Windows Security Log Event ID 1101

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019
 • Subcategory
Non Audit (Event Log)
 • Event processing
Type Success
Corresponding events
in Windows 2003
and before
Discussions on Event ID 1101
Ask a question about this event

1101: Audit events have been dropped by the transport.

On this page

We have observed this event being logged upon restarting Windows after a dirty shutdown.


Free Security Log Resources by Randy

Setup PowerShell Audit Log Forwarding in 4 Minutes


Examples of 1101

Audit events have been dropped by the transport.  The real time backup file was corrupt due to improper shutdown.

Keep me up-to-date on the Windows Security Log.
*We will NOT share this

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Additional Resources