How can I get a list of every possible Windows Event ID for specific roles?

Question

Hello,

I need to obtain a comprehensive list of every possible Windows Event ID and its associated description. I am specifically interested in the Event IDs related to the following roles in Event Viewer for alerting purposes:

• Hyper-V
• Hyper-V replication
• SQL
• IIS

Does anyone have any recommendations for websites or blogs where I can find all the Windows Event IDs related to the above roles in one central location?

Thank you in advance for your assistance.

Answer 1

Hi,

Sure, I can provide some information based on the search results I found:

Hyper-V:

• Microsoft’s official documentation provides an overview of the different Windows event log channels that Hyper-V uses.
• Event IDs 19050, 32022, 32032, 32056, 32315, 32546, and 33680 are logged when Hyper-V replication is in progress.

Hyper-V Replication:

• Event IDs 19050, 32022, 32032, 32056, 32315, 32546, and 33680 are logged when Hyper-V replication is in progress.

SQL:

• The Windows Security Log Encyclopedia provides a list of events that you should monitor in your environment.
• You can also list every Event ID available for all providers on your system using the command: Get-WinEvent -ListProvider * -Erroraction Silentlycontinue | Select Name -ExpandProperty Events | Format-Table Name, ID, Description.

IIS:

• IIS generates events in Event Viewer so that you can track the performance of IIS. IIS events are logged in the Application log.
• This site provides a list of Events and Errors for each IIS Managed Entity.

Please note that the exact Event IDs can vary based on the version of Windows Server and the specific configurations of your system. It’s always a good idea to refer to the official Microsoft documentation or the specific software’s documentation for the most accurate and up-to-date information.