| Microsoft-IIS-FTP Service/Operational | 14 | Information | FTP service started successfully |
| Microsoft-IIS-FTP Service/Operational | 15 | Warning | FTP service stopped |
| Microsoft-IIS-FTP Service/Operational | 16 | Information | User login succeeded |
| Microsoft-IIS-FTP Service/Operational | 17 | Error | User login failed (invalid credentials or policy) |
| Microsoft-IIS-FTP Service/Operational | 18 | Information | File uploaded successfully |
| Microsoft-IIS-FTP Service/Operational | 19 | Information | File downloaded |
| Microsoft-IIS-FTP Service/Operational | 20 | Warning | File deleted by user |
| Microsoft-IIS-FTP Service/Operational | 21 | Information | Directory listing requested |
| Microsoft-IIS-FTP Service/Operational | 22 | Information | File rename operation completed successfully |
| Microsoft-IIS-FTP Service/Operational | 23 | Warning | File rename failed due to permission issue |
| Microsoft-IIS-FTP Service/Operational | 24 | Information | Data channel connection established |
| Microsoft-IIS-FTP Service/Operational | 25 | Information | Data channel connection closed |
| Microsoft-IIS-FTP Service/Operational | 26 | Information | Control channel connection opened |
| Microsoft-IIS-FTP Service/Operational | 27 | Information | Control channel connection closed |
| Microsoft-IIS-FTP Service/Operational | 28 | Warning | Connection timeout — client inactive |
| Microsoft-IIS-FTP Service/Operational | 29 | Warning | Bandwidth or connection limit reached |
| Microsoft-IIS-FTP Service/Operational | 30 | Information | SSL/TLS negotiation succeeded |
| Microsoft-IIS-FTP Service/Operational | 31 | Error | SSL/TLS negotiation failed |
| Microsoft-IIS-FTP Service/Operational | 32 | Information | Passive mode connection established |
| Microsoft-IIS-FTP Service/Operational | 33 | Information | Active mode data transfer initiated |
| Microsoft-IIS-FTP Service/Operational | 34 | Information | Anonymous user login permitted |
| Microsoft-IIS-FTP Service/Operational | 35 | Warning | Anonymous user login denied |
| Microsoft-IIS-FTP Service/Operational | 36 | Warning | User disconnected unexpectedly |
| Microsoft-IIS-FTP Service/Operational | 37 | Error | Disk quota exceeded during file upload |
| Microsoft-IIS-FTP Service/Operational | 38 | Warning | File transfer interrupted or cancelled |
| Microsoft-IIS-FTP Service/Operational | 39 | Error | FTP root directory not accessible |
| Microsoft-IIS-FTP Service/Operational | 40 | Information | Configuration change detected |
| Microsoft-IIS-FTP Service/Operational | 41 | Information | FTP authentication method updated |
| Microsoft-IIS-FTP Service/Operational | 42 | Warning | IP restriction blocked a client connection |
| Microsoft-IIS-FTP Service/Operational | 43 | Information | IP restriction policy modified |
| Microsoft-IIS-FTP Service/Operational | 44 | Information | Audit log generated for FTP activity |
| Microsoft-IIS-FTP Service/Operational | 45 | Error | Unexpected internal error in FTP service |
| System | 7031 | Error | FTP service terminated unexpectedly |
| System | 7036 | Information | FTP service entered running or stopped state |
| System | 1017 | Error | FTP binding configuration error detected |
| Security | 4624 | Information | Successful FTP logon (NTLM/Basic) |
| Security | 4625 | Error | Logon failure via FTP |
| Security | 4672 | Information | Special privileges assigned to FTP session |
| Security | 5140 | Information | Network share/directory accessed via FTP |
| Security | 5145 | Warning | Access denied due to ACL on FTP directory/file |
| Microsoft-IIS-FTP Service/Operational | 20 | Medium | User disconnected unexpectedly |
| Microsoft-IIS-FTP Service/Operational | 22 | Medium | File delete operation |
| Microsoft-IIS-FTP Service/Operational | 23 | Medium | File rename operation |
| System | 7034 | High | FTP service terminated unexpectedly |
| System | 7036 | Medium | FTP service entered stopped state |