Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
'instance-00000004' started successfully. (Virtual machine ID 6C351D0E-002C-4BD1-A5BB-85E6787CBE41)	18500	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4556	2080	hv-cinder-82492	S-1-5-83-1-1815420174-1271988268-3867524005-1103002744	1/17/2022 12:35:20 PM	b7a73e39-0b97-0004-d0e2-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' c375cbe0-d17f-4508-a4e3-3f2e944294d8 (835BE972-3E74-40B6-9D00-83C4C465602E) started successfully. (Virtual Machine ID 6C351D0E-002C-4BD1-A5BB-85E6787CBE41)	12582	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4556	2080	hv-cinder-82492	S-1-5-83-1-1815420174-1271988268-3867524005-1103002744	1/17/2022 12:35:20 PM	b7a73e39-0b97-0004-d0e2-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' c375cbe0-d17f-4508-a4e3-3f2e944294d8 (6c351d0e-002c-4bd1-a5bb-85e6787cbe41--835be972-3e74-40b6-9d00-83c4c465602e) Connected to virtual network. (Virtual Machine ID 6C351D0E-002C-4BD1-A5BB-85E6787CBE41)	12597	0		4	0	0	-9223372036854775808	20	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4556	2080	hv-cinder-82492	S-1-5-83-1-1815420174-1271988268-3867524005-1103002744	1/17/2022 12:35:20 PM	b7a73e39-0b97-0004-d0e2-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' was shut down using the Shutdown Integration Component with parameters: Force = false, Reason = 'Soft shutdown requested by OpenStack Nova.' (Virtual machine ID 6C351D0E-002C-4BD1-A5BB-85E6787CBE41)	18504	0		4	0	0	-9223372036854775808	19	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4844	4192	hv-cinder-82492	S-1-5-83-1-1815420174-1271988268-3867524005-1103002744	1/17/2022 12:35:15 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' c375cbe0-d17f-4508-a4e3-3f2e944294d8 (6c351d0e-002c-4bd1-a5bb-85e6787cbe41--835be972-3e74-40b6-9d00-83c4c465602e) Disconnected from virtual network. (Virtual Machine ID 6C351D0E-002C-4BD1-A5BB-85E6787CBE41)	12598	0		4	0	0	-9223372036854775808	18	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4844	4192	hv-cinder-82492	S-1-5-83-1-1815420174-1271988268-3867524005-1103002744	1/17/2022 12:35:15 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' started successfully. (Virtual machine ID 50948E97-D04E-4C54-B94F-422EC7B9E5CD)	18500	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	540	4996	hv-cinder-82492	S-1-5-83-1-1351913111-1280626766-776097721-3454384583	1/17/2022 12:35:04 PM	b7a73e39-0b97-0003-2dc8-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' 640000a8-890e-4014-a1ab-229308d740f2 (0CB60B33-9A31-4BEE-B18C-72A70AFAF5E6) started successfully. (Virtual Machine ID 50948E97-D04E-4C54-B94F-422EC7B9E5CD)	12582	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	540	4996	hv-cinder-82492	S-1-5-83-1-1351913111-1280626766-776097721-3454384583	1/17/2022 12:35:04 PM	b7a73e39-0b97-0003-2dc8-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' 640000a8-890e-4014-a1ab-229308d740f2 (50948e97-d04e-4c54-b94f-422ec7b9e5cd--0cb60b33-9a31-4bee-b18c-72a70afaf5e6) Connected to virtual network. (Virtual Machine ID 50948E97-D04E-4C54-B94F-422EC7B9E5CD)	12597	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	540	4996	hv-cinder-82492	S-1-5-83-1-1351913111-1280626766-776097721-3454384583	1/17/2022 12:35:04 PM	b7a73e39-0b97-0003-2dc8-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' was turned off. (Virtual machine ID 13EAB1E9-CCE9-4600-A862-9899C1730D18)	18502	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4796	1124	hv-cinder-82492	S-1-5-83-1-334148073-1174457577-2576900776-403534785	1/17/2022 12:34:53 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' f0a18161-3b12-4952-a198-f30d1f5137e3 (13eab1e9-cce9-4600-a862-9899c1730d18--a784a716-fdce-47df-a999-fefdb9f851ab) Disconnected from virtual network. (Virtual Machine ID 13EAB1E9-CCE9-4600-A862-9899C1730D18)	12598	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4796	1124	hv-cinder-82492	S-1-5-83-1-334148073-1174457577-2576900776-403534785	1/17/2022 12:34:53 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' started successfully. (Virtual machine ID 6C351D0E-002C-4BD1-A5BB-85E6787CBE41)	18500	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4844	4192	hv-cinder-82492	S-1-5-83-1-1815420174-1271988268-3867524005-1103002744	1/17/2022 12:34:45 PM	b7a73e39-0b97-0000-a952-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' c375cbe0-d17f-4508-a4e3-3f2e944294d8 (835BE972-3E74-40B6-9D00-83C4C465602E) started successfully. (Virtual Machine ID 6C351D0E-002C-4BD1-A5BB-85E6787CBE41)	12582	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4844	4192	hv-cinder-82492	S-1-5-83-1-1815420174-1271988268-3867524005-1103002744	1/17/2022 12:34:45 PM	b7a73e39-0b97-0000-a952-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' c375cbe0-d17f-4508-a4e3-3f2e944294d8 (6c351d0e-002c-4bd1-a5bb-85e6787cbe41--835be972-3e74-40b6-9d00-83c4c465602e) Connected to virtual network. (Virtual Machine ID 6C351D0E-002C-4BD1-A5BB-85E6787CBE41)	12597	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4844	4192	hv-cinder-82492	S-1-5-83-1-1815420174-1271988268-3867524005-1103002744	1/17/2022 12:34:45 PM	b7a73e39-0b97-0000-a952-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000003' started successfully. (Virtual machine ID 565D3368-5A56-49C3-B9B5-8230C751B161)	18500	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	1060	5056	hv-cinder-82492	S-1-5-83-1-1448948584-1237539414-813872569-1639010759	1/17/2022 12:34:44 PM	b7a73e39-0b97-0000-9a52-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000003' 993c836a-be47-4268-be4f-0343afb9b3c1 (0F34120E-45E5-44B3-B03D-560698C9CDF7) started successfully. (Virtual Machine ID 565D3368-5A56-49C3-B9B5-8230C751B161)	12582	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	1060	5056	hv-cinder-82492	S-1-5-83-1-1448948584-1237539414-813872569-1639010759	1/17/2022 12:34:44 PM	b7a73e39-0b97-0000-9a52-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000003' 993c836a-be47-4268-be4f-0343afb9b3c1 (565d3368-5a56-49c3-b9b5-8230c751b161--0f34120e-45e5-44b3-b03d-560698c9cdf7) Connected to virtual network. (Virtual Machine ID 565D3368-5A56-49C3-B9B5-8230C751B161)	12597	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	1060	5056	hv-cinder-82492	S-1-5-83-1-1448948584-1237539414-813872569-1639010759	1/17/2022 12:34:44 PM	b7a73e39-0b97-0000-9a52-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' started successfully. (Virtual machine ID 13EAB1E9-CCE9-4600-A862-9899C1730D18)	18500	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4796	4964	hv-cinder-82492	S-1-5-83-1-334148073-1174457577-2576900776-403534785	1/17/2022 12:34:42 PM	b7a73e39-0b97-0004-c98d-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' f0a18161-3b12-4952-a198-f30d1f5137e3 (A784A716-FDCE-47DF-A999-FEFDB9F851AB) started successfully. (Virtual Machine ID 13EAB1E9-CCE9-4600-A862-9899C1730D18)	12582	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4796	4964	hv-cinder-82492	S-1-5-83-1-334148073-1174457577-2576900776-403534785	1/17/2022 12:34:42 PM	b7a73e39-0b97-0004-c98d-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' f0a18161-3b12-4952-a198-f30d1f5137e3 (13eab1e9-cce9-4600-a862-9899c1730d18--a784a716-fdce-47df-a999-fefdb9f851ab) Connected to virtual network. (Virtual Machine ID 13EAB1E9-CCE9-4600-A862-9899C1730D18)	12597	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4796	4964	hv-cinder-82492	S-1-5-83-1-334148073-1174457577-2576900776-403534785	1/17/2022 12:34:42 PM	b7a73e39-0b97-0004-c98d-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' started successfully. (Virtual machine ID A1EAE2BA-2394-4ED9-84DD-FE22778167AF)	18500	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4708	3616	hv-cinder-82492	S-1-5-83-1-2716525242-1322853268-587128196-2942796151	1/17/2022 12:34:41 PM	b7a73e39-0b97-0004-c68d-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' e075a10f-1278-416a-9074-f0cc7f97bc48 (B33F0319-1D64-4A92-91FB-9673A46E791B) started successfully. (Virtual Machine ID A1EAE2BA-2394-4ED9-84DD-FE22778167AF)	12582	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4708	3616	hv-cinder-82492	S-1-5-83-1-2716525242-1322853268-587128196-2942796151	1/17/2022 12:34:41 PM	b7a73e39-0b97-0004-c68d-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' e075a10f-1278-416a-9074-f0cc7f97bc48 (a1eae2ba-2394-4ed9-84dd-fe22778167af--b33f0319-1d64-4a92-91fb-9673a46e791b) Connected to virtual network. (Virtual Machine ID A1EAE2BA-2394-4ED9-84DD-FE22778167AF)	12597	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4708	3616	hv-cinder-82492	S-1-5-83-1-2716525242-1322853268-587128196-2942796151	1/17/2022 12:34:41 PM	b7a73e39-0b97-0004-c68d-a7b7970bd801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]