Elastic Windows Event Explorer


Publisher - Microsoft-Windows-DHCP-Server

Event ID 169

Message:

Option setting: %{OptionName} has been removed from the reservation: %{ReservationName} in IPv4 scope: %{IP_Name} by %{ClientName}.

Event Data:

# Name In Type
Out Type
1 ReservationName win:UnicodeString xs:string
2 IP_Name win:UnicodeString xs:string
3 OptionName win:UnicodeString xs:string
4 ClientName win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: FN2ORZGPZL4ZY