Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
iSCSI initiator iqn.1991-05.com.microsoft:hv-cinder-77819 logged off of the iSCSI target.	21	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3836	hv-cinder-77819	S-1-5-18	5/11/2022 7:38:15 AM	0fc6442e-64fe-0000-de75-c90ffe64d801		microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
iSCSI initiator iqn.1991-05.com.microsoft:hv-cinder-77819 successfully logged on to the iSCSI target.	20	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3840	hv-cinder-77819	S-1-5-18	5/11/2022 7:36:31 AM	0fc6442e-64fe-0001-9e1a-c90ffe64d801		microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service successfully initialized iSCSI target iqn.2010-10.org.openstack:volume-e855b1a3-9a7c-436f-b220-36384eab0865.	68	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 7:36:28 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
iSCSI initiator iqn.1991-05.com.microsoft:hv-cinder-77819 logged off of the iSCSI target.	21	0		4	0	0	-9223372036854775808	26	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3832	hv-cinder-77819	S-1-5-18	5/11/2022 7:36:25 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
iSCSI initiator iqn.1991-05.com.microsoft:hv-cinder-77819 successfully logged on to the iSCSI target.	20	0		4	0	0	-9223372036854775808	25	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3840	hv-cinder-77819	S-1-5-18	5/11/2022 7:33:37 AM	0fc6442e-64fe-0001-87f8-c80ffe64d801		microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service successfully initialized iSCSI target iqn.2010-10.org.openstack:volume-e855b1a3-9a7c-436f-b220-36384eab0865.	68	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 7:33:34 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service successfully initialized virtual disk 790720489 located at C:\iSCSIVHDLocation\volume-e855b1a3-9a7c-436f-b220-36384eab0865.VHDX.	14	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 7:33:30 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Virtual Disk 790720489 has been disabled.	48	0		3	0	0	-9223372036854775808	22	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 7:33:13 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service successfully initialized virtual disk 507681304 located at C:\iSCSIVHDLocation\volume-f1d5eea4-af96-4279-bac6-c898d0609cc7.VHDX.	14	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 7:29:59 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Virtual Disk 507681304 has been disabled.	48	0		3	0	0	-9223372036854775808	20	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 7:29:54 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service successfully initialized iSCSI target iqn.2010-10.org.openstack:volume-b73c1f5d-0d33-426d-9e54-e0f58b90563f.	68	0		4	0	0	-9223372036854775808	19	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 7:29:45 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service successfully initialized virtual disk 1065116486 located at C:\iSCSIVHDLocation\volume-572e747b-893a-4b14-8a94-51b40345635b.VHDX.	14	0		4	0	0	-9223372036854775808	18	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 6:58:08 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Virtual Disk 1065116486 has been disabled.	48	0		3	0	0	-9223372036854775808	17	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 6:58:01 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service successfully initialized virtual disk 989192345 located at C:\iSCSIVHDLocation\volume-beb5e46c-a5fd-4c86-9d84-44315e29ae21.VHDX.	14	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 6:57:28 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Virtual Disk 989192345 has been disabled.	48	0		3	0	0	-9223372036854775808	15	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 6:57:20 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service successfully initialized virtual disk 193525075 located at C:\iSCSIVHDLocation\volume-f400aad3-4491-423e-90a2-4536ed18a401.VHDX.	14	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 6:57:12 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
iSCSI initiator iqn.1991-05.com.microsoft:hv-cinder-77819 logged off of the iSCSI target.	21	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3836	hv-cinder-77819	S-1-5-18	5/11/2022 6:57:00 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Virtual Disk 193525075 has been disabled.	48	0		3	0	0	-9223372036854775808	12	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3380	hv-cinder-77819	S-1-5-18	5/11/2022 6:56:58 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
iSCSI initiator iqn.1991-05.com.microsoft:hv-cinder-77819 successfully logged on to the iSCSI target.	20	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	3840	hv-cinder-77819	S-1-5-18	5/11/2022 6:56:21 AM	0fc6442e-64fe-0003-4269-c60ffe64d801		microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service successfully initialized iSCSI target iqn.2010-10.org.openstack:volume-fd101756-7383-47b2-b3fe-aa2f1bb05c15.	68	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	2084	hv-cinder-77819	S-1-5-18	5/11/2022 6:56:19 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service (v10.0) started successfully.	1	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1416	1636	hv-cinder-77819	S-1-5-18	5/11/2022 6:12:45 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service stopped.	4	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1760	1780	WIN-5T344G8GM1H	S-1-5-18	5/11/2022 6:10:45 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service failed to complete service initialization due to reason 983. The operation failed with error code -2147217398.	71	0		2	0	0	-9223372036854775808	7	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1760	1780	WIN-5T344G8GM1H	S-1-5-18	5/11/2022 6:10:45 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service stopped.	4	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1540	1588	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:48:13 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service (v10.0) started successfully.	1	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	1540	1588	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:41:33 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service stopped.	4	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	3588	4696	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:41:15 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service could not open the local mount driver (WTLMDrv.sys). 3	32	0		3	0	0	-9223372036854775808	3	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	3588	4696	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:41:15 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service could not open the local mount driver (WTLMDrv.sys). 3	32	0		3	0	0	-9223372036854775808	2	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	3588	4696	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:38:50 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service (v10.0) started successfully.	1	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-iSCSITarget-Service	13953c6e-c594-414e-8ba7-deb4ba1878e3	Microsoft-Windows-iSCSITarget-Service/Admin	3588	4696	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:38:50 AM			microsoft-windows-iscsitarget-service/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]