Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
User config info will be loaded from local machine for this RDP-Tcp connection	20521	0		4	0	0	4611686018427387904	1	Microsoft-Windows-TerminalServices-RemoteConnectionManager	c76baa63-ae81-421c-b425-340b4b24157f	Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin	2288	4672	hv-neutron-mast	S-1-5-20	1/5/2022 3:28:30 PM	f4206917-9cab-4291-aeef-3c69603a0000		microsoft-windows-terminalservices-remoteconnectionmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]