Event ID: 5154

The Windows Filtering Platform has permitted an application or service to listen on a port for incoming connections.

The Windows Filtering Platform has permitted an application or service to listen on a port for incoming connections.

Application Information:
    Process ID:     %1
    Application Name:   %2

Network Information:
    Source Address:     %3
    Source Port:        %4
    Protocol:       %5

Filter Information:
    Filter Run-Time ID: %6
    Layer Name:     %7
    Layer Run-Time ID:  %8


Microsoft Documentation

Event ID - 5154



Name Field Insertion String OS Example
Protocol Protocol %5 Any View Codes


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Filtering Platform Connection"



LEFT/RIGHT arrow keys for navigation

Back to List