Elastic Windows Event Explorer


Publisher - Microsoft-Windows-propsys

Event ID 1006

Message:

Omitted duplicate property.
Keeping: '%{KeepPropertyCanonicalName}' (%{KeepPropertyPropertyKey})  Publisher: '%{KeepPropertyPublisher}'  Product: '%{KeepPropertyProduct}'  URL: '%{KeepPropertySourceUrl}'
Omitting: '%{OmitPropertyCanonicalName}' (%{OmitPropertyPropertyKey})  Publisher: '%{OmitPropertyPublisher}'  Product: '%{OmitPropertyProduct}'  URL: '%{OmitPropertySourceUrl}'

Event Data:

# Name In Type
Out Type
1 KeepPropertyCanonicalName win:UnicodeString xs:string
2 KeepPropertyPropertyKey win:UnicodeString xs:string
3 KeepPropertyPublisher win:UnicodeString xs:string
4 KeepPropertyProduct win:UnicodeString xs:string
5 KeepPropertySourceUrl win:UnicodeString xs:string
6 OmitPropertyCanonicalName win:UnicodeString xs:string
7 OmitPropertyPropertyKey win:UnicodeString xs:string
8 OmitPropertyPublisher win:UnicodeString xs:string
9 OmitPropertyProduct win:UnicodeString xs:string
10 OmitPropertySourceUrl win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: RVOUOSM3SMRY2