Microsoft-Windows-WinHttp

62 events across 2 channels

Event IDTitleChannel
1Operational
2Operational
4Operational
9%2(%1) API called.Diagnostic
10%2(%1) API returned successfully.Diagnostic
11%2(%1) API failed with an error = %3.Diagnostic
12%2(%1) API pending completion.Diagnostic
13%2(%1) API completed.Diagnostic
14%2(%1) API completed with an error = %3.Diagnostic
100%1: WinHttpSetCredentials Details: Target (%2) Schemes (%3) UserName (%4) …Diagnostic
801Client begins attempts to locate the WPAD configuration file: ConnectionName=.Diagnostic
802Begin search for configuration file using DHCP: Interface=.Diagnostic
803WPAD configuration file found using DHCP: Interface=.Diagnostic
804Search for WPAD configuration file using DHCP failed: Interface=.Diagnostic
805Begin search for configuration file using DNS: DetectFlags=.Diagnostic
806WPAD configuration file found using DNS: ConfigurationURL=.Diagnostic
807Search for WPAD configuration file using DNS failed: DetectFlags=.Diagnostic
808Search for WPAD configruation file failed: Error=.Diagnostic
809Begin downloading the configuration file from the configuration URL: …Diagnostic
810Client successfully downloaded the configuration file from the configuration …Diagnostic
811Downloading the configuration file from the configuration URL failed: …Diagnostic
812The downloaded configuration file could not be used: ConfigurationURL=.Diagnostic
813Searching for Proxy Information for the URL: URL=.Diagnostic
814Client has successfully retrieved proxy data for accessing a specified resource: …Diagnostic
815Error locating proxy information for the URL: URL=.Diagnostic
816Blocking autoproxy determination startedDiagnostic
817Blocking autoproxy determination stoppedDiagnostic
818WinHTTP Activity Transfer EventDiagnostic
819AutoProxy SWPAD Decision NumConnectionsDiagnostic
820Autoproxy host IP lookup startedDiagnostic
821Autoproxy host IP lookup stoppedDiagnostic
822Autoproxy SWPAD lookup startedDiagnostic
823Autoproxy SWPAD lookup stoppedDiagnostic
824Autoproxy Detection with SWPAD ON startedDiagnostic
825Autoproxy Detection with SWPAD ON stoppedDiagnostic
826Autoproxy Detection with SWPAD UNKNOWN startedDiagnostic
827Autoproxy Detection with SWPAD UNKNOWN stoppedDiagnostic
828Autoproxy Script Download StartedDiagnostic
829Autoproxy Script Download StoppedDiagnostic
834Autoproxy full scenario startedDiagnostic
835Autoproxy full scenario stoppedDiagnostic
1051Diagnostic
1052Diagnostic
1053The WinHttp TLS handshake failed with version mismatch errorOperational
12501The WinHTTP Web Proxy Auto-Discovery Service detected an internal data …Operational
12503The WinHTTP Web Proxy Auto-Discovery Service has been idle for %1 minutes, it …Operational
12506The WinHTTP Web Proxy Auto-Discovery Service encountered a system error from %1: …Operational
12507The WinHTTP Web Proxy Auto-Discovery Service failed to allocate a critical …Operational
12509The WinHTTP Web Proxy Auto-Discovery Service detected a non- local RPC request …Operational
12511The WinHTTP Web Proxy Auto-Discovery Service failed to abort all pending …Operational
12512The WinHTTP Web Proxy Auto-Discovery Service failed parameter validation of a …Operational
12513The WinHTTP Web Proxy Auto-Discovery Service is shutting down and not accepting …Operational
12514The WinHTTP Web Proxy Auto-Discovery Service detected an unexpected exception …Operational
12516The WinHTTP Web Proxy Auto-Discovery Service discarded and is re-attempting a …Operational
12517The WinHTTP Web Proxy Auto-Discovery Service suspended operation.Operational
12518The WinHTTP Web Proxy Auto-Discovery Service resumed operation.Operational
58999Diagnostic
59995Canceling %2 Thread Action (Context: %1).Diagnostic
59996Queue %2 Thread Action (Context: %1).Diagnostic
59997Stopping %2 Thread Action (Context: %1).Diagnostic
59998Starting %2 Thread Action (Context: %1).Diagnostic
59999(%1:%2) %4.Diagnostic

Event ID 1 —

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

%1

Fields

NameDescription
param1

Event ID 2 —

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

%1

Fields

NameDescription
param1

Event ID 4 —

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

%1

Fields

NameDescription
loadunloadinfo

Event ID 9 — %2(%1) API called.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

%2(%1) API called.

Fields

NameDescription
ApiHandle
Api

Event ID 10 — %2(%1) API returned successfully.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

%2(%1) API returned successfully.

Fields

NameDescription
ApiHandle
Api
Result

Event ID 11 — %2(%1) API failed with an error = %3.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

%2(%1) API failed with an error = %3.

Fields

NameDescription
ApiHandle
Api
Result

Event ID 12 — %2(%1) API pending completion.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

%2(%1) API pending completion.

Fields

NameDescription
ApiHandle
Api

Event ID 13 — %2(%1) API completed.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

%2(%1) API completed.

Fields

NameDescription
ApiHandle
Api
Result

Event ID 14 — %2(%1) API completed with an error = %3.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

%2(%1) API completed with an error = %3.

Fields

NameDescription
ApiHandle
Api
Result

Event ID 100 — %1: WinHttpSetCredentials Details: Target (%2) Schemes (%3) UserName (%4) Password (%5).

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

%1: WinHttpSetCredentials Details: Target (%2) Schemes (%3) UserName (%4) Password (%5)

Fields

NameDescription
hRequest
AuthTargets
AuthScheme
UserName
Password

Event ID 801 — Client begins attempts to locate the WPAD configuration file: ConnectionName=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Client begins attempts to locate the WPAD configuration file: ConnectionName=%2, DetectFlags=%3

Fields

NameDescription
_ConnectionNameLength
ConnectionName
DetectFlags

Event ID 802 — Begin search for configuration file using DHCP: Interface=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Begin search for configuration file using DHCP: Interface=%2

Fields

NameDescription
_InterfaceLength
Interface

Event ID 803 — WPAD configuration file found using DHCP: Interface=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

WPAD configuration file found using DHCP: Interface=%2, ConfigurationURL=%4

Fields

NameDescription
_InterfaceLength
Interface
_ConfigurationURLLength
ConfigurationURL

Event ID 804 — Search for WPAD configuration file using DHCP failed: Interface=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Search for WPAD configuration file using DHCP failed: Interface=%2, ConfigurationURL=%4, Error=%5

Fields

NameDescription
_InterfaceLength
Interface
_ConfigurationURLLength
ConfigurationURL
Error

Event ID 805 — Begin search for configuration file using DNS: DetectFlags=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Begin search for configuration file using DNS: DetectFlags=%1

Fields

NameDescription
DetectFlags

Event ID 806 — WPAD configuration file found using DNS: ConfigurationURL=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

WPAD configuration file found using DNS: ConfigurationURL=%2, DetectFlags=%3

Fields

NameDescription
_ConfigurationURLLength
ConfigurationURL
DetectFlags

Event ID 807 — Search for WPAD configuration file using DNS failed: DetectFlags=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Search for WPAD configuration file using DNS failed: DetectFlags=%1, Error=%2

Fields

NameDescription
DetectFlags
Error

Event ID 808 — Search for WPAD configruation file failed: Error=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Search for WPAD configruation file failed: Error=%1

Fields

NameDescription
Error

Event ID 809 — Begin downloading the configuration file from the configuration URL: ConfigurationURL=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Begin downloading the configuration file from the configuration URL: ConfigurationURL=%2

Fields

NameDescription
_ConfigurationURLLength
ConfigurationURL

Event ID 810 — Client successfully downloaded the configuration file from the configuration URL: ConfigurationURL=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Client successfully downloaded the configuration file from the configuration URL: ConfigurationURL=%2

Fields

NameDescription
_ConfigurationURLLength
ConfigurationURL

Event ID 811 — Downloading the configuration file from the configuration URL failed: ConfigurationURL=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Downloading the configuration file from the configuration URL failed: ConfigurationURL=%2, Error=%3

Fields

NameDescription
_ConfigurationURLLength
ConfigurationURL
Error

Event ID 812 — The downloaded configuration file could not be used: ConfigurationURL=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

The downloaded configuration file could not be used: ConfigurationURL=%2, MIMEType=%4, Error=%5

Fields

NameDescription
_ConfigurationURLLength
ConfigurationURL
_MIMETypeLength
MIMEType
Error

Event ID 813 — Searching for Proxy Information for the URL: URL=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Searching for Proxy Information for the URL: URL=%2

Fields

NameDescription
_URLLength
URL

Event ID 814 — Client has successfully retrieved proxy data for accessing a specified resource: URL=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Client has successfully retrieved proxy data for accessing a specified resource: URL=%2, ProxyString=%4

Fields

NameDescription
_URLLength
URL
_ProxyStringLength
ProxyString

Event ID 815 — Error locating proxy information for the URL: URL=.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Error locating proxy information for the URL: URL=%2, Error=%3

Fields

NameDescription
_URLLength
URL
Error

Event ID 816 — Blocking autoproxy determination started

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Blocking autoproxy determination started

Event ID 817 — Blocking autoproxy determination stopped

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Blocking autoproxy determination stopped

Event ID 818 — WinHTTP Activity Transfer Event

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

WinHTTP Activity Transfer Event

Event ID 819 — AutoProxy SWPAD Decision NumConnections

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

AutoProxy SWPAD Decision (%1) NumConnections (%2)

Fields

NameDescription
WPADNetworkDecision
NetworkCount

Event ID 820 — Autoproxy host IP lookup started

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy host IP lookup started

Event ID 821 — Autoproxy host IP lookup stopped

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy host IP lookup stopped

Event ID 822 — Autoproxy SWPAD lookup started

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy SWPAD lookup started

Event ID 823 — Autoproxy SWPAD lookup stopped

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy SWPAD lookup stopped

Event ID 824 — Autoproxy Detection with SWPAD ON started

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy Detection with SWPAD ON started

Event ID 825 — Autoproxy Detection with SWPAD ON stopped

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy Detection with SWPAD ON stopped

Event ID 826 — Autoproxy Detection with SWPAD UNKNOWN started

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy Detection with SWPAD UNKNOWN started

Event ID 827 — Autoproxy Detection with SWPAD UNKNOWN stopped

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy Detection with SWPAD UNKNOWN stopped

Event ID 828 — Autoproxy Script Download Started

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy Script Download Started

Event ID 829 — Autoproxy Script Download Stopped

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy Script Download Stopped

Event ID 834 — Autoproxy full scenario started

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy full scenario started

Fields

NameDescription
UniqueId

Event ID 835 — Autoproxy full scenario stopped

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Autoproxy full scenario stopped

Fields

NameDescription
UniqueId

Event ID 1051 —

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Fields

NameDescription
Flags
AddressName

Event ID 1052 —

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Fields

NameDescription
error
Flags
AddressName

Event ID 1053 — The WinHttp TLS handshake failed with version mismatch error

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHttp TLS handshake failed with version mismatch error

Fields

NameDescription
Host
ModulePath
ModuleName
ProcessPath
ProcessName

Event ID 12501 — The WinHTTP Web Proxy Auto-Discovery Service detected an internal data corruption.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service detected an internal data corruption.

Event ID 12503 — The WinHTTP Web Proxy Auto-Discovery Service has been idle for %1 minutes, it will be shut down.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service has been idle for %1 minutes, it will be shut down.

Fields

NameDescription
IdleTime

Event ID 12506 — The WinHTTP Web Proxy Auto-Discovery Service encountered a system error from %1: (Error Code = %3) %2.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service encountered a system error from %1: (Error Code = %3) %2

Fields

NameDescription
Functionname
Errortext
Errorcode

Event ID 12507 — The WinHTTP Web Proxy Auto-Discovery Service failed to allocate a critical resource.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service failed to allocate a critical resource. The system may be running low on physical memory.

Event ID 12509 — The WinHTTP Web Proxy Auto-Discovery Service detected a non- local RPC request (Transport Type = %1); Access Denied.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service detected a non- local RPC request (Transport Type = %1); Access Denied. There may have been an rogue attempt to gain access to the service through the network.

Fields

NameDescription
Transporttype

Event ID 12511 — The WinHTTP Web Proxy Auto-Discovery Service failed to abort all pending requests in %1 seconds.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service failed to abort all pending requests in %1 seconds.  The system WinHTTP Services may have been under stress and slow to respond to cancel requests.

Fields

NameDescription
param1

Event ID 12512 — The WinHTTP Web Proxy Auto-Discovery Service failed parameter validation of a client request.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service failed parameter validation of a client request.  This may be due to an unexpected error from the system WinHTTP Services.

Event ID 12513 — The WinHTTP Web Proxy Auto-Discovery Service is shutting down and not accepting client requests.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service is shutting down and not accepting client requests.

Event ID 12514 — The WinHTTP Web Proxy Auto-Discovery Service detected an unexpected exception from the system WinHTTP Services.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service detected an unexpected exception from the system WinHTTP Services. (Exception Code = %1)

Fields

NameDescription
Exceptioncode

Event ID 12516 — The WinHTTP Web Proxy Auto-Discovery Service discarded and is re-attempting a request after a critical power event.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service discarded and is re-attempting a request after a critical power event.

Event ID 12517 — The WinHTTP Web Proxy Auto-Discovery Service suspended operation.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service suspended operation.

Event ID 12518 — The WinHTTP Web Proxy Auto-Discovery Service resumed operation.

Provider
Microsoft-Windows-WinHttp
Channel
Operational

Message

The WinHTTP Web Proxy Auto-Discovery Service resumed operation.

Event ID 58999 —

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

%1

Fields

NameDescription
Message

Event ID 59995 — Canceling %2 Thread Action (Context: %1).

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Canceling %2 Thread Action (Context: %1)

Fields

NameDescription
Context
EtwQueueActionType

Event ID 59996 — Queue %2 Thread Action (Context: %1).

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Queue %2 Thread Action (Context: %1)

Fields

NameDescription
Context
EtwQueueActionType

Event ID 59997 — Stopping %2 Thread Action (Context: %1).

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Stopping %2 Thread Action (Context: %1)

Fields

NameDescription
Context
EtwQueueActionType

Event ID 59998 — Starting %2 Thread Action (Context: %1).

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

Starting %2 Thread Action (Context: %1)

Fields

NameDescription
Context
EtwQueueActionType

Event ID 59999 — (%1:%2) %4.

Provider
Microsoft-Windows-WinHttp
Channel
Diagnostic

Message

(%1:%2) %4

Fields

NameDescription
File
Line
Length
Message