Event ID 2: Kernel event tracing

Dyabzhee · 13 May 2017

Umm, today I've been solving all kinds of event errors but this one remained unsolved mostly because I can't find any info about it.

It shows in event viewer log on every boot / win restart. I don't know what it is and how does it affects me. I would be grateful if someone can give more info or potential fix.

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />

<EventID>2</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>2</Task>

<Opcode>12</Opcode>

<Keywords>0x8000000000000010</Keywords>

<TimeCreated SystemTime="2017-05-13T23:52:58.448595000Z" />

<EventRecordID>480</EventRecordID>

<Correlation />

<Execution ProcessID="2384" ThreadID="2208" />

<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>

Dyabzhee · 14 May 2017

Bump

mannyrd · 04 Dec 2017

Have the same error at every boot is this an unimportant error or a bug ?

Ivan Petrov · 05 Dec 2017

I have the same new error and it is showing after clean install which I did 2 days ago. Very less info when I googled it, some people say it is related to the last Skype app update. Have no idea, maybe have to wait again for update...

Step forward, two backward... ;-)

Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 05/12/2017 08:45:21
Event ID: 2
Task Category: Session
Level: Error
Keywords: Session
User:
Computer:
Description:
Session "RtcPalVideoEtwSession" failed to start with the following error: 0xC0000022
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>2</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>12</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2017-12-05T07:45:21.806334500Z" />
<EventRecordID>30</EventRecordID>
<Correlation />
<Execution ProcessID="7268" ThreadID="10132" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>HP-15AY101NG</Computer>
<Security UserID=" " />
</System>
<EventData>
<Data Name="SessionName">RtcPalVideoEtwSession</Data>
<Data Name="FileName">
</Data>
<Data Name="ErrorCode">3221225506</Data>
<Data Name="LoggingMode">4194306</Data>
</EventData>
</Event>

Win7ine · 05 Dec 2017

Same here ...

Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 05/12/2017 11:48:02
Event ID: 2
Task Category: Session
Level: Error
Keywords: Session
User: XXXXXX\XXXX
Computer: XXXXXXXXX
Description:
Session "RtcPalVideoEtwSession" failed to start with the following error: 0xC0000022
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>2</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>12</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2017-12-05T11:48:02.372002500Z" />
<EventRecordID>19</EventRecordID>
<Correlation />
<Execution ProcessID="24376" ThreadID="25020" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>XXXX</Computer>
<Security UserID="S-1-5-21-XXXXXXXXXX-1001" />
</System>
<EventData>
<Data Name="SessionName">RtcPalVideoEtwSession</Data>
<Data Name="FileName">
</Data>
<Data Name="ErrorCode">3221225506</Data>
<Data Name="LoggingMode">4194306</Data>
</EventData>
</Event>

fdegrove · 05 Dec 2017

Hi,

RtcPalVideoEtwSession is Skype trying but failing to open a video session.
Check in Taskmanager if Skype is in de Startup Group and if so disable it unless you need it to run continuously.

If Skype isn't needed, uninstalling it will make the error stop from appearing. Should you need it then installing the desktop version instead should work as well.

Cheers,