Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The default printer was changed to Microsoft Print to PDF. See the event user data for context information.	823	0		4	49	11	-9223372036854644736	1	Microsoft-Windows-PrintService	747ef6fd-e535-4d16-b510-42c90f6873a1	Microsoft-Windows-PrintService/Admin	4352	4372	hv-neutron-tstw	S-1-5-21-2743995035-1584469933-1099709648-500	1/4/2022 2:45:14 PM			microsoft-windows-printservice/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Spooler Operation Succeeded	Changing the default printer	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]