| System | 1000 | High | Worker process crash (w3wp.exe) detected |
| System | 1010 | High | Application Pool start failure |
| System | 1013 | Info | AppPool recycle completed |
| System | 5059 | High | Application pool stopped unexpectedly |
| Security | 4625 | High | Failed logon to IIS site |
| Security | 4648 | Medium | Explicit credential use to IIS app |
| Security | 540 | Info | Successful logon to IIS site |
| Application | 1309 | High | ASP.NET application error |
| Application | 1310 | High | ASP.NET compilation/configuration error |
| Application | 5010 | Critical | WAS failed to start worker process |
| Application | 5057 | Medium | AppPool identity password change required |
| Application | 5074 | High | IIS configuration changed |
| Application | 5152 | Medium | Request Filtering module blocked request |
| Application | 5138 | High | Web server configuration read error |
| HTTP Logging | 1 | Info | HTTP request logged |
| HTTP Logging | 2 | Medium | HTTP request failure logged |
| Security | 15005 | High | Port binding conflict for IIS listener |
| Security | 560 | High | Object access attempt on IIS log/config files |
| Application | 9025 | Info | Metabase compatibility component initialized |
| Application | 9027 | High | Metabase write failure |
| Application | 9029 | High | Configuration schema mismatch detected |
| System | 7036 | Info | W3SVC service start/stop |
| Application | 5075 | Medium | Configuration file restored from backup |
| Application | 1000 | Info | IIS service started |
| Application | 1010 | Critical | IIS service start failure |
| Application | 1309 | High | ASP.NET application error |
| Application | 1310 | Medium | ASP.NET compilation error |
| Security | 5057 | High | Application pool identity password expired |
| System | 5074 | Medium | IIS configuration changed |
| System | 5199 | Critical | Worker process terminated unexpectedly |