Windows Security Log Event ID 5147
| Operating Systems |
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
|
Category
• Subcategory | System
• Other System Events |
|
Type
|
Failure
|
Corresponding events
in Windows
2003
and before |
|
5147: A more restrictive Windows Filtering Platform filter has blocked a packet
On this page
This event is new to Server 2012. It does not appear in earlier versions.
I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.
Free Security Log Resources by Randy
Setup PowerShell Audit Log Forwarding in 4 Minutes
A more restrictive Windows Filtering Platform filter has blocked a packet.
Network Information:
Direction: %1
Source Address: %2
Destination Address: %3
EtherType: %4
VlanTag: %5
vSwitchId: %6
Source vSwitch Port: %7
Destination vSwitch Port: %8
Filter Information:
Filter Run-Time ID: %9
Layer Name: %10
Layer Run-Time ID: %11
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection