| Microsoft-Windows-ServerEssentials/Admin | 100 | Info | Essentials Services started successfully |
| Microsoft-Windows-ServerEssentials/Admin | 101 | Medium | Essentials Services stopped |
| Microsoft-Windows-ServerEssentials/Admin | 102 | Info | Configuration completed successfully |
| Microsoft-Windows-ServerEssentials/Admin | 103 | High | Configuration failed with error |
| Microsoft-Windows-ServerEssentials/Admin | 104 | Info | Health service started successfully |
| Microsoft-Windows-ServerEssentials/Admin | 105 | High | Health service stopped unexpectedly |
| System | 7031 | High | Essentials Management Service terminated unexpectedly |
| Security | 4624 | Info | Successful logon to Remote Web Access (RWA) |
| Security | 4625 | High | Failed RWA logon attempt |
| Microsoft-Windows-RemoteAccess/Operational | 20226 | Info | User connected via VPN |
| Microsoft-Windows-RemoteAccess/Operational | 20227 | Medium | VPN connection failed |
| Security | 4768 | Info | Kerberos authentication ticket requested |
| Security | 4769 | Medium | Service ticket request failed |
| Security | 4771 | High | Kerberos pre-authentication failed |
| Microsoft-Windows-Backup/Operational | 4 | Info | Backup completed successfully |
| Microsoft-Windows-Backup/Operational | 5 | High | Backup failed |
| Microsoft-Windows-Backup/Operational | 9 | Medium | Backup skipped files or folders |
| Microsoft-Windows-Backup/Operational | 14 | High | Backup service stopped unexpectedly |
| Microsoft-Windows-ServerEssentials/Admin | 201 | Info | Client computer backup started |
| Microsoft-Windows-ServerEssentials/Admin | 202 | Info | Client computer backup completed successfully |
| Microsoft-Windows-ServerEssentials/Admin | 203 | Medium | Client computer backup failed |
| Microsoft-Windows-ServerEssentials/Admin | 301 | Medium | Health Alert generated |
| Microsoft-Windows-ServerEssentials/Admin | 302 | High | Critical system alert detected |
| Microsoft-Windows-ServerEssentials/Admin | 303 | Info | Alert cleared after issue resolution |
| Microsoft-Windows-ServerEssentials/Admin | 304 | Critical | Disk space threshold reached |
| Microsoft-Windows-ServerEssentials/Admin | 305 | High | Service dependency failed to start |
| Microsoft-Windows-ServerEssentials/Admin | 306 | Medium | Update or patch installation failed |
| Microsoft-Windows-ServerEssentials/Admin | 307 | Info | System reboot pending after update |
| Microsoft-Windows-ServerEssentials/Admin | 401 | Info | Add-in installed successfully |
| Microsoft-Windows-ServerEssentials/Admin | 402 | Medium | Add-in installation failed |
| Microsoft-Windows-ServerEssentials/Admin | 403 | Info | Add-in removed |
| Microsoft-Windows-ServerEssentials/Admin | 404 | High | Add-in caused service crash |
| Microsoft-Windows-ServerEssentials/Admin | 405 | Info | Integration with Office 365 successful |
| Microsoft-Windows-ServerEssentials/Admin | 406 | High | Azure AD integration failed |
| Security | 4739 | High | Domain policy changed |
| Security | 4719 | High | System audit policy modified |
| Directory Service | 1645 | Info | Domain controller replication completed |
| Directory Service | 2089 | Medium | AD replication partner unreachable |
| Microsoft-Windows-GroupPolicy/Operational | 7016 | Info | Group Policy applied successfully |
| Microsoft-Windows-GroupPolicy/Operational | 7017 | Medium | Group Policy application failed |