Elastic Windows Event Explorer


Publisher - Microsoft-Windows-NCSI

Event ID 4049

Message:

Preferred address change on %{InterfaceGuid} (%{IfLuid} Family: %{Family} HasPreferredAddress: %{HasPreferredAddress} AddressSuffixOrigins: %{AddressSuffixOrigins})

Event Data:

# Name In Type
Out Type
1 InterfaceGuid win:GUID xs:GUID
2 IfLuid win:UInt64 win:HexInt64
3 Family win:UInt32 xs:unsignedInt
4 HasPreferredAddress win:Boolean xs:boolean
5 AddressSuffixOrigins win:UInt32 win:HexInt32

Observed Windows Versions:

Version: 0

Fingerprint: WQUHICH4S7GLO