MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Creating WSMan shell on server with ResourceUri: %191049046116860184273879081028Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:33:33 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %191049046116860184273879081027Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:33:20 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully1320410246116860184273879061026Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational22841076hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:33:18 AM8a2b943e-a9e4-0005-8709-328ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Activity Transfer254040046116860184273879421025Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational22841076hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:33:18 AM8a2b943e-a9e4-0005-8709-328ae4a9d7018a2b943e-a9e4-0001-2b35-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener145045146116860184273879061024Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational22842352hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:33:18 AM8a2b943e-a9e4-0001-2b35-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully1320410246116860184273879061023Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational2284932hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:33:18 AM8a2b943e-a9e4-0005-8709-328ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener145045146116860184273879061022Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational22842352hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:33:18 AM8a2b943e-a9e4-0005-8709-328ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %191049046116860184273879081021Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:33:14 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.450415246116860184273879061020Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:33:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.480416246116860184273879061019Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:33:01 AM8a2b943e-a9e4-0000-b020-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully1320410246116860184273879061018Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:33:01 AM8a2b943e-a9e4-0000-b020-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.470416146116860184273879061017Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900544hv-cinder-76015S-1-5-189/15/2021 4:33:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..440415146116860184273879061016Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:33:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.450415246116860184273879061015Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:32:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.480416246116860184273879061014Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:32:54 AM8a2b943e-a9e4-0005-4409-328ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully1320410246116860184273879061013Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:32:54 AM8a2b943e-a9e4-0005-4409-328ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.470416146116860184273879061012Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001184hv-cinder-76015S-1-5-189/15/2021 4:32:54 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..440415146116860184273879061011Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:54 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.450415246116860184273879061010Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:32:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.480416246116860184273879061009Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:32:47 AM8a2b943e-a9e4-0001-c734-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully1320410246116860184273879061008Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:32:47 AM8a2b943e-a9e4-0001-c734-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.470416146116860184273879061007Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900676hv-cinder-76015S-1-5-189/15/2021 4:32:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..440415146116860184273879061006Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.450415246116860184273879061005Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:32:45 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.480416246116860184273879061004Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:32:44 AM8a2b943e-a9e4-0000-9220-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully1320410246116860184273879061003Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:32:44 AM8a2b943e-a9e4-0000-9220-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.470416146116860184273879061002Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900176hv-cinder-76015S-1-5-189/15/2021 4:32:44 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..440415146116860184273879061001Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:44 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.450415246116860184273879061000Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:32:43 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906999Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:32:32 AM8a2b943e-a9e4-0003-a55b-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906998Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:32:32 AM8a2b943e-a9e4-0003-a55b-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906997Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004124hv-cinder-76015S-1-5-189/15/2021 4:32:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906996Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906995Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:31 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906994Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:30 AM8a2b943e-a9e4-0004-33d2-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906993Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:30 AM8a2b943e-a9e4-0004-33d2-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906992Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003296hv-cinder-76015S-1-5-189/15/2021 4:32:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906991Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906990Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:32:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906989Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:32:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906988Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:32:29 AM8a2b943e-a9e4-0002-e4ef-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906987Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:32:29 AM8a2b943e-a9e4-0002-e4ef-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906986Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004416hv-cinder-76015S-1-5-189/15/2021 4:32:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906985Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906984Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:28 AM8a2b943e-a9e4-0001-b534-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906983Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:28 AM8a2b943e-a9e4-0001-b534-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906982Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:32:28 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906981Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:28 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906980Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906979Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:24 AM8a2b943e-a9e4-0003-835b-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906978Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:24 AM8a2b943e-a9e4-0003-835b-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906977Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900548hv-cinder-76015S-1-5-189/15/2021 4:32:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906976Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906975Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906974Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906973Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:23 AM8a2b943e-a9e4-0000-6920-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906972Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:23 AM8a2b943e-a9e4-0000-6920-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906971Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001184hv-cinder-76015S-1-5-189/15/2021 4:32:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906970Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906969Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:23 AM8a2b943e-a9e4-0001-a334-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906968Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:23 AM8a2b943e-a9e4-0001-a334-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906967Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:32:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906966Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906965Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:18 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906964Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:18 AM8a2b943e-a9e4-0000-2520-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906963Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:18 AM8a2b943e-a9e4-0000-2520-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906962Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900176hv-cinder-76015S-1-5-189/15/2021 4:32:18 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906961Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:18 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906960Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:32:17 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906959Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:32:17 AM8a2b943e-a9e4-0000-1b20-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906958Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:32:17 AM8a2b943e-a9e4-0000-1b20-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906957Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004984hv-cinder-76015S-1-5-189/15/2021 4:32:17 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906956Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:17 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906955Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906954Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:13 AM8a2b943e-a9e4-0003-645b-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906953Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:13 AM8a2b943e-a9e4-0003-645b-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906952Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:32:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906951Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906950Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906949Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:13 AM8a2b943e-a9e4-0004-6cd1-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906948Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:13 AM8a2b943e-a9e4-0004-6cd1-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906947Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:32:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906946Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906945Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906944Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906943Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:12 AM8a2b943e-a9e4-0004-58d1-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906942Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:12 AM8a2b943e-a9e4-0004-58d1-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906941Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:32:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906940Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906939Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:12 AM8a2b943e-a9e4-0001-8a33-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906938Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:12 AM8a2b943e-a9e4-0001-8a33-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906937Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003936hv-cinder-76015S-1-5-189/15/2021 4:32:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906936Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:32:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906935Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:32:03 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906934Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:54 AM8a2b943e-a9e4-0000-4a1e-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906933Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:54 AM8a2b943e-a9e4-0000-4a1e-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906932Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:31:54 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906931Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:31:54 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906930Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:54 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906929Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:47 AM8a2b943e-a9e4-0004-cacf-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906928Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:47 AM8a2b943e-a9e4-0004-cacf-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906927Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900176hv-cinder-76015S-1-5-189/15/2021 4:31:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906926Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:31:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906925Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906924Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:42 AM8a2b943e-a9e4-0005-5102-328ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906923Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:42 AM8a2b943e-a9e4-0005-5102-328ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906922Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004124hv-cinder-76015S-1-5-189/15/2021 4:31:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906921Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:31:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906920Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:31:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906919Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:31:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906918Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:31:42 AM8a2b943e-a9e4-0001-dd1c-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906917Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:31:42 AM8a2b943e-a9e4-0001-dd1c-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906916Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:31:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906915Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:31:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906914Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:31:42 AM8a2b943e-a9e4-0003-1a5a-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906913Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:31:42 AM8a2b943e-a9e4-0003-1a5a-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906912Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004416hv-cinder-76015S-1-5-189/15/2021 4:31:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906911Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:31:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906910Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906909Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906908Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:22 AM8a2b943e-a9e4-0003-654c-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906907Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:22 AM8a2b943e-a9e4-0003-654c-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906906Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002332hv-cinder-76015S-1-5-189/15/2021 4:31:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906905Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:31:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906904Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:22 AM8a2b943e-a9e4-0004-685f-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906903Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:31:22 AM8a2b943e-a9e4-0004-685f-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906902Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:31:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906901Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:31:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906900Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906899Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906898Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:01 AM8a2b943e-a9e4-0005-1922-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906897Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:01 AM8a2b943e-a9e4-0005-1922-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906896Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900548hv-cinder-76015S-1-5-189/15/2021 4:31:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906895Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:31:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906894Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:01 AM8a2b943e-a9e4-0001-5b39-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906893Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:01 AM8a2b943e-a9e4-0001-5b39-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906892Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003296hv-cinder-76015S-1-5-189/15/2021 4:31:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906891Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:31:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906890Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906889Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:00 AM8a2b943e-a9e4-0000-c5df-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906888Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:00 AM8a2b943e-a9e4-0000-c5df-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906887Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900676hv-cinder-76015S-1-5-189/15/2021 4:31:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906886Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:31:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906885Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:31:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906884Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:30:59 AM8a2b943e-a9e4-0003-fe2f-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906883Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:30:59 AM8a2b943e-a9e4-0003-fe2f-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906882Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900872hv-cinder-76015S-1-5-189/15/2021 4:30:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906881Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906880Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:30:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906879Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:30:58 AM8a2b943e-a9e4-0003-652f-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906878Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:30:58 AM8a2b943e-a9e4-0003-652f-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906877Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003012hv-cinder-76015S-1-5-189/15/2021 4:30:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906876Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906875Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906874Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906873Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906872Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:49 AM8a2b943e-a9e4-0003-0c1a-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906871Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:49 AM8a2b943e-a9e4-0003-0c1a-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906870Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:30:49 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906869Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:49 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906868Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906867Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:47 AM8a2b943e-a9e4-0003-c819-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906866Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:47 AM8a2b943e-a9e4-0003-c819-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906865Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002600hv-cinder-76015S-1-5-189/15/2021 4:30:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906864Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906863Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:41 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906862Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:30 AM8a2b943e-a9e4-0003-b812-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906861Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:30 AM8a2b943e-a9e4-0003-b812-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906860Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900544hv-cinder-76015S-1-5-189/15/2021 4:30:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906859Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906858Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906857Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:18 AM8a2b943e-a9e4-0004-052e-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906856Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:18 AM8a2b943e-a9e4-0004-052e-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906855Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002332hv-cinder-76015S-1-5-189/15/2021 4:30:18 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906854Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:18 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906853Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:17 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906852Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:16 AM8a2b943e-a9e4-0001-00f7-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906851Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:16 AM8a2b943e-a9e4-0001-00f7-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906850Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003936hv-cinder-76015S-1-5-189/15/2021 4:30:16 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906849Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:16 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906848Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906847Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:13 AM8a2b943e-a9e4-0001-eff6-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906846Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:13 AM8a2b943e-a9e4-0001-eff6-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906845Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002332hv-cinder-76015S-1-5-189/15/2021 4:30:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906844Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906843Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906842Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:10 AM8a2b943e-a9e4-0004-9b2d-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906841Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:10 AM8a2b943e-a9e4-0004-9b2d-318ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906840Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:30:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906839Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906838Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:07 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906837Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:07 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906836Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:07 AM8a2b943e-a9e4-0002-d26e-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906835Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:07 AM8a2b943e-a9e4-0002-d26e-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906834Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003012hv-cinder-76015S-1-5-189/15/2021 4:30:07 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906833Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:07 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906832Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:30:07 AM8a2b943e-a9e4-0000-7f89-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906831Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:30:07 AM8a2b943e-a9e4-0000-7f89-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906830Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002332hv-cinder-76015S-1-5-189/15/2021 4:30:07 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906829Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:30:07 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906828Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:30:03 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906827Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:53 AM8a2b943e-a9e4-0003-3a10-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906826Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:53 AM8a2b943e-a9e4-0003-3a10-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906825Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:29:53 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906824Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:53 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906823Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:53 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906822Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:53 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906821Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:53 AM8a2b943e-a9e4-0003-2710-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906820Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:53 AM8a2b943e-a9e4-0003-2710-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906819Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004124hv-cinder-76015S-1-5-189/15/2021 4:29:53 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906818Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:53 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906817Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:53 AM8a2b943e-a9e4-0003-1610-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906816Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:53 AM8a2b943e-a9e4-0003-1610-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906815Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001184hv-cinder-76015S-1-5-189/15/2021 4:29:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906814Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906813Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906812Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:47 AM8a2b943e-a9e4-0000-f985-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906811Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:47 AM8a2b943e-a9e4-0000-f985-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906810Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900548hv-cinder-76015S-1-5-189/15/2021 4:29:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906809Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906808Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:45 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906807Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:44 AM8a2b943e-a9e4-0002-c568-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906806Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:44 AM8a2b943e-a9e4-0002-c568-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906805Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004416hv-cinder-76015S-1-5-189/15/2021 4:29:44 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906804Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:44 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906803Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:43 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906802Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:41 AM8a2b943e-a9e4-0003-f30e-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906801Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:41 AM8a2b943e-a9e4-0003-f30e-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906800Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:29:41 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906799Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:41 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906798Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906797Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:39 AM8a2b943e-a9e4-0004-6f7b-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906796Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:39 AM8a2b943e-a9e4-0004-6f7b-308ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906795Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003012hv-cinder-76015S-1-5-189/15/2021 4:29:39 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906794Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:39 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906793Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:38 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906792Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:36 AM8a2b943e-a9e4-0002-0d66-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906791Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:36 AM8a2b943e-a9e4-0002-0d66-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906790Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002120hv-cinder-76015S-1-5-189/15/2021 4:29:36 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906789Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:36 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906788Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:29:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906787Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:29:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906786Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:29:29 AM8a2b943e-a9e4-0000-0977-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906785Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:29:29 AM8a2b943e-a9e4-0000-0977-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906784Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:29:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906783Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906782Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:29 AM8a2b943e-a9e4-0000-ec76-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906781Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:29 AM8a2b943e-a9e4-0000-ec76-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906780Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:29:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906779Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906778Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906777Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:20 AM8a2b943e-a9e4-0001-ea32-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906776Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:20 AM8a2b943e-a9e4-0001-ea32-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906775Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900676hv-cinder-76015S-1-5-189/15/2021 4:29:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906774Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906773Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906772Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:08 AM8a2b943e-a9e4-0003-76fb-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906771Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:29:08 AM8a2b943e-a9e4-0003-76fb-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906770Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900872hv-cinder-76015S-1-5-189/15/2021 4:29:08 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906769Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:08 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906768Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:08 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906767Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:07 AM8a2b943e-a9e4-0000-916d-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906766Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:07 AM8a2b943e-a9e4-0000-916d-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906765Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:29:07 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906764Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:07 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906763Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:07 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906762Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:06 AM8a2b943e-a9e4-0003-c6f9-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906761Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:29:06 AM8a2b943e-a9e4-0003-c6f9-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906760Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003296hv-cinder-76015S-1-5-189/15/2021 4:29:06 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906759Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:29:06 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906758Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906757Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906756Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:59 AM8a2b943e-a9e4-0000-a065-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906755Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:59 AM8a2b943e-a9e4-0000-a065-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906754Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900676hv-cinder-76015S-1-5-189/15/2021 4:28:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906753Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906752Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:59 AM8a2b943e-a9e4-0003-53f2-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906751Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:59 AM8a2b943e-a9e4-0003-53f2-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906750Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:28:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906749Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906748Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906747Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906746Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:57 AM8a2b943e-a9e4-0000-b363-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906745Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:57 AM8a2b943e-a9e4-0000-b363-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906744Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:28:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906743Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906742Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:57 AM8a2b943e-a9e4-0003-acf0-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906741Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:57 AM8a2b943e-a9e4-0003-acf0-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906740Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:28:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906739Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906738Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906737Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906736Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:32 AM8a2b943e-a9e4-0003-d7bb-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906735Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:32 AM8a2b943e-a9e4-0003-d7bb-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906734Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:28:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906733Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906732Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:32 AM8a2b943e-a9e4-0005-df5b-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906731Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:32 AM8a2b943e-a9e4-0005-df5b-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906730Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:28:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906729Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906728Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906727Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:16 AM8a2b943e-a9e4-0000-2b17-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906726Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:16 AM8a2b943e-a9e4-0000-2b17-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906725Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:28:16 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906724Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:16 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906723Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:16 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906722Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:15 AM8a2b943e-a9e4-0003-5795-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906721Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:15 AM8a2b943e-a9e4-0003-5795-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906720Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001184hv-cinder-76015S-1-5-189/15/2021 4:28:15 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906719Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:15 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906718Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:15 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906717Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:13 AM8a2b943e-a9e4-0000-4316-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906716Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:13 AM8a2b943e-a9e4-0000-4316-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906715Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900548hv-cinder-76015S-1-5-189/15/2021 4:28:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906714Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906713Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906712Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906711Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:12 AM8a2b943e-a9e4-0004-9ee5-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906710Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:12 AM8a2b943e-a9e4-0004-9ee5-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906709Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002120hv-cinder-76015S-1-5-189/15/2021 4:28:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906708Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906707Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:11 AM8a2b943e-a9e4-0002-f1c9-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906706Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:11 AM8a2b943e-a9e4-0002-f1c9-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906705Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900544hv-cinder-76015S-1-5-189/15/2021 4:28:11 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906704Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:11 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906703Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:28:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906702Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906701Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:10 AM8a2b943e-a9e4-0002-c6c9-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906700Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:10 AM8a2b943e-a9e4-0002-c6c9-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906699Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:28:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906698Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906697Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:09 AM8a2b943e-a9e4-0000-ce14-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906696Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:28:09 AM8a2b943e-a9e4-0000-ce14-2f8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906695Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004984hv-cinder-76015S-1-5-189/15/2021 4:28:09 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906694Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:09 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906693Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:08 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906692Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:08 AM8a2b943e-a9e4-0001-d006-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906691Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:08 AM8a2b943e-a9e4-0001-d006-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906690Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:28:08 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906689Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:08 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906688Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:02 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906687Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:01 AM8a2b943e-a9e4-0000-d0ed-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906686Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:01 AM8a2b943e-a9e4-0000-d0ed-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906685Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:28:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906684Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906683Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906682Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:00 AM8a2b943e-a9e4-0003-1d4d-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906681Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:28:00 AM8a2b943e-a9e4-0003-1d4d-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906680Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003296hv-cinder-76015S-1-5-189/15/2021 4:28:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906679Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:28:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906678Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:50 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906677Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:50 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906676Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:50 AM8a2b943e-a9e4-0000-78dd-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906675Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:50 AM8a2b943e-a9e4-0000-78dd-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906674Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:27:50 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906673Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:50 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906672Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:27:50 AM8a2b943e-a9e4-0005-adfb-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906671Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:27:50 AM8a2b943e-a9e4-0005-adfb-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906670Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002600hv-cinder-76015S-1-5-189/15/2021 4:27:50 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906669Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:50 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906668Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906667Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:47 AM8a2b943e-a9e4-0003-7aca-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906666Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:47 AM8a2b943e-a9e4-0003-7aca-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906665Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900872hv-cinder-76015S-1-5-189/15/2021 4:27:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906664Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906663Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:46 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906662Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:46 AM8a2b943e-a9e4-0002-27b5-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906661Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:46 AM8a2b943e-a9e4-0002-27b5-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906660Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004124hv-cinder-76015S-1-5-189/15/2021 4:27:46 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906659Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:46 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906658Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:46 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906657Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:46 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906656Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:46 AM8a2b943e-a9e4-0000-0edb-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906655Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:46 AM8a2b943e-a9e4-0000-0edb-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906654Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:27:46 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906653Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:46 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906652Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:27:46 AM8a2b943e-a9e4-0005-2bf0-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906651Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:27:46 AM8a2b943e-a9e4-0005-2bf0-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906650Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003012hv-cinder-76015S-1-5-189/15/2021 4:27:46 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906649Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:46 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906648Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:45 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906647Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:45 AM8a2b943e-a9e4-0002-91b3-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906646Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:45 AM8a2b943e-a9e4-0002-91b3-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906645Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:27:45 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906644Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:45 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906643Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906642Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:26 AM8a2b943e-a9e4-0000-94bc-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906641Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:26 AM8a2b943e-a9e4-0000-94bc-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906640Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002332hv-cinder-76015S-1-5-189/15/2021 4:27:26 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906639Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:26 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906638Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906637Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:25 AM8a2b943e-a9e4-0004-417e-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906636Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:25 AM8a2b943e-a9e4-0004-417e-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906635Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:27:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906634Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906633Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906632Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:24 AM8a2b943e-a9e4-0005-fd70-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906631Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:24 AM8a2b943e-a9e4-0005-fd70-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906630Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:27:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906629Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906628Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906627Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:22 AM8a2b943e-a9e4-0003-d3be-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906626Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:22 AM8a2b943e-a9e4-0003-d3be-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906625Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900176hv-cinder-76015S-1-5-189/15/2021 4:27:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906624Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906623Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:27:17 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906622Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:27:17 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906621Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:27:17 AM8a2b943e-a9e4-0004-787d-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906620Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:27:17 AM8a2b943e-a9e4-0004-787d-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906619Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:27:17 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906618Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:17 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906617Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:27:17 AM8a2b943e-a9e4-0000-ebb9-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906616Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:27:17 AM8a2b943e-a9e4-0000-ebb9-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906615Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002600hv-cinder-76015S-1-5-189/15/2021 4:27:17 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906614Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:17 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906613Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:11 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906612Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:11 AM8a2b943e-a9e4-0003-90bd-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906611Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:11 AM8a2b943e-a9e4-0003-90bd-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906610Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004984hv-cinder-76015S-1-5-189/15/2021 4:27:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906609Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906608Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906607Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906606Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:00 AM8a2b943e-a9e4-0003-13bc-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906605Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:27:00 AM8a2b943e-a9e4-0003-13bc-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906604Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900872hv-cinder-76015S-1-5-189/15/2021 4:27:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906603Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906602Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:00 AM8a2b943e-a9e4-0003-04bc-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906601Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:00 AM8a2b943e-a9e4-0003-04bc-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906600Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:27:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906599Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906598Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906597Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:00 AM8a2b943e-a9e4-0003-fabb-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906596Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:27:00 AM8a2b943e-a9e4-0003-fabb-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906595Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004984hv-cinder-76015S-1-5-189/15/2021 4:27:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906594Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:27:00 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906593Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906592Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906591Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:58 AM8a2b943e-a9e4-0002-d79f-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906590Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:58 AM8a2b943e-a9e4-0002-d79f-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906589Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:26:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906588Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906587Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:57 AM8a2b943e-a9e4-0003-73bb-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906586Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:57 AM8a2b943e-a9e4-0003-73bb-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906585Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002120hv-cinder-76015S-1-5-189/15/2021 4:26:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906584Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906583Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:26:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906582Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:26:57 AM8a2b943e-a9e4-0002-a29f-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906581Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:26:57 AM8a2b943e-a9e4-0002-a29f-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906580Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900544hv-cinder-76015S-1-5-189/15/2021 4:26:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906579Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906578Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906577Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:56 AM8a2b943e-a9e4-0005-8554-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906576Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:56 AM8a2b943e-a9e4-0005-8554-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906575Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900176hv-cinder-76015S-1-5-189/15/2021 4:26:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906574Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906573Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906572Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:51 AM8a2b943e-a9e4-0005-f347-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906571Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:51 AM8a2b943e-a9e4-0005-f347-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906570Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:26:51 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906569Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:51 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906568Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906567Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:47 AM8a2b943e-a9e4-0004-1475-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906566Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:47 AM8a2b943e-a9e4-0004-1475-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906565Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900544hv-cinder-76015S-1-5-189/15/2021 4:26:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906564Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906563Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906562Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:26:11 AM8a2b943e-a9e4-0003-0268-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906561Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:26:11 AM8a2b943e-a9e4-0003-0268-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906560Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:26:11 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906559Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:11 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906558Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:26:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906557Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:26:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906556Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:26:10 AM8a2b943e-a9e4-0001-1423-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906555Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:26:10 AM8a2b943e-a9e4-0001-1423-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906554Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002120hv-cinder-76015S-1-5-189/15/2021 4:26:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906553Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906552Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:10 AM8a2b943e-a9e4-0003-f565-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906551Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:10 AM8a2b943e-a9e4-0003-f565-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906550Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:26:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906549Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906548Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906547Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:10 AM8a2b943e-a9e4-0004-5f24-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906546Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:10 AM8a2b943e-a9e4-0004-5f24-2e8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906545Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002332hv-cinder-76015S-1-5-189/15/2021 4:26:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906544Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:10 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906543Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:09 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906542Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:09 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906541Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:09 AM8a2b943e-a9e4-0003-ca64-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906540Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:26:09 AM8a2b943e-a9e4-0003-ca64-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906539Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004124hv-cinder-76015S-1-5-189/15/2021 4:26:09 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906538Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:09 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906537Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:09 AM8a2b943e-a9e4-0005-1d6b-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906536Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:09 AM8a2b943e-a9e4-0005-1d6b-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906535Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:26:09 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906534Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:26:09 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906533Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:26:02 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906532Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:25:58 AM8a2b943e-a9e4-0000-e878-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906531Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:25:58 AM8a2b943e-a9e4-0000-e878-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906530Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900548hv-cinder-76015S-1-5-189/15/2021 4:25:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906529Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906528Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906527Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:57 AM8a2b943e-a9e4-0003-1738-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906526Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:57 AM8a2b943e-a9e4-0003-1738-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906525Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004984hv-cinder-76015S-1-5-189/15/2021 4:25:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906524Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906523Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906522Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:56 AM8a2b943e-a9e4-0001-2cb9-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906521Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:56 AM8a2b943e-a9e4-0001-2cb9-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906520Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900544hv-cinder-76015S-1-5-189/15/2021 4:25:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906519Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906518Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:25:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906517Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:25:26 AM8a2b943e-a9e4-0005-ff06-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906516Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:25:26 AM8a2b943e-a9e4-0005-ff06-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906515Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:25:26 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906514Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:26 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906513Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906512Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:24 AM8a2b943e-a9e4-0004-024d-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906511Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:24 AM8a2b943e-a9e4-0004-024d-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906510Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900872hv-cinder-76015S-1-5-189/15/2021 4:25:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906509Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906508Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906507Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:23 AM8a2b943e-a9e4-0002-0c77-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906506Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:23 AM8a2b943e-a9e4-0002-0c77-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906505Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:25:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906504Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906503Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906502Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:22 AM8a2b943e-a9e4-0002-de71-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906501Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:22 AM8a2b943e-a9e4-0002-de71-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906500Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900872hv-cinder-76015S-1-5-189/15/2021 4:25:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906499Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906498Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906497Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906496Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:21 AM8a2b943e-a9e4-0002-6571-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906495Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:21 AM8a2b943e-a9e4-0002-6571-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906494Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:25:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906493Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906492Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:25:20 AM8a2b943e-a9e4-0000-172f-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906491Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:25:20 AM8a2b943e-a9e4-0000-172f-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906490Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:25:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906489Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906488Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906487Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906486Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:14 AM8a2b943e-a9e4-0001-5371-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906485Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:14 AM8a2b943e-a9e4-0001-5371-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906484Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:25:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906483Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906482Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:13 AM8a2b943e-a9e4-0000-1029-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906481Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:25:13 AM8a2b943e-a9e4-0000-1029-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906480Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:25:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906479Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906478Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:25:07 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906477Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:25:04 AM8a2b943e-a9e4-0004-1701-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906476Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:25:04 AM8a2b943e-a9e4-0004-1701-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906475Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900676hv-cinder-76015S-1-5-189/15/2021 4:25:04 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906474Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:25:04 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906473Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:25:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906472Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:59 AM8a2b943e-a9e4-0000-cf10-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906471Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:59 AM8a2b943e-a9e4-0000-cf10-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906470Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:24:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906469Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906468Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:24:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906467Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:55 AM8a2b943e-a9e4-0005-7fc3-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906466Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:55 AM8a2b943e-a9e4-0005-7fc3-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906465Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900872hv-cinder-76015S-1-5-189/15/2021 4:24:55 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906464Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:55 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906463Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906462Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:29 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906461Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:25 AM8a2b943e-a9e4-0002-7d37-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906460Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:25 AM8a2b943e-a9e4-0002-7d37-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906459Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002120hv-cinder-76015S-1-5-189/15/2021 4:24:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906458Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906457Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906456Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:24:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906455Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:24:24 AM8a2b943e-a9e4-0003-428c-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906454Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:24:24 AM8a2b943e-a9e4-0003-428c-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906453Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004124hv-cinder-76015S-1-5-189/15/2021 4:24:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906452Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906451Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:24 AM8a2b943e-a9e4-0001-0135-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906450Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:24 AM8a2b943e-a9e4-0001-0135-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906449Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003012hv-cinder-76015S-1-5-189/15/2021 4:24:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906448Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906447Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:24:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906446Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906445Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:23 AM8a2b943e-a9e4-0003-b88a-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906444Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:23 AM8a2b943e-a9e4-0003-b88a-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906443Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900176hv-cinder-76015S-1-5-189/15/2021 4:24:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906442Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906441Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:23 AM8a2b943e-a9e4-0002-2733-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906440Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:23 AM8a2b943e-a9e4-0002-2733-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906439Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004984hv-cinder-76015S-1-5-189/15/2021 4:24:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906438Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906437Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:23 AM8a2b943e-a9e4-0005-8793-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906436Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:23 AM8a2b943e-a9e4-0005-8793-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906435Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004124hv-cinder-76015S-1-5-189/15/2021 4:24:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906434Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906433Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906432Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:22 AM8a2b943e-a9e4-0002-2c31-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906431Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:22 AM8a2b943e-a9e4-0002-2c31-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906430Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:24:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906429Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:22 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906428Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:24:15 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906427Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:24:14 AM8a2b943e-a9e4-0004-b85e-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906426Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:24:14 AM8a2b943e-a9e4-0004-b85e-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906425Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002332hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906424Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906423Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906422Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906421Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:14 AM8a2b943e-a9e4-0001-8320-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906420Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002364hv-cinder-76015S-1-5-189/15/2021 4:24:14 AM8a2b943e-a9e4-0001-8320-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906419Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002600hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906418Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906417Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:14 AM8a2b943e-a9e4-0002-9829-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906416Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:14 AM8a2b943e-a9e4-0002-9829-2d8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906415Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003296hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906414Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906413Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906412Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:14 AM8a2b943e-a9e4-0001-6220-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906411Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:14 AM8a2b943e-a9e4-0001-6220-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906410Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906409Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906408Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906407Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:24:13 AM8a2b943e-a9e4-0004-df57-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906406Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:24:13 AM8a2b943e-a9e4-0004-df57-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906405Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001184hv-cinder-76015S-1-5-189/15/2021 4:24:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906404Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906403Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906402Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:24:13 AM8a2b943e-a9e4-0005-e77e-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906401Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:24:13 AM8a2b943e-a9e4-0005-e77e-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906400Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002600hv-cinder-76015S-1-5-189/15/2021 4:24:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906399Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:24:13 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906398Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:24:02 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906397Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:24:02 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906396Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:59 AM8a2b943e-a9e4-0001-c51a-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906395Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:59 AM8a2b943e-a9e4-0001-c51a-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906394Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001184hv-cinder-76015S-1-5-189/15/2021 4:23:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906393Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:59 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906392Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906391Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:58 AM8a2b943e-a9e4-0004-0940-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906390Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:58 AM8a2b943e-a9e4-0004-0940-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906389Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900676hv-cinder-76015S-1-5-189/15/2021 4:23:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906388Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906387Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:58 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906386Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:57 AM8a2b943e-a9e4-0004-213f-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906385Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:57 AM8a2b943e-a9e4-0004-213f-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906384Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:23:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906383Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:57 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906382Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906381Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:56 AM8a2b943e-a9e4-0005-9976-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906380Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:56 AM8a2b943e-a9e4-0005-9976-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906379Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003936hv-cinder-76015S-1-5-189/15/2021 4:23:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906378Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906377Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:56 AM8a2b943e-a9e4-0004-bf3d-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906376Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:56 AM8a2b943e-a9e4-0004-bf3d-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906375Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:23:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906374Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906373Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:54 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906372Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:54 AM8a2b943e-a9e4-0002-e2fe-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906371Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:54 AM8a2b943e-a9e4-0002-e2fe-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906370Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003936hv-cinder-76015S-1-5-189/15/2021 4:23:54 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906369Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:54 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906368Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906367Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906366Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:52 AM8a2b943e-a9e4-0001-5416-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906365Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:52 AM8a2b943e-a9e4-0001-5416-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906364Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002600hv-cinder-76015S-1-5-189/15/2021 4:23:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906363Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906362Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:52 AM8a2b943e-a9e4-0002-10fb-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906361Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:52 AM8a2b943e-a9e4-0002-10fb-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906360Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004984hv-cinder-76015S-1-5-189/15/2021 4:23:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906359Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906358Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:52 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906357Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:51 AM8a2b943e-a9e4-0001-2515-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906356Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:51 AM8a2b943e-a9e4-0001-2515-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906355Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:23:51 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906354Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:51 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906353Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:48 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906352Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:48 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906351Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:47 AM8a2b943e-a9e4-0002-3be3-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906350Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:47 AM8a2b943e-a9e4-0002-3be3-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906349Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900544hv-cinder-76015S-1-5-189/15/2021 4:23:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906348Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906347Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:47 AM8a2b943e-a9e4-0005-6163-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906346Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:47 AM8a2b943e-a9e4-0005-6163-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906345Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004124hv-cinder-76015S-1-5-189/15/2021 4:23:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906344Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:47 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906343Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:41 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906342Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:41 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906341Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:41 AM8a2b943e-a9e4-0002-31bf-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906340Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:41 AM8a2b943e-a9e4-0002-31bf-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906339Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002120hv-cinder-76015S-1-5-189/15/2021 4:23:41 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906338Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:41 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906337Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:41 AM8a2b943e-a9e4-0002-0ebf-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906336Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:41 AM8a2b943e-a9e4-0002-0ebf-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906335Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:23:41 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906334Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:41 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906333Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:40 AM8a2b943e-a9e4-0000-0172-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906332Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:40 AM8a2b943e-a9e4-0000-0172-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906331Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906330Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906329Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906328Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906327Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:40 AM8a2b943e-a9e4-0002-acb7-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906326Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:40 AM8a2b943e-a9e4-0002-acb7-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906325Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906324Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906323Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:40 AM8a2b943e-a9e4-0000-ab70-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906322Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:40 AM8a2b943e-a9e4-0000-ab70-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906321Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906320Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906319Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906318Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:40 AM8a2b943e-a9e4-0002-d1b6-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906317Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:40 AM8a2b943e-a9e4-0002-d1b6-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906316Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002120hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906315Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906314Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:40 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906313Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:39 AM8a2b943e-a9e4-0003-a6fe-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906312Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:39 AM8a2b943e-a9e4-0003-a6fe-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906311Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004984hv-cinder-76015S-1-5-189/15/2021 4:23:39 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906310Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:39 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906309Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906308Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:32 AM8a2b943e-a9e4-0002-fe48-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906307Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:32 AM8a2b943e-a9e4-0002-fe48-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906306Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002120hv-cinder-76015S-1-5-189/15/2021 4:23:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906305Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:32 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906304Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906303Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906302Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:30 AM8a2b943e-a9e4-0004-41cf-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906301Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:30 AM8a2b943e-a9e4-0004-41cf-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.47041614611686018427387906300Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004984hv-cinder-76015S-1-5-189/15/2021 4:23:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906299Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906298Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:30 AM8a2b943e-a9e4-0004-35cf-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906297Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:30 AM8a2b943e-a9e4-0004-35cf-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.47041614611686018427387906296Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:23:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906295Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906294Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:27 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906293Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:26 AM8a2b943e-a9e4-0001-15c3-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906292Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:26 AM8a2b943e-a9e4-0001-15c3-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906291Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:23:26 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906290Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:26 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906289Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906288Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:25 AM8a2b943e-a9e4-0002-f1fc-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906287Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:25 AM8a2b943e-a9e4-0002-f1fc-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906286Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900544hv-cinder-76015S-1-5-189/15/2021 4:23:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906285Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906284Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906283Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:25 AM8a2b943e-a9e4-0001-02c2-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906282Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:25 AM8a2b943e-a9e4-0001-02c2-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906281Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001924hv-cinder-76015S-1-5-189/15/2021 4:23:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906280Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:25 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906279Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906278Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:23 AM8a2b943e-a9e4-0002-4fed-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906277Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:23 AM8a2b943e-a9e4-0002-4fed-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906276Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004896hv-cinder-76015S-1-5-189/15/2021 4:23:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906275Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:23 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906274Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:20 AM8a2b943e-a9e4-0001-cbb9-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906273Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:20 AM8a2b943e-a9e4-0001-cbb9-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906272Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906271Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002120hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906270Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906269Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:20 AM8a2b943e-a9e4-0000-a406-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906268Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:20 AM8a2b943e-a9e4-0000-a406-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906267Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001796hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906266Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906265Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002464hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906264Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906263Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:20 AM8a2b943e-a9e4-0000-9706-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906262Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:20 AM8a2b943e-a9e4-0000-9706-2c8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906261Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004124hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906260Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906259Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:20 AM8a2b943e-a9e4-0002-cec8-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906258Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:20 AM8a2b943e-a9e4-0002-cec8-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906257Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906256Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:20 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906255Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:15 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906254Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:15 AM8a2b943e-a9e4-0001-d3b1-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906253Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:15 AM8a2b943e-a9e4-0001-d3b1-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906252Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004124hv-cinder-76015S-1-5-189/15/2021 4:23:15 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906251Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:15 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906250Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:15 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906249Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:14 AM8a2b943e-a9e4-0004-20aa-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906248Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:23:14 AM8a2b943e-a9e4-0004-20aa-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906247Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003012hv-cinder-76015S-1-5-189/15/2021 4:23:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906246Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906245Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906244Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:14 AM8a2b943e-a9e4-0001-2cb1-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906243Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:23:14 AM8a2b943e-a9e4-0001-2cb1-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906242Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004416hv-cinder-76015S-1-5-189/15/2021 4:23:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906241Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:14 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906240Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:23:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906239Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:23:12 AM8a2b943e-a9e4-0004-cfa6-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906238Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:23:12 AM8a2b943e-a9e4-0004-cfa6-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906237Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:23:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906236Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906235Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:23:12 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906234Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:23:11 AM8a2b943e-a9e4-0001-08b0-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906233Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:23:11 AM8a2b943e-a9e4-0001-08b0-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906232Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002600hv-cinder-76015S-1-5-189/15/2021 4:23:11 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906231Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:23:11 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906230Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:22:54 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906229Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:22:51 AM8a2b943e-a9e4-0001-baaf-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906228Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:22:51 AM8a2b943e-a9e4-0001-baaf-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906227Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:22:51 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906226Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:22:51 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906225Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:51 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906224Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:49 AM8a2b943e-a9e4-0000-d1ef-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906223Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:49 AM8a2b943e-a9e4-0000-d1ef-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906222Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49002120hv-cinder-76015S-1-5-189/15/2021 4:22:49 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906221Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:22:49 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906220Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:49 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906219Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:48 AM8a2b943e-a9e4-0003-82a6-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906218Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:48 AM8a2b943e-a9e4-0003-82a6-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906217Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004984hv-cinder-76015S-1-5-189/15/2021 4:22:48 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906216Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:22:48 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906215Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:44 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906214Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:43 AM8a2b943e-a9e4-0002-27a4-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906213Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:43 AM8a2b943e-a9e4-0002-27a4-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906212Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49003296hv-cinder-76015S-1-5-189/15/2021 4:22:43 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906211Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:22:43 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906210Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906209Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:42 AM8a2b943e-a9e4-0000-bcef-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906208Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001632hv-cinder-76015S-1-5-189/15/2021 4:22:42 AM8a2b943e-a9e4-0000-bcef-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.47041614611686018427387906207Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49001960hv-cinder-76015S-1-5-189/15/2021 4:22:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906206Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:22:42 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906205Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:22:38 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906204Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:22:37 AM8a2b943e-a9e4-0003-44a6-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906203Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49005108hv-cinder-76015S-1-5-189/15/2021 4:22:37 AM8a2b943e-a9e4-0003-44a6-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906202Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900676hv-cinder-76015S-1-5-189/15/2021 4:22:37 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906201Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:22:37 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.45041524611686018427387906200Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:22:33 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.48041624611686018427387906199Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:22:33 AM8a2b943e-a9e4-0001-34af-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully132041024611686018427387906198Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational4900776hv-cinder-76015S-1-5-189/15/2021 4:22:33 AM8a2b943e-a9e4-0001-34af-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.47041614611686018427387906197Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004324hv-cinder-76015S-1-5-189/15/2021 4:22:33 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI OperationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..44041514611686018427387906196Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:22:33 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI SessionSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler has began loading for application <none>.41041414611686018427387906195Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational49004320hv-cinder-76015S-1-5-189/15/2021 4:22:33 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinRM MI Protocol HandlerSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908194Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:41 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908193Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:38 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908192Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:36 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908191Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:33 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908190Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:30 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908189Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:28 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908188Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:25 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908187Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:23 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908186Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:20 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908185Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:17 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully132041024611686018427387906184Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational43881468hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:14 AM8a2b943e-a9e4-0005-afe4-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Activity Transfer25404004611686018427387942183Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational43881468hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:14 AM8a2b943e-a9e4-0005-afe4-2b8ae4a9d7018a2b943e-a9e4-0005-b1e4-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener14504514611686018427387906182Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational43882272hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:14 AM8a2b943e-a9e4-0005-b1e4-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully132041024611686018427387906181Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational43881468hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:14 AM8a2b943e-a9e4-0005-afe4-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener14504514611686018427387906180Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational43882272hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:14 AM8a2b943e-a9e4-0005-afe4-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908179Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:21:10 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908178Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:20:26 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully132041024611686018427387906177Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational47524404hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:20:19 AM8a2b943e-a9e4-0003-88a3-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Activity Transfer25404004611686018427387942176Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational47524404hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:20:19 AM8a2b943e-a9e4-0003-88a3-2b8ae4a9d7018a2b943e-a9e4-0003-89a3-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener14504514611686018427387906175Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational47524100hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:20:19 AM8a2b943e-a9e4-0003-89a3-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully132041024611686018427387906174Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational47523872hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:20:19 AM8a2b943e-a9e4-0003-88a3-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener14504514611686018427387906173Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational47524100hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:20:19 AM8a2b943e-a9e4-0003-88a3-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908172Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:20:15 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908171Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:10:43 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908170Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:10:39 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908169Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443492hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:10:04 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908168Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:10:00 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908167Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:09:57 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908166Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:09:52 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908165Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:09:38 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908164Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:09:34 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908163Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:09:31 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908162Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:09:26 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908161Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:08:38 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908160Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:08:35 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908159Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:08:32 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908158Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:08:27 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908157Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:08:13 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908156Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:08:10 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908155Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:08:07 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908154Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:08:02 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908153Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:07:13 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908152Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:07:09 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908151Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:07:06 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908150Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:07:01 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908149Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:04:12 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908148Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:04:08 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908147Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:04:05 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908146Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:04:00 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908145Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:03:36 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908144Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:03:33 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908143Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:03:15 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908142Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:03:07 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908141Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:03:03 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908140Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 4:02:57 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908139Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:56:34 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908138Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:56:29 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908137Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:56:27 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908136Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:43 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908135Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:41 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908134Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:39 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908133Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:37 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908132Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:34 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908131Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:32 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908130Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:30 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908129Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:29 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908128Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:23 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908127Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:21 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908126Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:20 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908125Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:16 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908124Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441384hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:54:14 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908123Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:53:41 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908122Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:53:38 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908121Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:53:37 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908120Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:53:32 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908119Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:53:18 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908118Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441928hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:53:13 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908117Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:53:11 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908116Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:53:10 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908115Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:51:34 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908114Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:51:31 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908113Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:51:30 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908112Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:51:28 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908111Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:51:25 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908110Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:51:23 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908109Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13443912hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:51:22 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908108Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442644hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:51:17 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908107Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441704hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:51:00 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908106Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational1344368hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:57 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908105Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:55 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908104Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441972hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:54 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908103Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441972hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:45 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908102Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441712hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:34 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908101Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441972hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:29 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %19104904611686018427387908100Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:15 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1910490461168601842738790899Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441972hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:11 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1910490461168601842738790898Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441708hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:09 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790697Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14763868hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:06 AM8a2b943e-a9e4-0004-ab95-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Activity Transfer2540400461168601842738794296Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14763868hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:06 AM8a2b943e-a9e4-0004-ab95-2b8ae4a9d7018a2b943e-a9e4-0004-ad95-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener1450451461168601842738790695Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14762012hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:06 AM8a2b943e-a9e4-0004-ad95-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790694Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14761880hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:06 AM8a2b943e-a9e4-0004-ab95-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener1450451461168601842738790693Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14762012hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:50:06 AM8a2b943e-a9e4-0004-ab95-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1910490461168601842738790892Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441388hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:49:53 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1910490461168601842738790891Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13441716hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10019/15/2021 3:49:41 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoRequest handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Create completed successfully13204102461168601842738790690Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31404036hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Create started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/certmapping1450451461168601842738790689Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31404040hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get failed, error code 215085875214202102461168601842738790688Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31402460hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/certmapping1450451461168601842738790687Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31404040hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Put completed successfully13204102461168601842738790686Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31403704hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Put started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/Auth1450451461168601842738790685Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31404040hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get completed successfully13204102461168601842738790684Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31403700hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/Auth1450451461168601842738790683Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31404040hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get completed successfully13204102461168601842738790682Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31403700hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener1450451461168601842738790681Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31404040hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Create completed successfully13204102461168601842738790680Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31402460hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Create started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener1450451461168601842738790679Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31404040hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get failed, error code 215085875214202102461168601842738790678Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31403704hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener1450451461168601842738790677Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31404040hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Put completed successfully13204102461168601842738790676Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31403704hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:35 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Put started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/Auth1450451461168601842738790675Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31404040hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:34 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get completed successfully13204102461168601842738790674Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31403704hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:34 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/Auth1450451461168601842738790673Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational31404040hv-cinder-76015S-1-5-21-691303157-3375843911-3308054126-10009/15/2021 3:49:34 AM8a2b943e-a9e4-0003-be94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790872Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442544hv-cinder-76015S-1-5-209/15/2021 3:48:48 AM8a2b943e-a9e4-0004-7e94-2b8ae4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790871Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13442544hv-cinder-76015S-1-5-209/15/2021 3:48:48 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790870Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational17161788hv-cinder-76015S-1-5-209/15/2021 3:48:18 AM5117daed-a9e4-0005-16db-1751e4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790869Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational17161788WIN-5T344G8GM1HS-1-5-209/15/2021 3:48:18 AM5117daed-a9e4-0005-16db-1751e4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790868Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational17162152WIN-5T344G8GM1HS-1-5-209/15/2021 3:47:24 AM5117daed-a9e4-0005-16db-1751e4a9d701microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790867Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational17162152WIN-5T344G8GM1HS-1-5-209/15/2021 3:47:24 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790866Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13921500WIN-5T344G8GM1HS-1-5-201/19/2018 9:48:13 AMad8d0f9c-9109-0001-d70f-8dad0991d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790865Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13921500WIN-5T344G8GM1HS-1-5-201/19/2018 9:48:13 AMad8d0f9c-9109-0001-d70f-8dad0991d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Invoke completed successfully13204102461168601842738790664Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational41043660WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:42:51 AMad8d0f9c-9109-0003-3f12-8dad0991d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Invoke started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/service1450451461168601842738790663Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational41043176WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:42:51 AMad8d0f9c-9109-0003-3f12-8dad0991d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790862Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13922176WIN-5T344G8GM1HS-1-5-201/19/2018 9:41:30 AMad8d0f9c-9109-0001-d70f-8dad0991d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790861Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13922176WIN-5T344G8GM1HS-1-5-201/19/2018 9:41:30 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790860Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational15243416WIN-5T344G8GM1HS-1-5-201/19/2018 9:41:15 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790859Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational15243416WIN-5T344G8GM1HS-1-5-201/19/2018 9:41:15 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790858Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational15242212WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:16 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790857Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational15242212WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:16 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790856Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14042004WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:00 AM96ed06e7-9107-0002-2807-ed960791d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790855Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14042004WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:00 AM96ed06e7-9107-0002-2807-ed960791d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790854Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14042284WIN-5T344G8GM1HS-1-5-201/19/2018 9:26:41 AM96ed06e7-9107-0002-2807-ed960791d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790853Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14042284WIN-5T344G8GM1HS-1-5-201/19/2018 9:26:41 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790852Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14641192WIN-5T344G8GM1HS-1-5-201/19/2018 9:26:23 AM17f2f0cc-9107-0000-03f1-f2170791d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790851Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14641192WIN-5T344G8GM1HS-1-5-201/19/2018 9:26:23 AM17f2f0cc-9107-0000-03f1-f2170791d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790850Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14642152WIN-5T344G8GM1HS-1-5-201/19/2018 9:23:01 AM17f2f0cc-9107-0000-03f1-f2170791d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790849Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14642152WIN-5T344G8GM1HS-1-5-201/19/2018 9:23:01 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790848Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14603948WIN-5T344G8GM1HS-1-5-201/19/2018 9:22:50 AM289cfce6-9103-0003-08fd-9c280391d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790847Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14603948WIN-5T344G8GM1HS-1-5-201/19/2018 9:22:50 AM289cfce6-9103-0003-08fd-9c280391d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790846Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14602148WIN-5T344G8GM1HS-1-5-201/19/2018 8:54:49 AM289cfce6-9103-0003-08fd-9c280391d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790845Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14602148WIN-5T344G8GM1HS-1-5-201/19/2018 8:54:49 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790844Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational15241916WIN-5T344G8GM1HS-1-5-201/19/2018 8:54:40 AM7c5c4ffb-9102-0002-1f50-5c7c0291d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790843Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational15241916WIN-5T344G8GM1HS-1-5-201/19/2018 8:54:40 AM7c5c4ffb-9102-0002-1f50-5c7c0291d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790642Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11922028WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:27 AM7c5c4ffb-9102-0000-4a51-5c7c0291d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/windows/shell1450451461168601842738790641Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11923004WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:27 AM7c5c4ffb-9102-0000-4a51-5c7c0291d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790640Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11922632WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:27 AM7c5c4ffb-9102-0000-4a51-5c7c0291d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener1450451461168601842738790639Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11923004WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:27 AM7c5c4ffb-9102-0000-4a51-5c7c0291d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790838Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational15242156WIN-5T344G8GM1HS-1-5-201/19/2018 8:50:03 AM7c5c4ffb-9102-0002-1f50-5c7c0291d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790837Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational15242156WIN-5T344G8GM1HS-1-5-201/19/2018 8:50:03 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790836Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13322544WIN-5T344G8GM1HS-1-5-201/19/2018 8:49:46 AM9a81cb05-910f-0003-3ccb-819a0f91d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790835Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13322544WIN-5T344G8GM1HS-1-5-201/19/2018 8:49:46 AM9a81cb05-910f-0003-3ccb-819a0f91d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790634Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9645108WIN-5T344G8GM1HS-1-5-181/19/2018 8:26:55 AM9a81cb05-910f-0003-8acc-819a0f91d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/windows/shell1450451461168601842738790633Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9644228WIN-5T344G8GM1HS-1-5-181/19/2018 8:26:55 AM9a81cb05-910f-0003-8acc-819a0f91d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790632Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9642904WIN-5T344G8GM1HS-1-5-181/19/2018 8:26:55 AM9a81cb05-910f-0003-8acc-819a0f91d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener1450451461168601842738790631Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9644228WIN-5T344G8GM1HS-1-5-181/19/2018 8:26:55 AM9a81cb05-910f-0003-8acc-819a0f91d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790830Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13321772WIN-5T344G8GM1HS-1-5-201/19/2018 8:23:56 AM9a81cb05-910f-0003-3ccb-819a0f91d301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790829Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational13321772WIN-5T344G8GM1HS-1-5-201/19/2018 8:23:56 AMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790828Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14201824WIN-5T344G8GM1HS-1-5-201/16/2018 6:44:39 PMb65c0852-8ef4-0001-7408-5cb6f48ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790827Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14201824WIN-5T344G8GM1HS-1-5-201/16/2018 6:44:39 PMb65c0852-8ef4-0001-7408-5cb6f48ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790826Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14201464WIN-5T344G8GM1HS-1-5-201/16/2018 6:06:25 PMb65c0852-8ef4-0001-7408-5cb6f48ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790825Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14201464WIN-5T344G8GM1HS-1-5-201/16/2018 6:06:24 PMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790824Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14001792WIN-5T344G8GM1HS-1-5-201/16/2018 6:06:09 PM53b2b737-8ef1-0002-53b7-b253f18ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790823Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14001792WIN-5T344G8GM1HS-1-5-201/16/2018 6:06:09 PM53b2b737-8ef1-0002-53b7-b253f18ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790622Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11522472WIN-5T344G8GM1HS-1-5-181/16/2018 5:44:23 PM53b2b737-8ef1-0000-6db9-b253f18ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/windows/shell1450451461168601842738790621Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11524780WIN-5T344G8GM1HS-1-5-181/16/2018 5:44:23 PM53b2b737-8ef1-0000-6db9-b253f18ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790620Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11522624WIN-5T344G8GM1HS-1-5-181/16/2018 5:44:23 PM53b2b737-8ef1-0000-6db9-b253f18ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener1450451461168601842738790619Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11524780WIN-5T344G8GM1HS-1-5-181/16/2018 5:44:23 PM53b2b737-8ef1-0000-6db9-b253f18ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully20904110461168601842738790818Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14002064WIN-5T344G8GM1HS-1-5-201/16/2018 5:42:11 PM53b2b737-8ef1-0002-53b7-b253f18ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting20804111461168601842738790817Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational14002064WIN-5T344G8GM1HS-1-5-201/16/2018 5:42:11 PMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully21204112461168601842738790816Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11401660WIN-5T344G8GM1HS-1-5-201/16/2018 5:41:56 PMa4626349-8ea8-0002-0e64-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping21104110461168601842738790815Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11401660WIN-5T344G8GM1HS-1-5-201/16/2018 5:41:55 PMa4626349-8ea8-0002-0e64-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790614Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9241564WIN-5T344G8GM1HS-1-5-181/16/2018 5:34:06 PMa4626349-8ea8-0003-b36d-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/windows/shell1450451461168601842738790613Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9243696WIN-5T344G8GM1HS-1-5-181/16/2018 5:34:06 PMa4626349-8ea8-0003-b36d-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790612Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9242368WIN-5T344G8GM1HS-1-5-181/16/2018 5:34:06 PMa4626349-8ea8-0003-b36d-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener1450451461168601842738790611Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9243696WIN-5T344G8GM1HS-1-5-181/16/2018 5:34:06 PMa4626349-8ea8-0003-b36d-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully13204102461168601842738790610Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9242888WIN-5T344G8GM1HS-1-5-181/16/2018 5:06:17 PMa4626349-8ea8-0000-8a6d-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/windows/shell145045146116860184273879069Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9241992WIN-5T344G8GM1HS-1-5-181/16/2018 5:06:17 PMa4626349-8ea8-0000-8a6d-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully1320410246116860184273879068Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9242480WIN-5T344G8GM1HS-1-5-181/16/2018 5:06:17 PMa4626349-8ea8-0000-8a6d-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopResponse handlingSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener145045146116860184273879067Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational9241992WIN-5T344G8GM1HS-1-5-181/16/2018 5:06:17 PMa4626349-8ea8-0000-8a6d-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWSMan API callSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully2090411046116860184273879086Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11402088WIN-5T344G8GM1HS-1-5-201/16/2018 5:01:59 PMa4626349-8ea8-0002-0e64-62a4a88ed301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting2080411146116860184273879085Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational11402088WIN-5T344G8GM1HS-1-5-201/16/2018 5:01:59 PMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully2120411246116860184273879084Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational16441380WIN-PD8DQPRRTAOS-1-5-201/16/2018 5:01:16 PM60e27e42-8f3f-0001-c27e-e2603f8fd301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping2110411046116860184273879083Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational16441380WIN-PD8DQPRRTAOS-1-5-201/16/2018 5:01:16 PM60e27e42-8f3f-0001-c27e-e2603f8fd301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is unable to start because of a failure during initialization. The error code is 22100211246116860184273879082Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational16441380WIN-PD8DQPRRTAOS-1-5-201/16/2018 5:01:16 PM60e27e42-8f3f-0001-c27e-e2603f8fd301microsoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorStopWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting2080411146116860184273879081Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417Microsoft-Windows-WinRM/Operational16441380WIN-PD8DQPRRTAOS-1-5-201/16/2018 5:01:16 PMmicrosoft-windows-winrm/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartWinrm service start/stopSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]