Optional Telemetry Events

Telemetry Name	Usage Description
Microsoft.MDEP.OS.AppUsageStatsCollected. Weekly	Indicates weekly application-usage statistics were collected for a single package when non-zero usage was observed.
Microsoft.MDEP.OS.AppUsageStatsCollected. Weekly.Summary	Indicates the total number of application-usage entries returned for the weekly aggregation window.
Microsoft.MDEP.OS.DeviceStatePolled	Indicates device state was polled during telemetry collection, including whether the active network connection was metered.
Microsoft.MDEP.OS. ProcessHealthStatsCollected	Indicates per-package process health statistics were collected, including starts, crashes, ANRs, CPU time, and foreground time.
Microsoft.MDEP.OS.UidHealthStatsCollected. Activity	Indicates activity-related per-package health statistics were collected for a package with non-zero usage, including CPU time, battery time, and user-activity counts.
Microsoft.MDEP.OS.UidHealthStatsCollected. Bluetooth	Indicates per-package Bluetooth usage statistics were collected, such as traffic, scan activity, time, and attributed power use.
Microsoft.MDEP.OS.UidHealthStatsCollected. Use	Indicates per-package usage statistics were collected across process visibility states and selected device features such as audio, camera, video, vibration, and wake locks.
Microsoft.MDEP.CoreCollector. NewCoreFetched	Indicates crash details or a core dump for an application or service were collected for diagnostic analysis.
Microsoft.MDEP.DropBoxManager.Tombstone	Indicates a tombstone or other crash record was collected from the device for diagnostic upload, including associated process or package metadata.
Microsoft.MDEP.OS.UidHealthStatsCollected. Wifi	Indicates per-package Wi-Fi usage statistics were collected, such as traffic, scans, connection time, and attributed power use.
Microsoft.MDEP.SystemLoading.Pressure	Indicates system pressure metrics were collected from /proc/pressure to measure CPU, memory, or I/O stall conditions.
Microsoft.MDEP.SystemLoading.Processor	Indicates processor load metrics were collected from /proc/stat to measure CPU utilization.
Microsoft.MDEP.Temperature.Status	Indicates device thermal sensor readings were collected, including minimum, average, and maximum temperatures.
Microsoft.MDEP.StorageEvents. AvailableSpace	Indicates storage utilization for the system data partition was collected, including total and available space.
Microsoft.MDEP.OS.SelinuxLogs	Indicates SELinux audit or violation log entries were collected when such entries were detected on the device.
Microsoft.MDEP.Permission.Change	Indicates a monitored permission was added to or removed from a targeted package or service. This event is used to detect changes to sensitive platform permissions.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_message_received	Indicates a Settings synchronization message was received successfully during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_message_akn	Indicates a Settings synchronization message was transmitted successfully during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_message_received	Indicates a Bluetooth synchronization message was received successfully during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_message_akn	Indicates a Bluetooth synchronization message was transmitted successfully during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_message_received	Indicates a Wi-Fi synchronization message was received successfully during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_message_akn	Indicates a Wi-Fi synchronization message was transmitted successfully during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. AUTO_SYNC_message_received	Indicates an Auto-Sync message was received successfully during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. AUTO_SYNC_message_akn	Indicates an Auto-Sync message was transmitted successfully during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. DEVICE_CONFIG_message_akn	Indicates a device-configuration synchronization message was transmitted successfully between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_sync_data	Indicates Settings data was prepared and sent for synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_processed_data	Indicates synchronized Settings data was processed on the receiving device during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_set_status_listener	Indicates a caller registered to receive Settings synchronization status updates between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_set_data_listener	Indicates a caller registered to receive synchronized Settings data updates between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_set_autosync_listener	Indicates a caller registered to receive Settings Auto-Sync status updates between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_remove_autosync_listener	Indicates a caller unregistered from receiving Settings Auto-Sync status updates between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_get_autosync_state	Indicates a caller queried the current Settings Auto-Sync state between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. SETTINGS_set_communication_state_listener	Indicates a caller registered to receive Settings communication-state updates between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_add_listener	Indicates a caller registered to receive Bluetooth state updates between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_remove_listener	Indicates a caller unregistered from receiving Bluetooth state updates between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_details	Indicates a request to retrieve Bluetooth adapter or device details during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_request_device_metadata	Indicates a request to retrieve Bluetooth device metadata during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_request_paired_devices	Indicates a request to retrieve paired Bluetooth device information during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_request_connected_devices	Indicates a request to retrieve connected Bluetooth device information during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_request_active_devices	Indicates a request to retrieve active Bluetooth device information during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. BLUETOOTH_request_audio_mode	Indicates a request to retrieve the current Bluetooth audio mode during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_add_listener	Indicates a caller registered to receive Wi-Fi state updates between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_remove_listener	Indicates a caller unregistered from receiving Wi-Fi state updates between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_check_enabled	Indicates a request to determine whether Wi-Fi was enabled during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_request_connected_wifi	Indicates a request to retrieve information about the connected Wi-Fi network during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_request_saved_wifi	Indicates a request to retrieve saved Wi-Fi network information during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_request_connection_info	Indicates a request to retrieve detailed Wi-Fi connection information during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. WIFI_request_link_properties	Indicates a request to retrieve Wi-Fi link properties, such as IP configuration, during synchronization between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.MDEP.Common.Diagnostic. Trace.SynchronizationProviderEvent. Device_config_add_lister	Indicates a caller registered to receive device-configuration role-change updates between a Touch Console (TC) and a Front of Room (FoR) device.
Microsoft.Surface.Common.Diagnostic. Trace.ProvisioningProviderEvent. PROVISIONING_SUCCEED	Indicates a device provisioning process completed successfully.
Microsoft.Surface.Common.Diagnostic. Trace.ProvisioningProviderEvent. PROVISIONING_FAILED	Indicates a device provisioning process failed. This event is used to diagnose failures in provisioning steps such as application installation, ownership changes, or settings updates.
Microsoft.Surface.Common.Diagnostic. Trace.ProvisioningProviderEvent. APK_INSTALLATION_FAILED	Indicates an application failed to install during device provisioning.
Microsoft.Surface.Common.Diagnostic. Trace.ProvisioningProviderEvent. PROVISIONING_STATE	Indicates the device provisioning workflow changed state, such as starting, installing packages, or applying settings or policies.
Microsoft.MDEP.Common.Diagnostic. Trace.ZteTelemetryEvent. ZTE_PROVISION_SUCCESSFUL	Indicates the Zero Touch Enrollment (ZTE) provisioning workflow completed successfully.
Microsoft.MDEP.Common.Diagnostic. Trace.ZteTelemetryEvent. ZTE_PROVISION_FAILED	Indicates the Zero Touch Enrollment (ZTE) provisioning workflow failed.
Microsoft.MDEP.Common.Diagnostic. Trace.ZteTelemetryEvent. ZTE_PROFILE_DOWNLOADED	Indicates the Zero Touch Enrollment (ZTE) workflow successfully downloaded the cloud profile used for provisioning.
Microsoft.MDEP.Common.Diagnostic. Trace.ZteTelemetryEvent. ZTE_FEATURE_DISABLED	Indicates Zero Touch Enrollment (ZTE) was not performed because the feature was not enabled.
Microsoft.MDEP.Common.Usage.Point. Interaction	Indicates a user interaction with device settings or related privacy controls, such as feature clicks, toggles, or page navigation. This event is used to understand settings usage and configuration changes.
Microsoft.MDEP.Common.Usage. OtaServiceEvent	Indicates OtaService recorded an APK or firmware update workflow event, such as invocation source, update type, package source, installation mode, or transfer, validation, and installation results.
Microsoft.MDEP.Common.Diagnostic.Trace	Indicates a service emitted diagnostic trace telemetry about its operation, state transitions, or handled errors. This event family is used across multiple MDEP components to monitor reliability and investigate issues.
Microsoft.MDEP.FaultEvent	Indicates the platform captured diagnostic details for a system fault such as a kernel panic, native crash, tombstone, or ANR. This event is used for reliability analysis and can include parsed fault metadata, a signature, and limited backtrace or protocol data.
Microsoft.MDEP.Common.Diagnostic. Trace.PartnerAgentEvent. ConfigurationService.SET	Indicates Teams Partner Agent processed a request from Teams Admin Center to set device configuration values.
Microsoft.MDEP.Common.Diagnostic. Trace.PartnerAgentEvent. ConfigurationService.READ	Indicates Teams Partner Agent processed a request from Teams Admin Center to read device configuration values.
Microsoft.MDEP.Common.Diagnostic. Trace.PartnerAgentEvent. ConfigurationService.PATCH	Indicates Teams Partner Agent processed a request from Teams Admin Center to partially update device configuration values.
Microsoft.MDEP.Common.Diagnostic. Trace.PartnerAgentEvent. ConfigurationService.Invalid	Indicates Teams Partner Agent received an invalid or unsupported configuration request from Teams Admin Center.
Microsoft.MDEP.Common.Diagnostic. Trace.PartnerAgentEvent. HealthService Getlog	Indicates Teams Partner Agent processed a request from Teams Admin Center to retrieve device logs.
Microsoft.MDEP.Common.Diagnostic. Trace.PartnerAgentEvent. HealthService.Reboot	Indicates Teams Partner Agent processed a request from Teams Admin Center to reboot the device.
Microsoft.MDEP.Common.Diagnostic. Trace.PartnerAgentEvent. HealthService	Indicates Teams Partner Agent initiated a device reboot after processing a health-service request from Teams Admin Center.
Microsoft.MDEP.Common.Diagnostic. Trace.PartnerAgentEvent. HealthService.RebootResponse	Indicates Teams Partner Agent recorded the response or outcome of a reboot request from Teams Admin Center.
Microsoft.MDEP.Common.Health. Point.BetterTogetherEvent. lock_now	Indicates the Teams Better Together feature requested the device be locked.
Microsoft.MDEP.Common.Health.Point. BetterTogetherEvent.unlock_now	Indicates the Teams Better Together feature requested the device be unlocked.
Microsoft.MDEP.Common.Health.Point. BetterTogetherEvent.stay_active	Indicates the Teams Better Together feature requested the device remain awake.
Microsoft.MDEP.Common.Health.Point. BetterTogetherEvent.go_to_sleep	Indicates the Teams Better Together feature requested the device enter sleep mode.
Microsoft.MDEP.Common.Health.Point. BetterTogetherEvent.wake_up	Indicates the Teams Better Together feature requested the device wake up.
Microsoft.MDEP.Common.Health.Point. EmergencyNumberEvent.dial	Indicates the emergency dialer was opened on the device.
Microsoft.MDEP.Common.Health.Point. EmergencyNumberEvent.call	Indicates an emergency call was placed on the device. This event is used to monitor emergency-calling reliability.
Microsoft.MDEP.Common.Diagnostic. Trace.WebserverEvent. SERVER_LIFECYCLE	Indicates the DeviceExperienceWebServer service or HTTP server changed lifecycle state, such as create, start, stop, bind, run, or destroy.
Microsoft.MDEP.Common.Diagnostic. Trace.WebserverEvent. SERVER_ERROR	Indicates the DeviceExperienceWebServer encountered a server startup or runtime error. This event is used to diagnose failures while creating or operating the web server.
Microsoft.MDEP.Common.Diagnostic. Trace.WebserverEvent. SERVICE_CALLED	Indicates the DeviceExperienceWebServer received an HTTPS request and began processing the target endpoint and API method.
Microsoft.MDEP.Common.Diagnostic. Trace.WebserverEvent. REQUEST_SUCCESS	Indicates the DeviceExperienceWebServer successfully processed an HTTP request and returned an HTTP 200 response with the requested data.
Microsoft.MDEP.Common.Diagnostic. Trace.WebserverEvent. REQUEST_ERROR	Indicates the DeviceExperienceWebServer encountered an error while processing an HTTP request and returned a non-200 response code.
Microsoft.MDEP.Common.Diagnostic. Trace.TranslationEvent. SERVICE_ON_CREATE	Indicates the TranslationService was created successfully. It is used to monitor translation-service lifecycle startup.
Microsoft.MDEP.Common.Diagnostic. Trace.TranslationEvent. SERVICE_ON_START_COMMAND	Indicates the TranslationService received a start command and started successfully. It is used to monitor translation-service lifecycle transitions.
Microsoft.MDEP.Common.Diagnostic. Trace.TranslationEvent. SERVICE_ON_DESTROY	Indicates the TranslationService was stopped or destroyed. It is used to monitor translation-service lifecycle shutdown.
Microsoft.MDEP.STORAGE.Status	Indicates storage utilization under /data was collected, including available space and the largest files, to monitor device storage capacity.
Microsoft.MDEP.Watson.Bugreport	Indicates Watson recorded a summary of bugreport file handling or upload activity for crash diagnostics.
Microsoft.MDEP.Common.Usage. ProjectionProviderEvent	Indicates Projection recorded usage and performance telemetry, including projection event type and message details, to monitor projection reliability and improvement.
Microsoft.MDEP.Common.Usage. SynchronizerProviderEvent	Indicates the Pairing Synchronizer service recorded usage or exception telemetry, including synchronization event type and message details, to monitor reliability and issue resolution.