Windows Security Log Event ID 5147

Operating Systems Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019
Category
 • Subcategory
System
 • Other System Events
Type Failure
Corresponding events
in Windows 2003
and before
 
Discussions on Event ID 5147
Ask a question about this event

5147: A more restrictive Windows Filtering Platform filter has blocked a packet

On this page

This event is new to Server 2012. It does not appear in earlier versions.

I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.

Free Security Log Resources by Randy

Supercharger Free Edition


Your entire Windows Event Collection environment on a single pane of glass.

Free.

 

Examples of 5147

A more restrictive Windows Filtering Platform filter has blocked a packet.

Network Information:
    Direction:        %1
    Source Address:    %2
    Destination Address:    %3
    EtherType:        %4
    VlanTag:        %5
    vSwitchId:        %6
    Source vSwitch Port:        %7
    Destination vSwitch Port:    %8

Filter Information:
    Filter Run-Time ID:    %9
    Layer Name:        %10
    Layer Run-Time ID:    %11

Keep me up-to-date on the Windows Security Log.
Email*:
*We will NOT share this

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection



 

Additional Resources