Code Reference

Windows reports most failures as a number. SparkLogs decodes that number where the event is collected, so an event carries the name and the meaning beside the code and a question never has to hard-code a hexadecimal value.

These are the tables the SparkLogs Agent carries, published in full. A code that is not in one of them keeps its raw value on the event: a meaning is never invented for it.

Codes	Count	What they are
Kerberos Error Codes	17	The result codes a Kerberos key distribution center returns when a ticket request fails.
LDAP Result Codes	57	The result code an LDAP directory server returns on every operation, from the protocol standard rather than from Windows.
NPS Reason Codes	10	The reason codes Network Policy Server records when it turns a RADIUS request down.
VSS Result Codes	81	The success and failure codes the Volume Shadow Copy Service and its writers return during a snapshot.
Windows System Error Codes	3,214	The numbered errors Windows returns from system calls, service starts, installer runs and driver operations, each with the constant name Windows publishes for it.
Windows Bug Check Codes	520	The stop codes behind a Windows blue screen, each with the constant name Microsoft documents it under.
Windows Installer Error Codes	359	The numbered messages the Windows Installer writes while a package installs, repairs, patches or removes.
Windows Logon Types	12	The logon type Windows records on every sign-in event, which says how the session was established: at the keyboard, over the network, as a service, over remote desktop.
Windows Status Codes	339	The status words Windows reports as one hexadecimal value, decoded in a single table because they share one numeric space.
Windows Token Broker Error Codes	11	The errors the Windows token broker returns when an app or the device cannot get a sign-in token.
Windows Update Error Codes	29	The hexadecimal result codes the Windows Update client returns when a scan, download or install does not finish.