Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
User config info will be loaded from local machine for this RDP-Tcp connection	20521	0		4	0	0	4611686018427387904	2	Microsoft-Windows-TerminalServices-RemoteConnectionManager	c76baa63-ae81-421c-b425-340b4b24157f	Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin	1484	3124	hv-neutron-tstw	S-1-5-20	1/4/2022 2:11:38 PM	f42088ea-13b7-4634-96cd-93feb3e50000		microsoft-windows-terminalservices-remoteconnectionmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
User config info will be loaded from local machine for this RDP-Tcp connection	20521	0		4	0	0	4611686018427387904	1	Microsoft-Windows-TerminalServices-RemoteConnectionManager	c76baa63-ae81-421c-b425-340b4b24157f	Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin	1484	3120	hv-neutron-tstw	S-1-5-20	1/4/2022 2:04:28 PM	f4203c35-f860-4d09-be0c-f326cea80000		microsoft-windows-terminalservices-remoteconnectionmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]