Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
'instance-00000001' was turned off. (Virtual machine ID C58D2969-A3FE-43E5-8DA5-832E94987A5E) | 18502 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 5 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 4980 | 4428 | hv-cinder-85931 | S-1-5-83-1-3314362729-1139123198-780379533-1585092756 | 9/28/2022 3:57:39 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 24336552-b0e1-465c-8afa-48f2a2d62039 (c58d2969-a3fe-43e5-8da5-832e94987a5e--3da12db1-667b-4fb0-927e-dd45e92b288b) Disconnected from virtual network. (Virtual Machine ID C58D2969-A3FE-43E5-8DA5-832E94987A5E) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 4 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4980 | 4428 | hv-cinder-85931 | S-1-5-83-1-3314362729-1139123198-780379533-1585092756 | 9/28/2022 3:57:39 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' started successfully. (Virtual machine ID C58D2969-A3FE-43E5-8DA5-832E94987A5E) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 3 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 4980 | 4428 | hv-cinder-85931 | S-1-5-83-1-3314362729-1139123198-780379533-1585092756 | 9/28/2022 3:57:36 PM | 88acc57e-d34b-0000-79e2-ac884bd3d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 24336552-b0e1-465c-8afa-48f2a2d62039 (3DA12DB1-667B-4FB0-927E-DD45E92B288B) started successfully. (Virtual Machine ID C58D2969-A3FE-43E5-8DA5-832E94987A5E) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 2 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4980 | 4428 | hv-cinder-85931 | S-1-5-83-1-3314362729-1139123198-780379533-1585092756 | 9/28/2022 3:57:36 PM | 88acc57e-d34b-0000-79e2-ac884bd3d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 24336552-b0e1-465c-8afa-48f2a2d62039 (c58d2969-a3fe-43e5-8da5-832e94987a5e--3da12db1-667b-4fb0-927e-dd45e92b288b) Connected to virtual network. (Virtual Machine ID C58D2969-A3FE-43E5-8DA5-832E94987A5E) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 1 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4980 | 4428 | hv-cinder-85931 | S-1-5-83-1-3314362729-1139123198-780379533-1585092756 | 9/28/2022 3:57:36 PM | 88acc57e-d34b-0000-79e2-ac884bd3d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |