# 8.27 peinit.operation.started

_Peios / Using Peios / Events / Service Events_

> An operation left the queue and began to run.

- **Event type:** `peinit.operation.started`
- **Defined in:** `peinit.evman`
- **Tier:** verbose
- **Gating:** none — every operation that begins to run is recorded
- **Cardinality:** one record per occurrence

An operation left the queue and began to run.

Formerly `operation.started`.

## 8.27.1 Fields

| Field | Type | Presence | Meaning |
|---|---|---|---|
| [`object.operation.guid`](/peios/using-peios/events/field-index/fields-object.md#object.operation.guid) | `bin.guid` | required | The peinit operation the event is about: a start, stop, restart, reload or reset of one service, from the moment it is requested to the moment it ends. |
| [`object.operation.type`](/peios/using-peios/events/field-index/fields-object.md#object.operation.type) | `str.enum` | required | What the operation does to its service. |
| [`object.operation.source`](/peios/using-peios/events/field-index/fields-object.md#object.operation.source) | `str.enum` | required | Who or what asked for the operation. |
| [`object.operation.state`](/peios/using-peios/events/field-index/fields-object.md#object.operation.state) | `str.enum` | required | Always `running`. |
| [`object.service.name`](/peios/using-peios/events/field-index/fields-object.md#object.service.name) | `str` | required | The name of the service the event is about, as its definition names it. |
| [`subject.token.sid`](/peios/using-peios/events/field-index/fields-subject.md#subject.token.sid) | `bin.sid` | optional | The user SID of the effective token the operation ran under. |
| [`subject.token.groups`](/peios/using-peios/events/field-index/fields-subject.md#subject.token.groups) | `bin.sid[]` | optional | The group SIDs carried by the effective token. |
| [`subject.token.privileges`](/peios/using-peios/events/field-index/fields-subject.md#subject.token.privileges) | `uint.flags` | optional | The privileges the effective token holds, as the flags of its 64-bit privilege word from `uapi/pkm/token.h`: bit n is the privilege whose LUID is n, so `SeDebugPrivilege` is bit 20. |
| [`subject.token.privileges-enabled`](/peios/using-peios/events/field-index/fields-subject.md#subject.token.privileges-enabled) | `uint.flags` | optional | Which of the privileges in `subject.token.privileges` are enabled, as flags in the same bit layout. |

Every record also carries the header fields of [the envelope](/peios/using-peios/events/introduction/the-envelope.md), which no payload repeats.

*Generated from `peinit.evman` by `pkm/tools/gen-events-book.py`. Edit the fragment, not this page.*