3.2.4 Higher-Layer Triggered Events

msdn link

The only higher-layer triggered events required by the protocol are the generation of the reporting events as specified in the EventID table of ReportEventBatch (section 2.2.2.3.1). The client SHOULD send these events up after a small random delay in order to allow events to be batched together, which improves network, client, and server performance.<57>

Other higher-layer triggers are up to the implementation.