Elastic Windows Event Explorer


Publisher - Microsoft-Windows-DHCP-Server

Event ID 102

Message:

Scope: %{IP_ScopeName} for IPv4 is Removed in Superscope: %{IP_SuperScopeName} by %{ClientName}. However, the Scope exists outside the Superscope.

Event Data:

# Name In Type
Out Type
1 IP_ScopeName win:UnicodeString xs:string
2 IP_SuperScopeName win:UnicodeString xs:string
3 ClientName win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: RGXUKO5KFHDYK