Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
'instance-00000001' was turned off. (Virtual machine ID B3891635-F5CB-4643-A08F-6A5A1396B9E0)	18502	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	2556	3796	hv-cinder-81914	S-1-5-83-1-3012105781-1178858955-1516933024-3770258963	1/31/2022 10:12:52 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' c264bf7e-0c73-4b1e-bc26-1b4739035cc8 (b3891635-f5cb-4643-a08f-6a5a1396b9e0--615fdf65-547b-4324-bec8-0d1b7748cac7) Disconnected from virtual network. (Virtual Machine ID B3891635-F5CB-4643-A08F-6A5A1396B9E0)	12598	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	2556	3796	hv-cinder-81914	S-1-5-83-1-3012105781-1178858955-1516933024-3770258963	1/31/2022 10:12:52 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' started successfully. (Virtual machine ID B3891635-F5CB-4643-A08F-6A5A1396B9E0)	18500	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	2556	2068	hv-cinder-81914	S-1-5-83-1-3012105781-1178858955-1516933024-3770258963	1/31/2022 10:12:49 AM	d58a2223-1683-0004-fe6c-8ad58316d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' c264bf7e-0c73-4b1e-bc26-1b4739035cc8 (615FDF65-547B-4324-BEC8-0D1B7748CAC7) started successfully. (Virtual Machine ID B3891635-F5CB-4643-A08F-6A5A1396B9E0)	12582	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	2556	2068	hv-cinder-81914	S-1-5-83-1-3012105781-1178858955-1516933024-3770258963	1/31/2022 10:12:49 AM	d58a2223-1683-0004-fe6c-8ad58316d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' c264bf7e-0c73-4b1e-bc26-1b4739035cc8 (b3891635-f5cb-4643-a08f-6a5a1396b9e0--615fdf65-547b-4324-bec8-0d1b7748cac7) Connected to virtual network. (Virtual Machine ID B3891635-F5CB-4643-A08F-6A5A1396B9E0)	12597	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	2556	2068	hv-cinder-81914	S-1-5-83-1-3012105781-1178858955-1516933024-3770258963	1/31/2022 10:12:49 AM	d58a2223-1683-0004-fe6c-8ad58316d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]