Elastic Windows Event Explorer

Publisher - Microsoft-Windows-propsys

Event ID 1003

Message:

Error parsing property schema '%{SchemaId}': Invalid property key for property '%{PropertyCanonicalName}' (fmtid='%{ErroneousFmtid}' pid='%{ErroneousPid}').

Event Data:

#	Name	In Type	Out Type
1	SchemaId	win:UnicodeString	xs:string
2	PropertyCanonicalName	win:UnicodeString	xs:string
3	ErroneousFmtid	win:UnicodeString	xs:string
4	ErroneousPid	win:UnicodeString	xs:string

Observed Windows Versions:

Windows Server 2019 Datacenter Evaluation (17763.1935)

Version: 0

Fingerprint: X6A3Z2ZRTYKBG