mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-22 13:53:39 +00:00
new build 4/19/2019 8:31 AM
This commit is contained in:
Brian Lich
@ -13,7 +13,7 @@ manager: dansimp
|
||||
ms.collection: M365-security-compliance
|
||||
ms.topic: article
|
||||
audience: ITPro
|
||||
ms.date: 04/18/2019
|
||||
ms.date: 04/19/2019
|
||||
---
|
||||
|
||||
|
||||
@ -1590,7 +1590,7 @@ The following fields are available:
|
||||
|
||||
### Census.App
|
||||
|
||||
Provides information on IE and Census versions running on the device
|
||||
This event sends version data about the Apps running on this device, to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -1608,13 +1608,13 @@ The following fields are available:
|
||||
|
||||
### Census.Azure
|
||||
|
||||
No content is currently available.
|
||||
This event returns data from Microsoft-internal Azure server machines (only from Microsoft-internal machines with Server SKUs). All other machines (those outside Microsoft and/or machines that are not part of the “Azure fleet”) return empty data sets.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **CloudCoreBuildEx** No content is currently available.
|
||||
- **CloudCoreSupportBuildEx** No content is currently available.
|
||||
- **NodeID** No content is currently available.
|
||||
- **CloudCoreBuildEx** The Azure CloudCore build number.
|
||||
- **CloudCoreSupportBuildEx** The Azure CloudCore support build number.
|
||||
- **NodeID** The node identifier on the device that indicates whether the device is part of the Azure fleet.
|
||||
|
||||
|
||||
### Census.Battery
|
||||
@ -1865,7 +1865,7 @@ The following fields are available:
|
||||
|
||||
### Census.Processor
|
||||
|
||||
Provides information on several important data points about Processor settings
|
||||
This event sends data about the processor to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
@ -2136,7 +2136,6 @@ The following fields are available:
|
||||
- **ext_device** Describes the device-related fields. See [Common Data Extensions.device](#common-data-extensionsdevice).
|
||||
- **ext_mscv** Describes the correlation vector-related fields. See [Common Data Extensions.mscv](#common-data-extensionsmscv).
|
||||
- **ext_os** Describes the operating system properties that would be populated by the client. See [Common Data Extensions.os](#common-data-extensionsos).
|
||||
- **ext_receipts** Describes the fields related to time as provided by the client for debugging purposes. See [Common Data Extensions.receipts](#common-data-extensionsreceipts).
|
||||
- **ext_sdk** Describes the fields related to a platform library required for a specific SDK. See [Common Data Extensions.sdk](#common-data-extensionssdk).
|
||||
- **ext_user** Describes the fields related to a user. See [Common Data Extensions.user](#common-data-extensionsuser).
|
||||
- **ext_utc** Describes the fields that might be populated by a logging library on Windows. See [Common Data Extensions.utc](#common-data-extensionsutc).
|
||||
@ -2169,18 +2168,6 @@ The following fields are available:
|
||||
- **ver** Represents the major and minor version of the extension.
|
||||
|
||||
|
||||
### Common Data Extensions.receipts
|
||||
|
||||
Represents various time information as provided by the client and helps for debugging purposes.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **flags** No content is currently available.
|
||||
- **originalName** No content is currently available.
|
||||
- **originalTime** The original event time.
|
||||
- **uploadTime** The time the event was uploaded.
|
||||
|
||||
|
||||
### Common Data Extensions.sdk
|
||||
|
||||
Used by platform specific libraries to record fields that are required for a specific SDK.
|
||||
@ -2191,7 +2178,7 @@ The following fields are available:
|
||||
- **installId** An ID that's created during the initialization of the SDK for the first time.
|
||||
- **libVer** The SDK version.
|
||||
- **seq** An ID that is incremented for each event.
|
||||
- **ver** No content is currently available.
|
||||
- **ver** The version of the logging SDK.
|
||||
|
||||
|
||||
### Common Data Extensions.user
|
||||
@ -2222,7 +2209,7 @@ The following fields are available:
|
||||
- **mon** Combined monitor and event sequence numbers in the format: monitor sequence : event sequence
|
||||
- **op** Represents the ETW Op Code.
|
||||
- **pgName** The short form of the provider group name associated with the event.
|
||||
- **popSample** No content is currently available.
|
||||
- **popSample** Represents the effective sample rate for this event at the time it was generated by a client.
|
||||
- **providerGuid** The ETW provider ID associated with the provider name.
|
||||
- **raId** Represents the ETW Related ActivityId. Logged via TraceLogging or directly via ETW.
|
||||
- **seq** Represents the sequence field used to track absolute order of uploaded events. It is an incrementing identifier for each event added to the upload queue. The Sequence helps track how many events were fired and how many events were uploaded and enables identification of data lost during upload and de-duplication of events on the ingress server.
|
||||
@ -2408,7 +2395,7 @@ This event sends data about boot IDs for which a normal clean shutdown was not o
|
||||
The following fields are available:
|
||||
|
||||
- **AbnormalShutdownBootId** BootId of the abnormal shutdown being reported by this event.
|
||||
- **AbsCausedbyAutoChk** No content is currently available.
|
||||
- **AbsCausedbyAutoChk** This flag is set when AutoCheck forces a device restart to indicate that the shutdown was not an abnormal shutdown.
|
||||
- **AcDcStateAtLastShutdown** Identifies if the device was on battery or plugged in.
|
||||
- **BatteryLevelAtLastShutdown** The last recorded battery level.
|
||||
- **BatteryPercentageAtLastShutdown** The battery percentage at the last shutdown.
|
||||
@ -2423,7 +2410,7 @@ The following fields are available:
|
||||
- **FirmwareType** ID of the FirmwareType as enumerated in DimFirmwareType.
|
||||
- **HardwareWatchdogTimerGeneratedLastReset** Indicates whether the hardware watchdog timer caused the last reset.
|
||||
- **HardwareWatchdogTimerPresent** Indicates whether hardware watchdog timer was present or not.
|
||||
- **InvalidBootStat** No content is currently available.
|
||||
- **InvalidBootStat** This is a sanity check flag that ensures the validity of the bootstat file.
|
||||
- **LastBugCheckBootId** bootId of the last captured crash.
|
||||
- **LastBugCheckCode** Code that indicates the type of error.
|
||||
- **LastBugCheckContextFlags** Additional crash dump settings.
|
||||
@ -7472,13 +7459,13 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.Update.Orchestrator.UniversalOrchestratorInvalidSignature
|
||||
|
||||
No content is currently available.
|
||||
This event is sent when an updater has attempted to register a binary that is not signed by Microsoft.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **updaterCmdLine** No content is currently available.
|
||||
- **updaterId** No content is currently available.
|
||||
- **wuDeviceid** No content is currently available.
|
||||
- **updaterCmdLine** The callback executable for the updater.
|
||||
- **updaterId** The ID of the updater.
|
||||
- **wuDeviceid** Unique device ID used by Windows Update.
|
||||
|
||||
|
||||
### Microsoft.Windows.Update.Orchestrator.UnstickUpdate
|
||||
@ -7506,14 +7493,14 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.Update.Orchestrator.UpdaterCallbackFailed
|
||||
|
||||
No content is currently available.
|
||||
This event is sent when an updater failed to execute the registered callback.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **updaterArgument** No content is currently available.
|
||||
- **updaterCmdLine** No content is currently available.
|
||||
- **updaterId** No content is currently available.
|
||||
- **wuDeviceid** No content is currently available.
|
||||
- **updaterArgument** The argument to pass to the updater callback.
|
||||
- **updaterCmdLine** The callback executable for the updater.
|
||||
- **updaterId** The ID of the updater.
|
||||
- **wuDeviceid** Unique device ID used by Windows Update.
|
||||
|
||||
|
||||
### Microsoft.Windows.Update.Orchestrator.UpdateRebootRequired
|
||||
@ -7533,13 +7520,13 @@ The following fields are available:
|
||||
|
||||
### Microsoft.Windows.Update.Orchestrator.UpdaterMalformedData
|
||||
|
||||
No content is currently available.
|
||||
This event is sent when a registered updater has missing or corrupted information, to help keep Windows up to date.
|
||||
|
||||
The following fields are available:
|
||||
|
||||
- **malformedRegValue** No content is currently available.
|
||||
- **updaterId** No content is currently available.
|
||||
- **wuDeviceid** No content is currently available.
|
||||
- **malformedRegValue** The registry value that contains the malformed or missing entry.
|
||||
- **updaterId** The ID of the updater.
|
||||
- **wuDeviceid** Unique device ID used by Windows Update.
|
||||
|
||||
|
||||
### Microsoft.Windows.Update.Orchestrator.updateSettingsFlushFailed
|
||||
|
||||
Reference in New Issue
Block a user