WinSyslog product Event ID reference

Use this appendix to look up Windows Application Event Log entries generated by WinSyslog. Each Event ID links to its meaning, immediate checks, exact procedures, and escalation evidence.

Scope

This reference covers product service diagnostics emitted by current supported builds. It does not cover Event IDs collected from other Windows applications or IDs chosen by an administrator in the Write to Windows Event Log action.

• WinSyslog Event ID troubleshooting procedures

Event ID index

Event ID	Meaning	Severity	Component
100	The service was installed	Information	Windows service lifecycle
101	The service was removed	Information	Windows service lifecycle
102	The service could not be removed	Error	Windows service lifecycle
103	The service control handler could not be installed	Error	Windows service lifecycle
104	The service initialization process failed	Error	Windows service lifecycle
105	The service was started	Information	Windows service lifecycle
106	The service received an unsupported control request	Error	Windows service lifecycle
108	The service was stopped	Information	Windows service lifecycle
118	Trial mode reminder	Information	Licensing
125	Freeware mode reminder	Information	Licensing
900	Invalid license key rejected	Error	Licensing
901	Blocked license key rejected	Error	Licensing
11000	SETP connection closed by the receiver	Warning	SETP sender
11001	SETP TLS session closed	Warning	SETP sender
11002	SETP delivery delayed in the action cache	Warning	SETP sender
11003	SETP delivery failed	Error	SETP sender
11004	SETP session restored	Information	SETP sender
11005	Configured feature is not licensed	Warning	Licensing
11006	Call Ruleset action could not find its target ruleset	Error	Call Ruleset action
11007	Action configuration: required timer could not be created	Warning	Action configuration
11008	Action configuration: configured action feature is unavailable	Warning	Action configuration
11009	A queued action message could not be delivered	Warning	Action disk queue
11010	ODBC database action: database operation failed	Error	ODBC database action
11011	ODBC database action: database operation failed	Error	ODBC database action
11012	OLE DB action: database operation failed	Error	OLE DB action
11013	OLE DB action: OLE DB operation failed	Error	OLE DB action
11014	Action processing: action initialization failed	Error	Action processing
11015	Microsoft Message Queuing action: Microsoft Message Queuing operation failed	Error	Microsoft Message Queuing action
11016	An SNMP trap variable contains an invalid OID	Warning	Send SNMP Trap action
11017	Forward Syslog action: action initialization failed	Error	Forward Syslog action
11018	A queued Forward Syslog message could not be delivered	Warning	Forward Syslog disk queue
11019	Syslog Queue action has no queue name	Error	Syslog Queue action
11020	Control Windows Service action could not open Service Control Manager	Error	Control Windows Service action
11021	Action processing: configured action feature is unavailable	Warning	Action processing
11022	Action processing: action type is missing from configuration	Error	Action processing
11023	Action processing: invalid action type in configuration	Error	Action processing
11024	Configured action type is not recognized	Error	Rule engine action
11025	Action processing: invalid action type in configuration	Error	Action processing
11026	Configured action failed after its retries	Error	Rule engine action
11027	Configured action raised an unknown exception at its retry limit	Error	Rule engine action
11028	Configured action raised an unknown exception below its retry limit	Error	Rule engine action
11029	ODBC database action: database operation failed	Error	ODBC database action
11030	ODBC database action: database operation failed	Error	ODBC database action
11031	OLE DB action: database operation failed	Error	OLE DB action
11032	OLE DB action: OLE DB operation failed	Error	OLE DB action
11033	Post Process action ignored an unsupported parse type	Error	Post Process action
11034	SETP sender: TLS client initialization failed	Error	SETP sender
11035	SETP sender: SETP session initialization failed	Error	SETP sender
11036	RELP delivery failed and the message was queued	Warning	Send RELP action
11037	Send to Communications Port action could not write a byte	Error	Send to Communications Port action
11038	SNMP trap transmission failed	Error	Send SNMP Trap action
11039	Forward Syslog delivery failed and the message was queued	Warning	Forward Syslog action
11040	Forward Syslog delivery failed without queue protection	Error	Forward Syslog action
11041	Start Program action received an unexpected wait result	Error	Start Program action
11042	Write to File action has an invalid output format	Error	Write to File action
11043	Licensing: connection attempt failed	Error	Licensing
11044	Licensing: licensed client limit exceeded	Error	Licensing
11045	File-based configuration: file-based configuration could not be loaded	Error	File-based configuration
11046	File-based configuration: file-based configuration could not be loaded	Error	File-based configuration
11047	Configuration: invalid host or IP address	Error	Configuration
11048	Network and TLS transport: unknown runtime error	Warning	Network and TLS transport
11049	Network and TLS transport: TLS operation warning	Warning	Network and TLS transport
11050	Network and TLS transport: TLS operation warning	Warning	Network and TLS transport
11051	Network and TLS transport: TLS operation warning	Warning	Network and TLS transport
11052	Network and TLS transport: TLS operation warning	Warning	Network and TLS transport
11053	Network and TLS transport: TLS operation warning	Warning	Network and TLS transport
11054	Network and TLS transport: TLS operation warning	Warning	Network and TLS transport
11055	Network and TLS transport: TLS operation warning	Warning	Network and TLS transport
11056	Network and TLS transport: TLS operation warning	Warning	Network and TLS transport
11057	Network and TLS transport: TLS server initialization failed	Warning	Network and TLS transport
11058	Filter engine: regular expression initialization failed	Error	Filter engine
11059	Monitoring service: service component initialization failed	Error	Monitoring service
11060	MonitorWare Echo service: MonitorWare Echo operation raised an exception	Warning	MonitorWare Echo service
11061	MonitorWare Echo service: MonitorWare Echo operation raised an exception	Error	MonitorWare Echo service
11062	MonitorWare Echo service: MonitorWare Echo operation raised an exception	Error	MonitorWare Echo service
11063	MonitorWare Echo service: MonitorWare Echo operation raised an unknown exception	Error	MonitorWare Echo service
11064	CPU Monitor service: CPU monitor raised an exception	Error	CPU Monitor service
11065	CPU Monitor service: CPU monitor raised an unknown exception	Error	CPU Monitor service
11066	Database Monitor service: database operation failed	Error	Database Monitor service
11067	Database Monitor service: database operation failed	Error	Database Monitor service
11068	Database Monitor service: database monitor ID field warning	Warning	Database Monitor service
11069	Database Monitor service: database operation failed	Error	Database Monitor service
11070	Database Monitor service: database operation failed	Error	Database Monitor service
11071	Disk Space Monitor could not complete a disk-space check	Error	Disk Space Monitor service
11072	DTLS listener: listener could not bind to its configured address	Error	DTLS listener
11073	DTLS listener stopped after an unknown exception	Error	DTLS listener
11074	File Monitor service: file monitoring warning	Warning	File Monitor service
11075	File Monitor service: configured file could not be opened	Error	File Monitor service
11076	File Monitor service: configured file could not be opened	Error	File Monitor service
11077	File Monitor service: file monitoring operation failed	Error	File Monitor service
11078	File Monitor service: file monitoring operation failed	Error	File Monitor service
11079	File Monitor service: configured file could not be opened	Error	File Monitor service
11080	File Monitor service: configured file could not be opened	Error	File Monitor service
11081	File Monitor service: file monitoring operation failed	Error	File Monitor service
11082	FTP Probe service: probe operation raised an exception	Error	FTP Probe service
11083	FTP Probe service: probe operation raised an unknown exception	Error	FTP Probe service
11084	Heartbeat service: heartbeat operation raised an exception	Error	Heartbeat service
11085	Heartbeat service: heartbeat operation raised an unknown exception	Error	Heartbeat service
11086	HTTP Probe service: probe operation raised an exception	Error	HTTP Probe service
11087	HTTP Probe service: probe operation raised an unknown exception	Error	HTTP Probe service
11088	IMAP Probe service: probe operation raised an exception	Error	IMAP Probe service
11089	IMAP Probe service: probe operation raised an unknown exception	Error	IMAP Probe service
11090	SETP listener stopped after a protocol server error	Error	SETP listener
11091	SETP receiver: SETP operation raised an exception	Warning	SETP receiver
11092	SETP receiver: SETP operation raised an exception	Error	SETP receiver
11093	SETP receiver: SETP operation raised an exception	Error	SETP receiver
11094	SETP receiver: SETP operation raised an unknown exception	Error	SETP receiver
11095	NNTP Probe service: probe operation raised an exception	Error	NNTP Probe service
11096	NNTP Probe service: probe operation raised an unknown exception	Error	NNTP Probe service
11097	Event Log Monitor service: Windows Event Log operation failed	Error	Event Log Monitor service
11098	Event Log Monitor service: Windows Event Log could not be opened	Error	Event Log Monitor service
11099	Event Log Monitor service: unknown runtime error	Error	Event Log Monitor service
11100	A corrupted Windows Event Log record was skipped	Warning	Event Log Monitor service
11101	Event reporter service	Error	Event Log Monitor service
11102	Event Log Monitor service: Windows Event Log record was unreadable	Error	Event Log Monitor service
11103	Event Log Monitor service: Windows Event Log clear target already exists	Error	Event Log Monitor service
11104	Event Log Monitor service: Windows Event Log could not be cleared	Error	Event Log Monitor service
11105	Event Log Monitor service: Windows Event Log clear retry succeeded	Information	Event Log Monitor service
11106	Windows Event Log cleared and saved	Information	Event Log Monitor service
11107	Windows Event Log cleared	Information	Event Log Monitor service
11108	Event Log Monitor service: Windows Event Log operation failed	Error	Event Log Monitor service
11109	Event Log Monitor service: Windows Event Log operation failed	Error	Event Log Monitor service
11110	Event Log Monitor service: licensed Event Log Monitor limit reached	Error	Event Log Monitor service
11111	Windows Service Monitor: Windows Service Monitor raised an exception	Error	Windows Service Monitor
11112	Syslog listener: service component initialization failed	Error	Syslog listener
11113	Syslog listener: service component initialization failed	Error	Syslog listener
11114	Syslog listener: listener could not bind to its configured address	Warning	Syslog listener
11115	Syslog listener: listener could not bind to its configured address	Error	Syslog listener
11116	Passive Syslog listener stopped after an unknown exception	Error	Passive Syslog listener
11117	Ping Probe service stopped after a reported runtime error	Error	Ping Probe service
11118	Ping Probe service stopped after an unknown exception	Error	Ping Probe service
11119	POP3 Probe service: probe operation raised an exception	Error	POP3 Probe service
11120	POP3 Probe service: probe operation raised an unknown exception	Error	POP3 Probe service
11121	RELP listener: listener could not bind to its configured address	Error	RELP listener
11122	RELP listener stopped after an unknown exception	Error	RELP listener
11123	Serial Port Monitor: serial port operation failed	Error	Serial Port Monitor
11124	Serial Port Monitor: serial port operation raised an exception	Error	Serial Port Monitor
11125	Serial Port Monitor: serial port operation raised an unknown exception	Error	Serial Port Monitor
11126	SMTP listener: SMTP listener raised an exception	Warning	SMTP listener
11127	SMTP listener: SMTP listener raised an exception	Error	SMTP listener
11128	SMTP listener: SMTP listener raised an exception	Error	SMTP listener
11129	SMTP listener: SMTP listener raised an unknown exception	Error	SMTP listener
11130	SMTP Probe service: probe operation raised an exception	Error	SMTP Probe service
11131	SMTP Probe service: probe operation raised an unknown exception	Error	SMTP Probe service
11132	SNMP Monitor service: SNMP operation raised an exception	Warning	SNMP Monitor service
11133	SNMP Monitor service: SNMP operation raised an exception	Error	SNMP Monitor service
11134	SNMP Monitor service: SNMP operation raised an unknown exception	Error	SNMP Monitor service
11135	SNMP Monitor service: SNMP operation raised an exception	Error	SNMP Monitor service
11136	SNMP Monitor service: SNMP operation raised an unknown exception	Error	SNMP Monitor service
11137	SNMP Trap Receiver: SNMP operation raised an exception	Warning	SNMP Trap Receiver
11138	SNMP Trap Receiver: SNMP operation raised an exception	Error	SNMP Trap Receiver
11139	SNMP Trap Receiver: SNMP operation raised an exception	Error	SNMP Trap Receiver
11140	SNMP Trap Receiver: SNMP operation raised an unknown exception	Error	SNMP Trap Receiver
11141	Syslog listener: BEEP listener option could not be applied	Error	Syslog listener
11142	Syslog listener: BEEP listener initialization failed	Error	Syslog listener
11143	Syslog listener: BEEP listener port could not be applied	Error	Syslog listener
11144	Syslog listener: listener could not bind to its configured address	Warning	Syslog listener
11145	Syslog listener: listener could not bind to its configured address	Error	Syslog listener
11146	Syslog listener stopped after an unknown exception	Error	Syslog listener
11147	Event Log Monitor V2 service: required timer could not be created	Warning	Event Log Monitor V2 service
11148	Event Log Monitor could not create its saved bookmark	Error	Event Log Monitor V2 service
11149	Event Log Monitor V2 service: general runtime error	Warning	Event Log Monitor V2 service
11150	Event Log Monitor V2 service: Windows Event Log operation failed	Error	Event Log Monitor V2 service
11151	Event Log Monitor V2 service: Windows Event Log operation failed	Error	Event Log Monitor V2 service
11152	A queued event has an unsupported information-unit type	Error	Event reconstruction
11153	Existing archive file was renamed before log rotation	Warning	Log rotation
11154	Log rotation was deferred because an archive destination could not be renamed	Warning	Log rotation
11155	Cross-volume archive copy succeeded but source cleanup failed	Warning	Log rotation
11156	Rotated log could not be moved to its archive destination	Warning	Log rotation
11157	Existing archive could not be renamed to prevent overwrite	Warning	Log rotation
11158	Empty log-rotation queue file could not be deleted	Warning	Log rotation queue
11159	Corrupt log-rotation queue file could not be quarantined	Warning	Log rotation queue
11160	Corrupt log-rotation queue file was quarantined	Warning	Log rotation queue
11161	Configuration reload kept the existing log-rotation workers	Warning	Log rotation
11162	Log-rotation jobs cannot be persisted because the data directory is unset	Warning	Log rotation queue
11163	Persisted log-rotation queue file could not be read	Warning	Log rotation queue
11164	Email action: invalid SMTP recipient address	Error	Email action
11165	Email action: SMTP recipient address is missing	Error	Email action
11166	OLE DB action: OLE DB operation failed	Error	OLE DB action
11167	Runtime resource management: memory reserve is in use	Warning	Runtime resource management
11168	Runtime resource management: memory allocation failed	Error	Runtime resource management
11169	Individual Ping Probe stopped after an unknown exception	Error	Ping Probe
11170	Queue worker received an unexpected wake-up	Error	Main message queue
11171	Queue manager: unknown runtime error	Error	Queue manager
11172	Queue manager: unknown runtime error	Error	Queue manager
11173	An event failed while the main queue applied its rules	Error	Main message queue
11174	Queue manager: queue capacity condition	Information	Queue manager
11175	Queue manager: queue capacity condition	Warning	Queue manager
11177	Queue manager: queue capacity condition	Error	Queue manager
11178	Queue manager: disk queue cache operation failed	Error	Queue manager
11179	Queue manager: disk queue cache operation failed	Error	Queue manager
11180	Queue manager: disk queue cache operation failed	Error	Queue manager
11181	Queue manager: disk queue cache operation failed	Error	Queue manager
11182	Queue manager: disk queue cache operation failed	Error	Queue manager
11183	Configuration reload was skipped because the log-rotation scheduler did not stop	Warning	Configuration reload
11184	Service configuration: memory reserve could not be allocated	Warning	Service configuration
11185	No product input service is configured	Error	Service configuration
11186	Service configuration: trial period expired	Error	Service configuration
11187	A configured input service type is not recognized	Error	Service configuration
11188	Service configuration: configured service feature is unavailable	Warning	Service configuration
11189	Input service could not find its assigned ruleset	Error	Service configuration
11190	Service configuration: configured feature is unavailable	Warning	Service configuration
11191	Service configuration: log rotation is not licensed	Information	Service configuration
11192	No configured product input service could be started	Error	Service startup
11193	Service configuration: service configuration raised an unknown exception	Warning	Service configuration
11194	Product runtime: message compression failed	Warning	Product runtime
11195	Disk queue: runtime data error	Error	Disk queue
11196	Disk queue: runtime data error	Error	Disk queue
11197	Disk queue: runtime data error	Error	Disk queue
11198	TCP and TLS listener: TCP listener fatal error	Error	TCP and TLS listener
11199	TCP and TLS listener: TLS server initialization failed	Warning	TCP and TLS listener
11200	TCP and TLS listener: TCP listener fatal error	Error	TCP and TLS listener
11201	TCP and TLS listener: TCP listener fatal error	Error	TCP and TLS listener
11202	TCP listener could not assign an accepted socket	Error	TCP and TLS listener
11210	Product runtime: configured advanced feature is unavailable	Error	Product runtime
11212	System exception while compiling an NT Event Log expression	Error	Event Log Monitor service
11213	System exception while compiling an NT Event Log category	Error	Event Log Monitor service
11214	System exception in the queue worker thread	Error	Queue manager
11215	A debug error was forwarded to the Windows Event Log	Warning	Diagnostic forwarding
11216	Control Windows Service action could not open the target service	Error	Control Windows Service action
11217	Control Windows Service action could not start the target service	Error	Control Windows Service action
11218	Control Windows Service action could not stop the target service	Error	Control Windows Service action
11219	Control Windows Service action could not pause the target service	Error	Control Windows Service action
11220	Control Windows Service action could not continue the target service	Error	Control Windows Service action
11221	Target service did not reach the requested state before timeout	Error	Control Windows Service action
11222	Consumed log-rotation queue file could not be deleted	Warning	Log rotation queue