Log Name:      System
Source:        Microsoft-Windows-WAS
Date:          3/16/2021 11:03:01 PM
Event ID:      5002
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      servername
Description:
Application pool 'SP2016WebAppPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WAS" Guid="{524B5D04-133C-4A62-8362-64E8EDB9CE40}" EventSourceName="WAS" />
    <EventID Qualifiers="49152">5002</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-03-17T04:03:01.000000000Z" />
    <EventRecordID>1082657</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>servername</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="AppPoolID">SP2016WebAppPool</Data>
    <Binary>
    </Binary>
  </EventData>
</Event>


==>

Log Name:      System
Source:        Microsoft-Windows-WAS
Date:          3/16/2021 11:03:01 PM
Event ID:      5203
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      servername
Description:
A process serving application pool 'SP2016WebAppPool' reported a failure trying to read configuration during startup. The process id was '19680'.  Please check the Application Event Log for further event messages logged by the worker process on the specific error.  The data field contains the error number.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WAS" Guid="{524B5D04-133C-4A62-8362-64E8EDB9CE40}" EventSourceName="WAS" />
    <EventID Qualifiers="49152">5203</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-03-17T04:03:01.000000000Z" />
    <EventRecordID>1082654</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>servername</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="AppPoolID">SP2016WebAppPool</Data>
    <Data Name="ProcessID">19680</Data>
    <Binary>05400080</Binary>
  </EventData>
</Event>

==>

Log Name:      Application
Source:        Microsoft-SharePoint Products-SharePoint Foundation
Date:          3/16/2021 11:46:34 PM
Event ID:      8356
Task Category: General
Level:         Information
Keywords:      
User:          ENT\sp2016PwebApp
Computer:      servername
Description:
SharePoint booted. Process Name: [w3wp] App Pool: [SP2016WebAppPool], Process ID: [0x48BC], App Domain Name and ID [/LM/W3SVC/1883693570/ROOT-3-132604299921637066],[52], Command Line [c:\windows\system32\inetsrv\w3wp.exe -ap "SP2016WebAppPool" -v "v4.0" -l "webengine4.dll" -a \\.\pipe\iisipm7c10359e-daa4-4bcb-9e5b-40bded0f5247 -h "C:\inetpub\temp\apppools\SP2016WebAppPool\SP2016WebAppPool.config" -w "" -m 0]
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-SharePoint Products-SharePoint Foundation" Guid="{6FB7E0CD-52E7-47DD-997A-241563931FC2}" />
    <EventID>8356</EventID>
    <Version>16</Version>
    <Level>4</Level>
    <Task>7</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2021-03-17T04:46:34.570018500Z" />
    <EventRecordID>763497</EventRecordID>
    <Correlation />
    <Execution ProcessID="18620" ThreadID="2664" />
    <Channel>Application</Channel>
    <Computer>servername</Computer>
    <Security UserID="S-1-5-21-1315882459-817801392-1359842108-966957" />
  </System>
  <EventData>
    <Data Name="string0">w3wp</Data>
    <Data Name="string1">SP2016WebAppPool</Data>
    <Data Name="hex2">0x48bc</Data>
    <Data Name="string3">/LM/W3SVC/1883693570/ROOT-3-132604299921637066</Data>
    <Data Name="int4">52</Data>
    <Data Name="string5">c:\windows\system32\inetsrv\w3wp.exe -ap "SP2016WebAppPool" -v "v4.0" -l "webengine4.dll" -a \\.\pipe\iisipm7c10359e-daa4-4bcb-9e5b-40bded0f5247 -h "C:\inetpub\temp\apppools\SP2016WebAppPool\SP2016WebAppPool.config" -w "" -m 0</Data>
  </EventData>
</Event>

==>
Log Name:      Application
Source:        Microsoft-Windows-IIS-W3SVC-WP
Date:          3/16/2021 11:03:01 PM
Event ID:      2307
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      servername
Description:
The worker process for application pool 'SP2016WebAppPool' encountered an error '' trying to read configuration data from file '\\?\C:\inetpub\temp\apppools\SP2016WebAppPool\SP2016WebAppPool.config', line number '0'.  The data field contains the error code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-IIS-W3SVC-WP" Guid="{670080D9-742A-4187-8D16-41143D1290BD}" EventSourceName="W3SVC-WP" />
    <EventID Qualifiers="49152">2307</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2021-03-17T04:03:01.000000000Z" />
    <EventRecordID>763425</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>servername</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="ApplicationPool">SP2016WebAppPool</Data>
    <Data Name="ConfigException">
    </Data>
    <Data Name="FileName">\\?\C:\inetpub\temp\apppools\SP2016WebAppPool\SP2016WebAppPool.config</Data>
    <Data Name="LineNumber">0</Data>
    <Binary>08000000</Binary>
  </EventData>
</Event>