Event Log

The following event log records are logged by this feature with the Service Monitoring category. The first event ID is logged when activity with a service is detected, the second event ID is logged when activity with a driver is detected.

Event ID	Event Description	Example
10100 10150	A service status changed	The status for service BITS (Background Intelligent Transfer Service) changed from Start Pending to Running.
10101 10151	A service was added	The following service was added: GatewayIPMonitor (Gateway IP Monitor ). Current service state is Running.
10102 10152	A service was removed	The following service was removed: GatewayIPMonitor (Gateway IP Monitor ). Last service state was Running.
10103 10153	A service is being monitored	The service EventSentry (EventSentry) is now being monitored.
10104 10154	A service is not being monitored anymore	The service Cdaudio (Cdaudio) will not be monitored anymore. Last service status was Stopped.
10105	Services configured for autostart are not running	The following 3 service(s) are configured to AUTOSTART but are currently not running: Cdaudio Digital CD Audio Playback Filter Driver Sfloppy
10106	Unable to connect to SCM	Unable to connect to the Service Control Manager (SCM), services cannot be monitored.
10107	Unable to enumerate services.	Unable to enumerate services, services cannot be monitored.
10108 10158	Successfully changed service state	The state of service USB Mass Storage Driver was Running, requested state is Stopped. EventSentry successfully changed the service status to Stopped.
10109 10159	Unable to change service state	The state of service iPodService is Start Pending, requested state is Stopped. EventSentry was not able to change the service status due to the following error: The service is pending stop.
10110 10160	A service startup type changed	The Startup Type for service PDAgent (PDAgent) changed from Automatic to Manual.
10111	The user account for a service changed	The user account for service PDAgent (PDAgent) changed from LocalSystem to MyUsername
10112 10162	The executable for a service changed	The executable for service GatewayIPMonitor (Gateway IP Monitor) changed from C:\Windows\system32\gwipmon_svc.exe to C:\Program Files\Gateway IP Monitor\gwipmon_svc.exe.