All Rules in Microsoft.Windows.Server.RRAS Management Pack

 DisplayNameDescriptionIDTargetCategoryEnabledInstance NameCounter NameFrequencyEvent_IDEvent SourceAlert GenerateAlert SeverityAlert PriorityRemotableEvent Log
Alignment_ErrorsAlignment ErrorsThe total number of Alignment Errors for this connection. Alignment Errors occur when a byte received is different from the byte expected.Alignment_ErrorsMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalAlignment Errors18000FalseTrue
Authentication_Accounting_failure_1_RuleAuthentication/Accounting failureAuthentication_Accounting_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
Buffer_Overrun_ErrorsBuffer Overrun ErrorsThe total number of Buffer Overrun Errors for this connection. Buffer Overrun Errors when the software cannot handle the rate at which data is received.Buffer_Overrun_ErrorsMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalBuffer Overrun Errors18000FalseTrue
Bytes_ReceivedBytes ReceivedThe number of bytes received total for this connection.Bytes_ReceivedMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalBytes Received18000FalseTrue
Bytes_Received_per_secondBytes_Received/SecThe number of bytes received per second.Bytes_Received_per_secondMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalBytes Received/Sec18000FalseTrue
Bytes_TransmittedBytes TransmittedThe number of bytes transmitted total for this connection.Bytes_TransmittedMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalBytes Transmitted18000FalseTrue
Bytes_Transmitted_per_secondBytes Transmitted/SecThe number of bytes transmitted per second.Bytes_Transmitted_per_secondMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalBytes Transmitted/Sec18000FalseTrue
CallBack_FailtureCallBack_FailureCoId=\%1: The Remote Access Server's attempt to callback user \%2 on port \%3 at \%4 failed because of the following error: \%5CallBack_FailtureMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020259RemoteAccessFalseTrueSystem
Cannot_receive_initial_data_on_portCannot receive initial data on portCoId=\%1: Cannot receive initial data on port \%2 because of the following error: \%3 The user has been disconnected.Cannot_receive_initial_data_on_portMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020260RemoteAccessFalseTrueSystem
Configuration_change_for_authentication_1_RuleConfiguration change for authenticationConfiguration_change_for_authentication_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
Configuration_failure_1_1_RuleConfiguration failureConfiguration_failure_1_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Configuration_failure_1_RuleConfiguration failureConfiguration_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
Control_Protocol_initialization_failure_1_RuleControl Protocol initialization failureControl_Protocol_initialization_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
CRC_ErrorsCRC ErrorsThe total number of CRC Errors for this connection. CRC Errors occur when the frame received contains erroneous data.CRC_ErrorsMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalCRC Errors18000FalseTrue
Demand_dial_connection_failed_1_RuleDemand dial connection failedDemand_dial_connection_failed_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
DHCP_allocator_failure_1_RuleDHCP allocator failureDHCP_allocator_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
DHCP_relay_failure_1_RuleDHCP relay failureDHCP_relay_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Discarded_packet_from_peer_1_1_RuleDiscarded packet from peerDiscarded_packet_from_peer_1_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Discarded_packet_from_peer_1_RuleDiscarded packet from peerDiscarded_packet_from_peer_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue041013FalseTrueSystem
Discarded_packet_from_peer_2_1_RuleDiscarded packet from peerDiscarded_packet_from_peer_2_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
DNS_proxy_failure_1_RuleDNS proxy failureDNS_proxy_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
External_error_1_RuleExternal errorExternal_error_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020202RemoteAccessFalseTrueSystem
External_failure_1_RuleExternal failureExternal_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue030054FalseTrueSystem
Frames_ReceivedFrames ReceivedThe number of data frames received total for this connection.Frames_ReceivedMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalFrames Received18000FalseTrue
Frames_Received_per_secondFrames Received/SecThe number of frames received per second.Frames_Received_per_secondMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalFrames Received/Sec18000FalseTrue
Frames_TransmittedFrames TransmittedThe number of data frames transmitted total for this connection.Frames_TransmittedMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalFrames Transmitted18000FalseTrue
Frames_Transmitted_per_secondFrames Transmitted/SecThe number of frames transmitted per second.Frames_Transmitted_per_secondMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalFrames Transmitted/Sec18000FalseTrue
Hardware_device_error_1_RuleHardware device errorHardware_device_error_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020013RemoteAccessFalseTrueSystem
Initialization_failure_1_RuleInitialization failureInitialization_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Interface_Initialization_failure_1_RuleInterface Initialization failureInterface_Initialization_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
IPCP_negotiation_failure_1_RuleIPCP negotiation failureIPCP_negotiation_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
IPsec_related_failures_1_RuleIPsec related failuresIPsec_related_failures_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020192RemoteAccessFalseTrueSystem
Issues_with_IGMP_configured_as_RAS_client_1_RuleIssues with IGMP configured as RAS clientIssues_with_IGMP_configured_as_RAS_client_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
License_Limit_ExceededLicense Limit ExceededCoId=\%1: A user was unable to connect on port \%2. No more connections can be made to this remote computer because the computer has exceeded its client license limit.License_Limit_ExceededMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020261RemoteAccessFalseTrueSystem
Loading_3rd_party_dll_failure_1_RuleLoading 3rd party dll failureLoading_3rd_party_dll_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
Loading_RAS_supporting_modules_failure_1_RuleLoading RAS supporting modules failureLoading_RAS_supporting_modules_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
Memory_allocation_failure_1_RuleMemory allocation failureMemory_allocation_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
MGM_operation_failure_1_RuleMGM operation failureMGM_operation_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Multicast_failure_1_RuleMulticast failureMulticast_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
Multicast_join_failure_1_RuleMulticast join failureMulticast_join_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue041031FalseTrueSystem
NAT_failure_1_RuleNAT failureNAT_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
No_more_licenses_1_RuleNo more licensesNo_more_licenses_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020097RemoteAccessFalseTrueSystem
No_network_protocols_successfully_negotiatedNo network protocols were successfully negotiatedCoId=\%1: The user \%2 connected to port \%3 has been disconnected because no network protocols were successfully negotiated.No_network_protocols_successfully_negotiatedMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020253RemoteAccessFalseTrueSystem
Number_of_ConnectionsNumber of Active ConnectionsThe total number of Remote Access connections.Number_of_ConnectionsMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalTotal Connections18000FalseTrue
Out_of_memory_error_1_RuleOut of memory errorOut_of_memory_error_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
Packet_discarded_1_RulePacket discardedPacket_discarded_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Packet_filter_related_failure_1_RulePacket filter related failurePacket_filter_related_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020193RemoteAccessFalseTrueSystem
Percent_Compression_InPercent Compression InThe compression ratio for bytes being received.Percent_Compression_InMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalPercent Compression In18000FalseTrue
Percent_Compression_OutPercent Compression OutThe compression ratio for bytes being transmitted.Percent_Compression_OutMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalPercent Compression Out18000FalseTrue
PPP_Authentication_DisabledDisabling PPP AUTH on portCorrelation ID=\%1: Disabling PPP AUTH for \%2\\\%3 on port \%4.PPP_Authentication_DisabledMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020279RemoteAccessFalseTrueSystem
PPP_Error_on_portPPP_Error_on_PortCoId=\%1: The following error occurred in the Point to Point Protocol module on port: \%2, UserName: \%3. \%4PPP_Error_on_portMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020255RemoteAccessFalseTrueSystem
Protocol_Initialization_failure_1_1_RuleProtocol Initialization failureProtocol_Initialization_failure_1_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Protocol_initialization_failure_1_RuleProtocol initialization failureProtocol_initialization_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Protocol_initialization_failure_2_1_RuleProtocol initialization failureProtocol_initialization_failure_2_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Rasman_port_open_failure_1_RuleRasman port open failureRasman_port_open_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Rasman_Service_initialization_failure_1_RuleRasman Service initialization failureRasman_Service_initialization_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
Rasman_service_init_error_1_RuleRasman service init errorRasman_service_init_error_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RasmanFalseTrueSystem
Rasman___PPP_initialization_failure_1_RuleRasman - PPP initialization failureRasman___PPP_initialization_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020063RasmanFalseTrueSystem
Ras_connection_failure_1_RuleRas connection failureRas_connection_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
Registry_operation_failure_1_RuleRegistry operation failureRegistry_operation_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
RemoteAccess___PPP_initialization_failure_1_RuleRemoteAccess - PPP initialization failureRemoteAccess___PPP_initialization_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
Router_manager_s_entry_point_to_MGM_failed_1_RuleRouter manager's entry point to MGM failedRouter_manager_s_entry_point_to_MGM_failed_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue050021FalseTrueSystem
Router_manager_s_entry_point_to_protocol_failed_1_1_RuleRouter manager's entry point to protocol failedRouter_manager_s_entry_point_to_protocol_failed_1_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Router_manager_s_entry_point_to_protocol_failed_1_RuleRouter manager's entry point to protocol failedRouter_manager_s_entry_point_to_protocol_failed_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Router_manager_s_entry_point_to_protocol_failures_1_RuleRouter manager's entry point to protocol failuresRouter_manager_s_entry_point_to_protocol_failures_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Route_ignored_1_RuleRoute ignoredRoute_ignored_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Routing_protocol_registration_failure_1_RuleRouting protocol registration failureRouting_protocol_registration_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Routing_protocol_s_entry_point_to_MGM_failed_1_RuleRouting protocol's entry point to MGM failedRouting_protocol_s_entry_point_to_MGM_failed_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
RTM_routes_addition_failure_1_RuleRTM routes addition failureRTM_routes_addition_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Sending_packets_to_peer_failed_1_RuleSending packets to peer failedSending_packets_to_peer_failed_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue030057FalseTrueSystem
Serial_Overrun_ErrorsSerial Overrun ErrorsThe total number of Serial Overrun Errors for this connection. Serial Overrun Errors occur when the hardware cannot handle the rate at which data is received.Serial_Overrun_ErrorsMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalSerial Overrun Errors18000FalseTrue
Socket_operation_failure_1_1_RuleSocket operation failureSocket_operation_failure_1_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Socket_operation_failure_1_RuleSocket operation failureSocket_operation_failure_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Socket_operation_failure_2_1_RuleSocket operation failureSocket_operation_failure_2_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Socket_operation_failure_3_1_RuleSocket operation failureSocket_operation_failure_3_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00FalseTrueSystem
Some_interfaces_not_working_1_RuleSome interfaces not workingSome_interfaces_not_working_1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00RemoteAccessFalseTrueSystem
SSTPSVC_Log_Client_Missing_CertificateSSTP Client Certificate MissingThe certificate used for Secure Socket Tunnelling Protocol (SSTP) is missing. You should configure a new certificate for SSTP or use default configurationSSTPSVC_Log_Client_Missing_CertificateMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue025FalseTrueSystem
SSTPSVC_Log_Cookie_Add_FailureSSTP cookie add failureCoId=\%1: “Secure Socket Tunnelling Protocol (SSTP)” service could not configure the VPN server specific cookies. The detailed information on the error is given below.\%n\%n\%\%2SSTPSVC_Log_Cookie_Add_FailureMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue033FalseTrueSystem
SSTPSVC_Log_Wrong_Certificate_CconfigurationSSTP wrong certificate configurationThe thumbprint (cert hash) of the certificate used for Secure Socket Tunnelling Protocol (SSTP) \%1 is different than the certificate bound \%2 to the Web listener (HTTP.sys). Configure SSTP to use the default certificate or the certificate bound to SSL. You can configure web server applications to use the same certificate used by SSTPSSTPSVC_Log_Wrong_Certificate_CconfigurationMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue032FalseTrueSystem
The_service_failed_to_start_or_terminated_unexpectedly._1_RuleThe service failed to start or terminated unexpectedly.The_service_failed_to_start_or_terminated_unexpectedly._1_RuleMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue00Service Control ManagerFalseTrueSystem
Timeout_ErrorsTimeout ErrorsThe total number of Timeout Errors for this connection. Timeout Errors occur when an expected is not received in time.Timeout_ErrorsMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalTimeout Errors18000FalseTrue
Total_ErrorsTotal ErrorsThe total number of CRC, Timeout, Serial Overrun, Alignment, and Buffer Overrun Errors for this connection.Total_ErrorsMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalTotal Errors18000FalseTrue
Total_Errors_per_secondTotal Errors/SecThe total number of CRC, Timeout, Serial Overrun, Alignment, and Buffer Overrun Errors per second.Total_Errors_per_secondMicrosoft.Windows.Server.RRAS.2008.ServerPerformanceCollectionTrueRAS TotalTotal Errors/Sec18000FalseTrue
Unable_to_process_MOBIKE_updateUnable to process MOBIKE updateCorrelation ID=\%1: Unable to process MOBIKE update for connection named \%2. The error code returned is \%3.Unable_to_process_MOBIKE_updateMicrosoft.Windows.Server.RRAS.2008.ServerEventCollectionTrue020278RemoteAccessFalseTrueSystem