1'. Therefore, the application will be ignored.
Message #
Event ID 2147488703 — Site %1 was disabled because the application pool defined for site %2 is not a valid application pool.
Description
Site was disabled because the application pool defined for site is not a valid application pool.
Message #
Event ID 2147488704 — Site %1 was disabled because the root application defined for the site is invalid.
Description
Site was disabled because the root application defined for the site is invalid. See the previous event log message for information about why the root application is invalid.
Message #
Event ID 2147488705 — Application pool %1 has been disabled.
Description
Application pool has been disabled. Windows Process Activation Service (WAS) did not create a worker process to serve the application pool because the application pool identity is invalid.
Message #
Event ID 2147488706 — The Windows Process Activation Service encountered a failure while setting the affinity mask of application pool '%1'.
Message #
Event ID 2147488713 — Centralized logging is configured to truncate its log every '%1' bytes.
Description
Centralized logging is configured to truncate its log every '%1' bytes. Since this value must be at least 1048576 bytes ( 1 megabyte ), 1048576 bytes will be used.
Message #
Event ID 2147488715 — The World Wide Web Publishing Service property '%1' failed range validation.
Description
The World Wide Web Publishing Service property '%1' failed range validation. The configured value, '%2' is outside of the range '%3' to '%4'. The default value, '%5', will be used.
Message #
Event ID 2147488716 — Not used.
Message #
Event ID 2147488717 — Not used.
Message #
Event ID 2147488718 — The Windows Process Activation Service failed to issue recycle requests to all worker processes of application pool '%1'.
Description
The Windows Process Activation Service failed to issue recycle requests to all worker processes of application pool '%1'. The data field contains the error number.
Message #
Event ID 2147488719 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 2147488720 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 2147488721 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 2147488775 — A worker process '%2' serving application pool '%1' is no longer trusted by the Windows Process Activation Service, based on ill-formed data the wo...
Message #
Event ID 2147488780 — Enable32bitAppOnWin64 setting will be ignored because IIS is currently running in IIS5 Compatibility mode.
Description
Enable32bitAppOnWin64 setting will be ignored because IIS is currently running in IIS5 Compatibility mode.
Message #
Event ID 2147488781 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 2147488785 — A worker process '%2' serving application pool '%1' failed to start a listener channel for protocol '%4' in the allotted time.
Description
A worker process '%2' serving application pool '%1' failed to start a listener channel for protocol '%4' in the allotted time. The data field contains the error number.
Message #
Event ID 2147488786 — A worker process '%2' serving application pool '%1' failed to stop a listener channel for protocol '%4' in the allotted time.
Description
A worker process '%2' serving application pool '%1' failed to stop a listener channel for protocol '%4' in the allotted time. The data field contains the error number.
Message #
Event ID 2147488787 — A listener channel for protocol '%4' in worker process '%2' serving application pool '%1' reported a listener channel failure.
Description
A listener channel for protocol '%4' in worker process '%2' serving application pool '%1' reported a listener channel failure. The data field contains the error number.
Message #
Event ID 2147488788 — Windows Process Activation Service (WAS) disabled protocol %1 because WAS received bad data about the protocol.
Description
Windows Process Activation Service (WAS) disabled protocol because WAS received bad data about the protocol. To re-enable the protocol, resolve the issue and recycle WAS.
Message #
Event ID 2147488789 — This message has become deprecated in IIS 7.
Description
This message has become deprecated in IIS 7.
Message #
Event ID 2147488796 — Windows Process Activation Service (WAS) is disabling protocol %1 because the protocol was unable to acknowledge a change in an application pool id...
Message #
Event ID 2147488797 — The World Wide Web Publishing Service property '%1' failed range validation.
Description
The World Wide Web Publishing Service property '%1' failed range validation. The configured value, '%2' is invalid. The default value, '%3', will be used.
Message #
Event ID 2147488800 — The application pool '%1' has an IdleTimeout '%2' equal to or greater than the PeriodicRestart time value of '%3'.
Message #
Event ID 2147488801 — The Windows Process Activation Service (WAS) encountered an error attempting to look up the built in IIS_IUSRS group.
Message #
Event ID 2147488802 — Available.
Description
Available.
Message #
Event ID 2147488803 — Available.
Description
Available.
Message #
Event ID 2147488804 — Available.
Description
Available.
Message #
Event ID 2147488805 — Available.
Description
Available.
Message #
Event ID 2147488806 — A listener adapter for protocol '%4' supporting a listener channel in worker process '%2' serving application pool '%1' failed.
Description
A listener adapter for protocol '%4' supporting a listener channel in worker process '%2' serving application pool '%1' failed. The data field contains the error number.
Message #
Event ID 2147488810 — The application '%2' belonging to site '%1' has an invalid AppRoot set.
Description
The application '%2' belonging to site '%1' has an invalid AppRoot set. It should be '%4' but instead is '%3'. Therefore, the application will be ignored.
Message #
Event ID 2147488841 — The dynamic idle load is '%1' percent of the dynamic idle threshold.
Message #
Event ID 2147488844 — A request to create a new worker process has arrived.
Description
A request to create a new worker process has arrived. The '%1' setting has been reached. The Windows Process Activation Service (WAS) will not start any worker processes until this drops.
Message #
Event ID 2147488849 — A process serving application pool '%1' reported a failure during application preloading or service loading.
Message #
Event ID 2147488852 — The Windows Process Activation Service (WAS) encountered an error condition attempting to read the configuration file.
Message #
Event ID 2147488855 — The job object associated with application pool '%1' encountered an error during qeurying information about job object.
Message #
Event ID 2147488856 — The Windows Process Activation Service failed to create a debugger process for the application pool '%1'.
Message #
Event ID 2147488857 — A process serving application pool '%1' exceeded time limits during start up.
Message #
Event ID 2147488858 — CPU time for application pool '%1' has been throttled.
Description
CPU time for application pool '%1' has been throttled.
Message #
Event ID 2147488860 — The Windows Process Activation Service (WAS) failed to insert data for registration site '%1'.
Description
The Windows Process Activation Service (WAS) failed to insert data for registration site '%1'. The data field contains the error number.
Message #
Event ID 2147488861 — Binding information '%1' is unsupported with dynamic mode.
Description
Binding information '%1' is unsupported with dynamic mode. The Windows Process Activation Service (WAS) restart is required to register that binding.
Message #
Event ID 3221230474 — Application pool '%1' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
Description
Application pool '%1' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
Message #
Event ID 3221230475 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230476 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230477 — Windows Process Activation Service (WAS) is stopping because it encountered an error.
Description
Windows Process Activation Service (WAS) is stopping because it encountered an error. The data field contains the error number.
Message #
Event ID 3221230478 — WAS_NOT_USED_5006
Description
WAS_NOT_USED_5006.
Message #
Event ID 3221230479 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230487 — A process serving application pool '%1' was orphaned but the specified orphan action %2 could not be executed.
Description
A process serving application pool '%1' was orphaned but the specified orphan action %2 could not be executed. The data field contains the error number.
Message #
Event ID 3221230489 — Not used.
Message #
Event ID 3221230490 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230492 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230495 — Not Used.
Message #
Event ID 3221230496 — Virtual site '%1' is configured to truncate its log every '%2' bytes.
Description
Virtual site '%1' is configured to truncate its log every '%2' bytes. Since this value must be at least 1048576 bytes ( 1 megabyte ), 1048576 bytes will be used.
Message #
Event ID 3221230498 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230499 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230500 — The Windows Process Activation Service failed to add the worker process '%1' to the job object representing application pool '%2'.
Description
The Windows Process Activation Service failed to add the worker process '%1' to the job object representing application pool '%2'. The data field contains the error number.
Message #
Event ID 3221230501 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230502 — Windows Process Activation Service terminated unexpectedly and the system was not configured to restart it.
Description
Windows Process Activation Service terminated unexpectedly and the system was not configured to restart it. The Windows Process Activation Service has shut down.
Message #
Event ID 3221230503 — Not Used.
Message #
Event ID 3221230504 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230505 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230506 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230507 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230508 — The configuration manager for Windows Process Activation Service (WAS) did not initialize.
Description
The configuration manager for Windows Process Activation Service (WAS) did not initialize. The data field contains the error number.
Message #
Event ID 3221230509 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230510 — Not Used.
Message #
Event ID 3221230512 — Not Used.
Message #
Event ID 3221230525 — The Windows Process Activation Service received a change notification, but was unable to process it correctly.
Description
The Windows Process Activation Service received a change notification, but was unable to process it correctly. The data field contains the error number.
Message #
Event ID 3221230526 — Windows Process Activation Service (WAS) did not run the automatic shutdown executable %2 for application pool %1.
Description
Windows Process Activation Service (WAS) did not run the automatic shutdown executable for application pool . The data field contains the error number.
Message #
Event ID 3221230531 — Application pool %1 has been disabled.
Description
Application pool has been disabled. Windows Process Activation Service (WAS) encountered a failure when it started a worker process to serve the application pool.
Message #
Event ID 3221230532 — The job object associated with application pool '%1' encountered an error during configuration.
Description
The job object associated with application pool '%1' encountered an error during configuration. CPU monitoring may not function as expected. The data field contains the error number.
Message #
Event ID 3221230533 — The job object attached to application pool '%1' failed to start its timer.
Message #
Event ID 3221230534 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230535 — The Windows Process Activation Service encountered a failure requesting IIS configuration store change notifications.
Description
The Windows Process Activation Service encountered a failure requesting IIS configuration store change notifications. The data field contains the error number.
Message #
Event ID 3221230536 — The Windows Process Activation Service encountered a failure requesting IIS configuration store change notifications during recovery from inetinfo ...
Message #
Event ID 3221230538 — The Windows Process Activation Service encountered an error attempting to configure centralized logging.
Description
The Windows Process Activation Service encountered an error attempting to configure centralized logging. It is not configured as expected. The data field contains the error number.
Message #
Event ID 3221230555 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230556 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230557 — The Windows Process Activation Service (WAS) did not apply configuration changes to application pool %1.
Description
The Windows Process Activation Service (WAS) did not apply configuration changes to application pool . The data field contains the error number.
Message #
Event ID 3221230558 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230559 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230560 — The Windows Process Activation Service failed to properly configure the job object for application pool '%1'.
Description
The Windows Process Activation Service failed to properly configure the job object for application pool '%1'. The data field contains the error number.
Message #
Event ID 3221230561 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230562 — Not used.
Message #
Event ID 3221230563 — The Windows Process Activation Service (WAS) did not run the automatic shutdown executable for application pool %1.
Description
The Windows Process Activation Service (WAS) did not run the automatic shutdown executable for application pool . The data field contains the error number.
Message #
Event ID 3221230564 — The Windows Process Activation Service failed to issue a request for the worker process '%2' of application pool '%1' to supply its performance cou...
Description
The Windows Process Activation Service failed to issue a request for the worker process '%2' of application pool '%1' to supply its performance counters. The data field contains the error number.
Message #
Event ID 3221230565 — The Windows Process Activation Service failed to overlap recycle for application pool '%1' worker process '%2'.
Description
The Windows Process Activation Service failed to overlap recycle for application pool '%1' worker process '%2'. The data field contains the error number.
Message #
Event ID 3221230566 — The Windows Process Activation Service failed to disassociate the application '%1' from the virtual site '%2'.
Description
The Windows Process Activation Service failed to disassociate the application '%1' from the virtual site '%2'. The data field contains the error number.
Message #
Event ID 3221230567 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230568 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230569 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230570 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230571 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230572 — The Windows Process Activation Service failed to create the application '%2' in site '%1'.
Description
The Windows Process Activation Service failed to create the application '%2' in site '%1'. The data field contains the error number.
Message #
Event ID 3221230573 — The Windows Process Activation Service (WAS) did not create application pool %1.
Description
The Windows Process Activation Service (WAS) did not create application pool . The data field contains the error number.
Message #
Event ID 3221230574 — Windows Process Activation Service (WAS) did not create site %1.
Description
Windows Process Activation Service (WAS) did not create site . The data field contains the error number.
Message #
Event ID 3221230575 — The Windows Process Activation Service failed to delete the application '%2' in site '%1'.
Description
The Windows Process Activation Service failed to delete the application '%2' in site '%1'. The data field contains the error number.
Message #
Event ID 3221230576 — The Windows Process Activation Service (WAS) did not delete application pool %1.
Description
The Windows Process Activation Service (WAS) did not delete application pool . The data field contains the error number.
Message #
Event ID 3221230577 — The Windows Process Activation Service failed to delete site '%1'.
Description
The Windows Process Activation Service failed to delete site '%1'. The data field contains the error number.
Message #
Event ID 3221230578 — The Windows Process Activation Service failed to modify the application '%2' in site '%1'.
Description
The Windows Process Activation Service failed to modify the application '%2' in site '%1'. The data field contains the error number.
Message #
Event ID 3221230579 — The Windows Process Activation Service (WAS) did not modify application pool %1.
Description
The Windows Process Activation Service (WAS) did not modify application pool . The data field contains the error number.
Message #
Event ID 3221230580 — The Windows Process Activation Service failed to modify site '%1'.
Description
The Windows Process Activation Service failed to modify site '%1'. The data field contains the error number.
Message #
Event ID 3221230581 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230582 — Not used.
Message #
Event ID 3221230583 — Not used.
Message #
Event ID 3221230584 — Not used.
Message #
Event ID 3221230585 — Not used.
Message #
Event ID 3221230586 — Not used.
Message #
Event ID 3221230587 — Not used.
Message #
Event ID 3221230588 — Not used.
Message #
Event ID 3221230590 — After recovering from an unexpected termination of the inetinfo process, Windows Process Activation Service (WAS) did not identify records that req...
Message #
Event ID 3221230591 — Not used.
Message #
Event ID 3221230592 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230593 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230594 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230595 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230596 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230597 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230598 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230600 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230601 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230602 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230603 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230606 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230607 — Event id used by World Wide Web Publishing Service.
Description
Event id used by World Wide Web Publishing Service.
Message #
Event ID 3221230608 — Windows Process Activation Service (WAS) was unable to register protocol %1.
Message #
Event ID 3221230614 — Windows Process Activation Service (WAS) encountered an error trying to determine the correct security identifier (SID) for the listener adapter id...
Message #
Event ID 3221230615 — Windows Process Activation Service (WAS) did not process changes that affect supported protocols for site %1.
Message #
Event ID 3221230616 — Application pool %1 has been disabled.
Message #
Event ID 3221230617 — Application pool %1 was not be disabled.
Message #
Event ID 3221230618 — Application pool %1 has been disabled.
Message #
Event ID 3221230619 — Windows Process Activation Service (WAS) disabled protocol %1 because the protocol was unable to acknowledge a change in an application pool identity.
Message #
Event ID 3221230622 — The request for protocol %1 to configure application %3 in virtual site %2 failed.
Message #
Event ID 3221230623 — Windows Process Activation Service (WAS) did not send a request to protocol %1 to remove configuration for application %3 in virtual site %2.
Message #
Event ID 3221230631 — Windows Process Activation Service (WAS) did not register protocol %1, because WAS cannot register a protocol when there are listener channels from...
Message #
Event ID 3221230632 — Windows Process Activation Service failed to create the internal protocol app pool object for app pool '%1' and protocol '%2'.
Message #
Event ID 3221230633 — Site %1 has no root application defined, so the site will be ignored.
Description
Site has no root application defined, so the site will be ignored.
Message #
Event ID 3221230635 — Windows Process Activation Service (WAS) was unable to determine the security identifier (SID) for the worker process identity in application pool %1.
Message #
Event ID 3221230636 — Windows Process Activation Service (WAS) was unable to notify protocol %2 about an identity change for application pool %1.
Message #
Event ID 3221230637 — Windows Process Activation Service (WAS) did not notify protocol %1 to enable request processing.
Message #
Event ID 3221230639 — Windows Process Activation Service encountered an error trying to track worker process '%1' that belongs to app pool '%2'.
Message #
Event ID 3221230640 — Available.
Description
Available.
Message #
Event ID 3221230641 — The Windows Process Activation Service couldn't process configuration information for listener adapter '%1'.
Description
The Windows Process Activation Service couldn't process configuration information for listener adapter '%1'. The data field contains the error number.
Message #
Event ID 3221230642 — The Windows Process Activation Service failed to process configuration information to delete listener adapter '%1'.
Description
The Windows Process Activation Service failed to process configuration information to delete listener adapter '%1'. The data field contains the error number.
Message #
Event ID 3221230643 — The Windows Process Activation Service had an error setting the identity for listener adapter '%1'.
Description
The Windows Process Activation Service had an error setting the identity for listener adapter '%1'. The data field contains the error number.
Message #
Event ID 3221230644 — The Windows Process Activation Service encountered an error trying to read configuration data from file '%1', line number '%2'.
Description
The Windows Process Activation Service encountered an error trying to read configuration data from file '%1', line number '%2'. The error message is: '%3'. The data field contains the error number.
Message #
Event ID 3221230645 — The Windows Process Activation Service encountered an error trying to read configuration data for config section '%1' from file '%2', line number '...
Message #
Event ID 3221230646 — The '%1' '%2' has an invalid value for property '%3'.
Description
The '%1' '%2' has an invalid value for property '%3'. The configured value '%4' is invalid. The value will default to '%5'.
Message #
Event ID 3221230647 — The listener adapter serving the '%1' protocol disconnected unexpectedly.
Description
The listener adapter serving the '%1' protocol disconnected unexpectedly.
Message #
Event ID 3221230648 — Available.
Description
Available.
Message #
Event ID 3221230649 — Windows Process Activation Service (WAS) did not create a relationship between protocol %1 and application %2, which belongs to site %3.
Message #
Event ID 3221230650 — An attempt was made to register protocol '%1', however protocol '%1' is all ready being handled by another listener adapter.
Message #
Event ID 3221230651 — The config node '%1' has an invalid value for property '%2'.
Description
The config node '%1' has an invalid value for property '%2'. The configured value '%3' is invalid. The value will default to '%4'.
Message #
Event ID 3221230652 — The config node '%1' has an invalid value for property '%2'.
Description
The config node '%1' has an invalid value for property '%2'. The configured value '%3' is invalid. The value will default to '%4'. Valid values are: '%5'.
Message #
Event ID 3221230653 — The protocol 'HTTPS' is not allowed in the property "enabledProtocols".
Description
The protocol 'HTTPS' is not allowed in the property "enabledProtocols". If you wish to enable HTTPS, you must specify HTTP as the protocol. The data field contains the error number.
Message #
Event ID 3221230654 — No virtual sites have been configured for the hostable web core instance.
Description
No virtual sites have been configured for the hostable web core instance. The data field contains the error number.
Message #
Event ID 3221230655 — Only one application pool is allowed for the hostable web core instance.
Description
Only one application pool is allowed for the hostable web core instance. The data field contains the error number.
Message #
Event ID 3221230659 — Windows Process Activation Service was unable to create a listener adapter with a blank name '%1'.
Description
Windows Process Activation Service was unable to create a listener adapter with a blank name '%1'. Please provide a name for your listener adapter protocol. The data field contains the error number.
Message #
Event ID 3221230660 — The directory specified for the temporary application pool config files is either missing or is not accessible by the Windows Process Activation Se...
Message #
Event ID 3221230661 — The Windows Process Activation Service failed to generate an application pool config file for application pool '%1'.
Message #
Event ID 3221230662 — The Windows Process Activation Service has encountered an error during the SID mapping for the application pool '%1'.
Message #
Event ID 3221230663 — The directory specified for the temporary application pool config files is a UNC path, which is not allowed.
Message #
Event ID 3221230670 — The application pool '%1' has enabled 32-bit worker processes, but no SysWOW64 support has been found.
Message #
Event ID 3221230671 — Application pool '%1' has identity type which is not allowed by the administrator.
Message #
Event ID 3221230672 — System doesn't allow application pools to run as LocalSystem.
Message #
Event ID 3221230674 — The Windows Process Activation Service (WAS) was not able to add the mapping to the 'IIS APPPOOL' namespace and thus is unable to create or use app...
Message #
Event ID 3221230675 — A process serving application pool '%1' reported a failure trying to read configuration during startup.
Message #
Event ID 3221230686 — The Windows Process Activation Service encountered an error trying to read configuration data with AppHostProvider.
Description
The Windows Process Activation Service encountered an error trying to read configuration data with AppHostProvider. The error message is: . The data field contains the error number.
Message #
Event ID 3221230687 — The Windows Process Activation Service (WAS) failed to execute initialization for offline setup.
Description
The Windows Process Activation Service (WAS) failed to execute initialization for offline setup. The data field contains the error number.
Message #
Event ID 3221230688 — The Windows Process Activation Service (WAS) encountered an error while handling migration.
Description
The Windows Process Activation Service (WAS) encountered an error while handling migration. This will prevent WAS from starting corrently. The data field contains the error number.
Message #
Event ID 3221230689 — The Windows Process Activation Service (WAS) encountered an error while handling key generation.
Description
The Windows Process Activation Service (WAS) encountered an error while handling key generation. This will prevent WAS from starting corrently. The data field contains the error number.