Documentation forServer & Application Monitor
Monitoring your applications and environment is a key capability of Hybrid Cloud Observability and is also available in a standalone module, Server & Application Monitor (SAM). Hybrid Cloud Observability and SAM are built on the self-hosted SolarWinds Platform.

Event IDs

The matrix below outlines and defines Microsoft event IDs to help aid in troubleshooting:

Event ID Source Log Severity Message

2281

Microsoft-Windows-IIS-WMSVC

Application

Warning

Worker process failed to initialize communication with the World Wide Web Publishing Service and therefore could not be started

2297

Microsoft-Windows-IIS-W3SVC-WP

Application

Warning

Worker process for application pool encountered an error while trying to read global module configuration

5039

Microsoft-Windows-WAS

System

Warning

Worker process serving an application pool reported a failure

5015

Microsoft-Windows-WAS

System

Warning

Worker process serving application pool was orphaned

5127

Microsoft-Windows-WAS

System

Warning

Worker process serving the application pool is no longer trusted by Windows Process Activation Service (WAS)

1173

Microsoft-Windows-IIS-W3SVC

System

Error

World Wide Web Publishing Service did not initialize the HTTP driver and was unable start

1026

Microsoft-Windows-IIS-W3SVC

System

Warning

World Wide Web Publishing Service encountered an error when it tried to secure the handle of the application pool

1135, 1134

Microsoft-Windows-IIS-WMSVC

System

Warning

World Wide Web Publishing Service failed to configure the centralized World Wide Web Consortium (W3C) logging properties

1020

Microsoft-Windows-IIS-WMSVC

System

Warning

World Wide Web Publishing Service failed to configure the HTTP.SYS control channel property

1062

Microsoft-Windows-IIS-WMSVC

System

Warning

World Wide Web Publishing service failed to configure the logging properties for the HTTP control channel

1126

Microsoft-Windows-IIS-W3SVC

System

Warning

World Wide Web Publishing Service failed to copy a change notification for processing

1175

Microsoft-Windows-IIS-W3SVC

System

Warning

World Wide Web Publishing Service failed to enable end point sharing for the HTTP control channel

1071, 1073

Microsoft-Windows-IIS-W3SVC

System

Warning

World Wide Web Publishing Service failed to enable global bandwidth throttling

1087

Microsoft-Windows-IIS-W3SVC

System

Warning

World Wide Web Publishing Service failed to properly configure the application pool queue length

1086

Microsoft-Windows-IIS-W3SVC

System

Warning

World Wide Web Publishing Service failed to properly configure the load balancer capabilities on application pool

5067

Microsoft-Windows-WAS

System

Warning

World Wide Web Publishing Service property failed range validation

1037

Microsoft-Windows-IIS-W3SVC

System

Warning

HTTP control channel for the World Wide Web Publishing Service did not open

2208

Microsoft-Windows-IIS-WMSVC

Application

Warning

HTTP Server could not create a client connection object for user

2206

Microsoft-Windows-IIS-WMSVC

Application

Warning

HTTP Server could not create the main connection socket

2201

Microsoft-Windows-IIS-WMSVC

Application

Warning

HTTP Server could not initialize its security

2203

Microsoft-Windows-IIS-WMSVC

Application

Warning

HTTP Server could not initialize the socket library

2204

Microsoft-Windows-IIS-WMSVC

Application

Warning

HTTP Server was unable to initialize because of a shortage of available memory

2274, 2268, 2220, 2219, 2214

Microsoft-Windows-IIS-WMSVC

Application

Warning

ISAPI application error detected

5088, 5061, 5060

Microsoft-Windows-WAS

System

Warning

Job object associated with the application pool encountered an error

2227

Microsoft-Windows-IIS-WMSVC

Application

Warning

The server was unable to acquire a license for an SSL connection

2233

Microsoft-Windows-IIS-WMSVC

Application

Warning

The server was unable to allocate a buffer to read a file

2226, 2230, 2231, 2232

Microsoft-Windows-IIS-WMSVC

Application

Warning

The server was unable to read a file

5174, 5179, 5180

Microsoft-Windows-WAS

System

Warning

Windows Process Activation Service (WAS) detected invalid configuration data

5085

Microsoft-Windows-WAS

System

Warning

Windows Process Activation Service (WAS) did not apply configuration changes to application pool

5054, 5091

Microsoft-Windows-WAS

System

Error

Windows Process Activation Service (WAS) did not run the automatic shutdown executable for application pool

5063

Microsoft-Windows-WAS

System

Warning

Windows Process Activation Service (WAS) encountered a failure requesting IIS configuration store change notifications

5058

Microsoft-Windows-WAS

System

Warning

Windows Process Activation Service (WAS) encountered a failure while setting the affinity mask of an application pool

5066

Microsoft-Windows-WAS

System

Error

Windows Process Activation Service (WAS) encountered an error attempting to configure centralized logging

5153

Microsoft-Windows-WAS

System

Warning

Windows Process Activation Service (WAS) encountered an error attempting to look up the built-in IIS_IUSRS group

5172, 5173

Microsoft-Windows-WAS

System

Warning

Windows Process Activation Service (WAS) encountered an error trying to read configuration

5014

Microsoft-Windows-WAS

System

Warning

Windows Process Activation Service (WAS) encountered an internal error while managing a worker process

5101

Microsoft-Windows-WAS

System

Error

Windows Process Activation Service (WAS) failed to create application pool

5070, 5093

Microsoft-Windows-WAS

System

Warning

Windows Process Activation Service (WAS) failed to issue recycle request to application pool

5005

Microsoft-Windows-WAS

System

Error

Windows Process Activation Service (WAS) is stopping because it encountered an error

5053

Microsoft-Windows-WAS

System

Warning

Windows Process Activation Service (WAS) received a change notification but was unable to process it correctly

2296

Microsoft-Windows-IIS-W3SVC-WP

Application

Warning

Module has an invalid precondition

2295

Microsoft-Windows-IIS-W3SVC-WP

Application

Warning

Module registration error detected (failed to find RegisterModule entry point)

2293

Microsoft-Windows-IIS-WMSVC

Application

Warning

Module registration error detected (module returned an error during registration)

1133

Microsoft-Windows-IIS-W3SVC

System

Warning

Only one type of logging can be enabled at a time

2261

Microsoft-Windows-IIS-WMSVC

Application

Warning

SF_NOTIFY_READ_RAW_DATA filter notification is not supported in IIS

5036

Microsoft-Windows-WAS

System

Error

The configuration manager for Windows Process Activation Service (WAS) did not initialize

2264

Microsoft-Windows-IIS-WMSVC

Application

Warning

The directory specified for caching compressed content is invalid

2298

Microsoft-Windows-IIS-W3SVC-WP

Application

Warning

The Global Modules list is empty

2218

Microsoft-Windows-IIS-WMSVC

Application

Warning

The HTTP server encountered an error processing the server-side include file

2258

Microsoft-Windows-IIS-WMSVC

Application

Warning

The server failed to close client connections to URLs during shutdown

5152

Microsoft-Windows-WAS

System

Warning

Application pool has an IdleTimeout equal to or greater than the PeriodicRestart time

5010, 5011, 5012, 5013

Microsoft-Windows-WAS

System

Warning

Application pool worker process is unresponsive

5009

Microsoft-Windows-WAS

System

Warning

Application pool worker process terminated unexpectedly

2216

Microsoft-Windows-IIS-WMSVC

Application

Warning

A script has not responded within the configured time-out period

2221

Microsoft-Windows-IIS-WMSVC

Application

Warning

A server-side-include file has included itself, or the maximum depth of server-side include files has been exceeded

2222

Microsoft-Windows-IIS-W3SVC-WP

Application

Warning

An attempt was made to load an ISAPI filter on a server instance, but because it requires the SF_NOTIFY_READ_RAW_DATA filter notification, it must be loaded as a global filter

500, 499, 23, 22, 21, 20, 19, 18, 17, 16, 9, 8, 7, 6, 5

Active Server Pages

Application

Warning

ASP application error occurred

5030

Microsoft-Windows-WAS

System

Error

Windows Process Activation Service (WAS) terminated unexpectedly, and the system was not configured to restart it.

2279, 2278, 2277

Microsoft-Windows-IIS-W3SVC-WP

Application

Warning

Worker process encountered an error during initialization

1005

Microsoft-Windows-IIS-W3SVC

The World Wide Web Publishing Service (WWW Service) is stopping because it encountered an error. The data field contains the error number

8001

Microsoft-Windows-IIS-WMSVC

The Web Management Service was stopped because it did not respond