Required Telemetry Events

Telemetry Name	Usage Description
Microsoft.MDEP.OS. BootCompleted	Indicates the device completed a boot. It reports the OS-provided boot reason, boot time, and system server startup metrics to analyze reboot causes and boot stability.
Microsoft.MDEP.OS. CensusCollected	Indicates periodic device census information was collected. It reports build, hardware, locale, connectivity, and selected configuration attributes to track device inventory and detect OS version changes.
Microsoft.MDEP.OS. ShellCommandExecuted	Indicates a shell command used for telemetry collection timed out or returned a non-success exit code. It reports execution timing and command details to diagnose telemetry data-collection failures.
Microsoft.MDEP.Telemetry. Exception	Indicates a telemetry provider or provider framework encountered a handled exception. The affected service continued running, but a feature or component experienced an error condition.
Microsoft.MDEP.Telemetry. Summary	Indicates a telemetry collection job completed. It reports overall event counts, provider execution results, and charging or network conditions to verify telemetry service operation.
Microsoft.MDEP.Watson. FilepathFetched	Indicates the Watson upload pipeline evaluated available diagnostic files. It reports whether files were pending, submitted, removed, or rejected to diagnose upload pipeline behavior.
Microsoft.MDEP.Watson. ReportCreated	Indicates the Watson upload pipeline created a report package for upload. It reports pending files, invalid paths, readiness, and whether an upload attempt was made to diagnose crash-report processing.
Microsoft.MDEP.Watson. DataUploaded	Indicates data was uploaded to the Watson Data Service. This event is used to verify service operation and diagnose stability issues. It includes identifiers associated with the uploaded data.
Microsoft.MDEP.OS. SecureBootInfo	Indicates secure boot and verified boot state were collected during device startup. It is used to monitor boot integrity and compliance status.
Microsoft.MDEP.OS. FaultEvent	Indicates a system fault record was collected, such as an application not responding (ANR), tombstone, or kernel fault. It is used to diagnose stability and crash issues.
Microsoft.MDEP.OS. BatteryStats. ScreenBrightness	Indicates summarized screen brightness usage was collected from batterystats. It is used to understand display power behavior.
Microsoft.MDEP.OS. BatteryStats.ProcessingStats	Indicates the telemetry parser recorded how many batterystats lines were processed during a collection run. It is used to verify batterystats parsing completed as expected.
Microsoft.MDEP.OS.BatteryStats. Discharge	Indicates summarized battery discharge and power-use metrics were collected from batterystats. It is used to analyze device power consumption and idle behavior.
Microsoft.MDEP.OS.BatteryStats. KernelWakeLock	Indicates kernel wake lock activity was collected from batterystats. It identifies kernel components that kept the device from entering its lowest power state.
Microsoft.MDEP.OS.BatteryStats. Network	Indicates summarized network activity was collected from batterystats. It is used to analyze device power and usage associated with cellular, Wi-Fi, and Bluetooth traffic.
Microsoft.MDEP.OS.BatteryStats. TemperatureVoltage	Indicates summarized battery temperature and voltage readings were collected from batterystats. It is used to monitor battery operating conditions.
Microsoft.MDEP.OS.BatteryStats. WakeLock	Indicates user-mode wake lock activity was collected from batterystats. It identifies applications or processes that kept the device from entering its lowest power state.
Microsoft.MDEP.AndroidSignals	Indicates a periodic set of Android health signals was collected. It reports collection status, the number of signals evaluated, and a serialized summary of the signals for diagnostics.
Microsoft.MDEP.Integrity	Indicates integrity information was collected for installed Microsoft or Azure packages. It reports package version, signature, path, and checksum data to monitor software inventory and detect unexpected changes.
Microsoft.MDEP.Camera.Properties	Indicates camera usage and performance metrics were collected from the native telemetry HAL. It reports camera session activity and timing data to analyze camera behavior.
Microsoft.MDEP.Boottime. Properties	Indicates platform boot-time telemetry was collected during startup. It is used to measure boot performance and verify vendor-reported boot completion.
Microsoft.MDEP.Reset. Properties	Indicates platform and firmware reset-reason data was collected during startup. It is used alongside boot telemetry to analyze reboot causes and diagnose stability issues.
Microsoft.MDEP.UFS.Properties	Indicates diagnostic properties were collected from the device's UFS storage subsystem. It is used to monitor storage health, device configuration, and estimated remaining lifetime.
Microsoft.MDEP.PMIC. Properties	Indicates diagnostic properties were collected from the device power-management subsystem. It is used to monitor hardware health and investigate power-related issues.
Microsoft.MDEP.Usb.Properties	Indicates diagnostic properties were collected from the USB subsystem. It reports connection, power, and link characteristics to investigate USB behavior.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_message_failed	Indicates a settings synchronization message failed during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_message_failed	Indicates a Bluetooth synchronization message failed during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. AUTO_SYNC_message_failed	Indicates an automatic synchronization message failed during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_begin_autosync	Indicates an automatic settings synchronization cycle began between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_notify_autosync_completed	Indicates an automatic settings synchronization cycle completed and listeners were notified between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_update_state	Indicates Bluetooth adapter power state was updated during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_update_name	Indicates the local Bluetooth adapter name was updated during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_update_scan_state	Indicates Bluetooth discovery or scan state was updated during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_request_pair	Indicates a request to pair with a Bluetooth device during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_confirm_pair	Indicates a Bluetooth pairing request was confirmed during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_forget	Indicates a paired Bluetooth device was forgotten during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_connect	Indicates a request to connect to a Bluetooth device during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_disconnect	Indicates a request to disconnect from a Bluetooth device during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_remove_active_device	Indicates a Bluetooth device was removed as the active device for an audio profile during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_update_active_device	Indicates the active Bluetooth device for an audio profile was updated during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_toggle	Indicates the Wi-Fi adapter was toggled on or off during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_start_scan	Indicates a Wi-Fi scan was started during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_add	Indicates a Wi-Fi network was added or saved during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_forget	Indicates a saved Wi-Fi network was forgotten during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_disconnect	Indicates a request to disconnect from the current Wi-Fi network during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_connect	Indicates a request to connect to a Wi-Fi network during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent.WIFI_auto_connect	Indicates the device automatically connected to a known Wi-Fi network during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. Device_config_notify_role_changed	Indicates the device configuration role changed and listeners were notified during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. Device_config_notify_role_changed_failed	Indicates notifying listeners about a device configuration role change failed during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.ProvisioningProviderEvent	Indicates the device provisioning service reported a provisioning result or error for a selected service provider. It is used to diagnose provider setup failures and application installation issues.
Microsoft.MDEP.Common.Diagnostic. Trace.KeyProvisioningTelemetryEvent	Indicates the result of a key provisioning lifecycle. It aggregates status, attempt count, exception information, and identifiers associated with provisioned key algorithms to diagnose provisioning behavior.
Microsoft.MDEP.Common.Diagnostic. Trace.AttestationTelemetryEvent	Indicates the outcome of an attestation request. It is used to diagnose attestation, certificate revocation, and service communication issues by reporting scenario, result codes, and relevant service-response metadata.
Microsoft.MDEP.Common.Health. Point.ServiceProviderEvent	Indicates KioskLauncher detected or handled a service provider crash, recovery, update, restart, or repeated-crash reboot. It is used to diagnose service provider failures and restart behavior.
Microsoft.MDEP.Common.Usage. Scenario.AppStartup	Indicates Device Settings recorded a startup scenario lifecycle milestone. It tracks scenario status and step progression while the app initializes and creates its user interface.
Microsoft.MDEP.PairingState	Indicates the current device pairing state. It reports whether pairing is connected and whether the device is acting as the client or server.
Microsoft.MDEP.PairingService. ConnectResult	Indicates the PairingService reported the result of transitioning into a connected state. It includes the device role, previous pairing state, and the reason for the state change to help diagnose connection flows.
Microsoft.MDEP.PairingService. DisconnectResult	Indicates the PairingService reported the result of transitioning into a disconnected state. It includes the device role, previous pairing state, and the reason for the state change to help diagnose disconnection flows.
Microsoft.MDEP.PairingService. PairingResult	Indicates the PairingService reported the outcome of a pairing attempt. It includes service state, device role, peer discovery, and whether directed pairing was used to help diagnose pairing behavior.
Microsoft.MDEP.PairingService. UnpairingResult	Indicates the PairingService reported the outcome of removing an existing pairing. It includes service state and device role to help diagnose unpairing behavior.
Microsoft.MDEP.PairingService. UncaughtException	Indicates the PairingService encountered an uncaught exception on one of its threads. It is used to diagnose service failures by reporting pairing state, device role, and exception details at the time of the error.
Microsoft.MDEP.MEMORY.Properties	Indicates per-app or per-service memory usage was collected for device health monitoring. It is used to identify high-memory-consumption apps and services by reporting usage, resident memory, swap, thread count, and runtime.
Microsoft.MDEP.Common.Trace. Diagnostic.SecurityLogTelemetryEvent	Indicates a security-related Android security-log record was forwarded for compliance monitoring. It carries serialized system and event data from the underlying security incident for audit and diagnostic use.
Microsoft.MDEP.Common.Usage.CloudAgentEvent	Indicates CloudAgent recorded request metadata, status, errors, or latency for a cloud-service call. This event is used to monitor CloudAgent usage and performance.
Microsoft.MDEP.Common.Usage. NarratorProviderEvent	Indicates Narrator usage or performance was recorded, including activation counts or average TalkBack operation time.
Microsoft.MDEP.Common.Usage. RemoteSpeechEvent	Indicates Remote Speech usage or performance was recorded, including activation counts and synthesize-text or stop-operation latency.
Microsoft.MDEP.Common.Usage. TtsProviderEvent	Indicates text-to-speech usage or voice-model download activity was recorded, including locale selection, offline synthesis usage, and download performance or failures.
Microsoft.MDEP.Common.Usage. MdepUpdateManagerEvent	Indicates MdepUpdateManager recorded a USB-based update workflow event, such as USB detection, user confirmation, install actions, or package validation and installation results.