MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
2021-11-06T22:16:18.906Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968727rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:16:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:16:18.906Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968726rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:16:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:16:18.890Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968725rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:16:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:16:18.890Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968724rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:16:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:16:18.890Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968723rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:16:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:16:18.890Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968722rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:16:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:14:49.600Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 23.2163844036028797018963968721rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:14:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:14:49.471Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-a46c546f-8575-440c-a9f5-a39df29d5eb32163844036028797018963968720rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:14:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:14:49.471Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 16202163844036028797018963968719rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:14:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:14:49.132Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-a46c546f-8575-440c-a9f5-a39df29d5eb3. Error: -22163844036028797018963968718rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:14:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:14:44.992Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968717rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:14:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:14:44.992Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968716rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:14:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:14:44.992Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968715rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:14:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:14:44.992Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968714rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:14:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:14:44.992Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968713rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:14:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:14:44.992Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968712rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:14:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968711Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 10:13:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-11-07T22:12:30Z. Reason: TBL.1638401638440036028797018963968710Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 10:13:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968709Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 10:13:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259075 minutes.103703276840036028797018963968708Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 10:13:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259075)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968707Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 10:13:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968706Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 10:13:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968705Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 10:13:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:12:17.554Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 22.2163844036028797018963968704rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:12:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:12:17.434Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-a46c546f-8575-440c-a9f5-a39df29d5eb32163844036028797018963968703rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:12:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:12:17.434Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 29202163844036028797018963968702rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:12:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T22:12:17.099Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-a46c546f-8575-440c-a9f5-a39df29d5eb3. Error: -22163844036028797018963968701rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 10:12:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:55:32.876Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968700rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:55:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:55:32.876Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968699rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:55:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:55:32.876Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968698rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:55:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:55:32.876Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968697rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:55:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:55:32.876Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968696rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:55:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:55:32.876Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968695rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:55:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:53:09.345Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 21.2163844036028797018963968694rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:53:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:53:09.267Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-ea140385-59ea-472a-805e-1bffd2ee94f12163844036028797018963968693rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:53:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:53:09.267Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 13242163844036028797018963968692rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:53:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:53:08.902Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-ea140385-59ea-472a-805e-1bffd2ee94f1. Error: -22163844036028797018963968691rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:53:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:28.107Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968690rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:28.107Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968689rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:28.086Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968688rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:28.086Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968687rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:28.086Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968686rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:28.086Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968685rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:22.660Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 20.2163844036028797018963968684rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:22.597Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-e2680b66-e736-449e-9716-5ea61519c9e02163844036028797018963968683rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:22.597Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 45082163844036028797018963968682rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:22.269Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-e2680b66-e736-449e-9716-5ea61519c9e0. Error: -22163844036028797018963968681rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:06.115Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968680rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:06.115Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968679rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:06.115Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968678rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:06.115Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968677rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:06.115Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968676rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:51:06.115Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968675rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:51:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:50:44.786Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 19.2163844036028797018963968674rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:50:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:50:44.708Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-e2680b66-e736-449e-9716-5ea61519c9e02163844036028797018963968673rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:50:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:50:44.708Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 6682163844036028797018963968672rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:50:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:50:44.333Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-e2680b66-e736-449e-9716-5ea61519c9e0. Error: -22163844036028797018963968671rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:50:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968670Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:43:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-11-07T21:42:30Z. Reason: TBL.1638401638440036028797018963968669Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:43:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968668Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:43:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259105 minutes.103703276840036028797018963968667Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:43:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259105)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968666Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:43:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968665Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:43:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968664Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:43:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:30:57.041Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968663rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:30:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:30:57.041Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968662rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:30:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:30:57.021Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968661rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:30:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:30:57.021Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968660rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:30:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:30:57.021Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968659rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:30:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:30:57.021Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968658rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:30:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:30:55.587Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968657rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:30:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:30:24.768Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968656rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:30:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:53.927Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968655rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:20.728Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 18.2163844036028797018963968654rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:20.628Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-0ec0a7db-df57-43d7-aeab-fb28d412a1092163844036028797018963968653rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:20.628Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 30442163844036028797018963968652rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:20.285Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-0ec0a7db-df57-43d7-aeab-fb28d412a109. Error: -22163844036028797018963968651rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:00.191Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968650rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:00.191Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968649rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:00.191Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968648rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:00.191Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968647rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:00.191Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968646rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:29:00.191Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968645rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:29:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:28:58.785Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968644rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:28:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:28:27.915Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968643rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:28:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:27:57.085Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968642rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:27:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:27:21.637Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 17.2163844036028797018963968641rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:27:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:27:21.504Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-90ca2f79-836b-4c1a-a651-e0a3518fcfe72163844036028797018963968640rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:27:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:27:21.504Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 51162163844036028797018963968639rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:27:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:27:21.162Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-90ca2f79-836b-4c1a-a651-e0a3518fcfe7. Error: -22163844036028797018963968638rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:27:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:51.263Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968637rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:51.263Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968636rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:51.263Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968635rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:51.263Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968634rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:51.263Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968633rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:51.263Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968632rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:47.575Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968631rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:14.122Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968630rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:14.122Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968629rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:14.122Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968628rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:14.122Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968627rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:14.122Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968626rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:22:14.122Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968625rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:22:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:20:12.719Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 16.2163844036028797018963968624rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:20:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:20:12.601Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-16e09b99-d5aa-455d-ba29-b03c9d5e739b2163844036028797018963968623rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:20:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:20:12.601Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 51082163844036028797018963968622rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:20:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:20:12.257Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-16e09b99-d5aa-455d-ba29-b03c9d5e739b. Error: -22163844036028797018963968621rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:20:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:18:14.612Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 15.2163844036028797018963968620rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:18:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:18:14.503Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-ae02902c-20dc-4c0a-94a0-2e35f8de12402163844036028797018963968619rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:18:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:18:14.503Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 47802163844036028797018963968618rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:18:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:18:14.159Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-ae02902c-20dc-4c0a-94a0-2e35f8de1240. Error: -22163844036028797018963968617rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:18:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:17:14.993Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968616rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:17:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:17:14.993Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968615rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:17:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:17:14.993Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968614rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:17:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:17:14.993Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968613rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:17:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:17:14.993Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968612rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:17:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:17:14.993Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968611rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:17:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:17:12.305Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 14.2163844036028797018963968610rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:17:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:17:12.247Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d6213b51-c08e-456c-ba51-bab6ebeaa6ea2163844036028797018963968609rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:17:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:17:12.247Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 39522163844036028797018963968608rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:17:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:17:11.865Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d6213b51-c08e-456c-ba51-bab6ebeaa6ea. Error: -22163844036028797018963968607rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:17:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:57.464Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968606rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:57.464Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968605rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:57.464Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968604rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:57.464Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968603rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:57.464Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968602rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:57.464Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968601rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:54.790Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 13.2163844036028797018963968600rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:54.711Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-e3fa3cc4-6c1b-4953-b05c-70ee7ffdecac2163844036028797018963968599rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:54.711Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 42882163844036028797018963968598rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:54.353Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-e3fa3cc4-6c1b-4953-b05c-70ee7ffdecac. Error: -22163844036028797018963968597rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:38.834Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968596rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:38.834Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968595rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:38.834Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968594rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:38.834Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968593rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:38.834Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968592rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:38.834Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968591rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:21.802Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 12.2163844036028797018963968590rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:21.708Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5604ed9b-3982-42e7-b394-002095287e152163844036028797018963968589rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:21.708Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 43242163844036028797018963968588rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:16:21.355Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5604ed9b-3982-42e7-b394-002095287e15. Error: -22163844036028797018963968587rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:16:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:50.915Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968586rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:50.915Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968585rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:50.915Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968584rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:50.915Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968583rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:50.915Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968582rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:50.915Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968581rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:49.601Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968580rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:49.601Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968579rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:49.601Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968578rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:49.601Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968577rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:49.601Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968576rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:49.601Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968575rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:47.850Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 11.2163844036028797018963968574rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:47.779Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-651b92bb-26f2-4ee5-af90-ea70569023612163844036028797018963968573rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:47.769Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5522163844036028797018963968572rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:47.421Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-651b92bb-26f2-4ee5-af90-ea7056902361. Error: -22163844036028797018963968571rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:43.188Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 10.2163844036028797018963968570rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:43.102Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-3bdefad8-a1e4-4f09-ab82-ee17a02e2d2d2163844036028797018963968569rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:43.102Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 45082163844036028797018963968568rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:42.745Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-3bdefad8-a1e4-4f09-ab82-ee17a02e2d2d. Error: -22163844036028797018963968567rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:35.711Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968566rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:35.711Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968565rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:35.711Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968564rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:35.711Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968563rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:35.711Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968562rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:35.711Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968561rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:15:33.258Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968560rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:15:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:32.489Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 9.2163844036028797018963968559rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:32.400Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-30e31686-d6ad-41a8-9b56-75a9763a23d52163844036028797018963968558rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:32.400Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 45442163844036028797018963968557rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:32.061Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-30e31686-d6ad-41a8-9b56-75a9763a23d5. Error: -22163844036028797018963968556rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:18.297Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968555rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:18.297Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968554rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:18.297Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968553rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:18.297Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968552rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:18.297Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968551rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:18.297Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968550rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:08.747Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 8.2163844036028797018963968549rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:08.635Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-6fa28a34-a1e0-4586-aaf3-971ed8cf62402163844036028797018963968548rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:08.635Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 37962163844036028797018963968547rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:14:08.276Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-6fa28a34-a1e0-4586-aaf3-971ed8cf6240. Error: -22163844036028797018963968546rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:14:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968545Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:13:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-11-07T21:12:30Z. Reason: TBL.1638401638440036028797018963968544Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:13:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968543Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:13:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259135 minutes.103703276840036028797018963968542Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:13:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259135)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968541Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:13:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968540Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:12:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968539Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 9:12:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:11:40.437Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968538rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:11:40.437Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968537rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:11:40.425Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968536rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:11:40.425Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968535rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:11:40.425Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968534rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:11:40.425Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968533rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:10:20.064Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 7.2163844036028797018963968532rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:10:19.986Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5922c86c-184f-4d10-9008-1de074a050e62163844036028797018963968531rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:10:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:10:19.986Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 44762163844036028797018963968530rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:10:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:10:19.596Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5922c86c-184f-4d10-9008-1de074a050e6. Error: -22163844036028797018963968529rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:10:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:01:06.842Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968528rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:01:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:01:06.842Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968527rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:01:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:01:06.842Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968526rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:01:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:01:06.842Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968525rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:01:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:01:06.842Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968524rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:01:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:01:06.842Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968523rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:01:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:52.027Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 6.2163844036028797018963968522rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:51.845Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-01801acc-999e-4e59-ba88-ced3b1ed63c52163844036028797018963968521rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:51.845Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 44082163844036028797018963968520rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:51.485Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-01801acc-999e-4e59-ba88-ced3b1ed63c5. Error: -22163844036028797018963968519rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:22.546Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968518rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:22.546Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968517rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:22.546Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968516rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:22.546Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968515rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:22.546Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968514rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:22.546Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968513rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:06.529Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 5.2163844036028797018963968512rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:06.403Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-52646cb2-a717-4fe2-97f2-d75adef114f72163844036028797018963968511rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:06.403Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 41162163844036028797018963968510rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T21:00:06.053Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-52646cb2-a717-4fe2-97f2-d75adef114f7. Error: -22163844036028797018963968509rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 9:00:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:57:33.347Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968508rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:57:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:57:33.347Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968507rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:57:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:57:33.347Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968506rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:57:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:57:33.347Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968505rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:57:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:57:33.347Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968504rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:57:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:57:33.347Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968503rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:57:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:57:17.692Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 4.2163844036028797018963968502rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:57:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:57:17.520Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-66f9752d-e592-4a5a-b333-de1426b182d02163844036028797018963968501rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:57:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:57:17.520Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 2122163844036028797018963968500rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:57:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:57:17.168Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-66f9752d-e592-4a5a-b333-de1426b182d0. Error: -22163844036028797018963968499rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:57:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:56:44.738Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968498rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:56:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:56:44.738Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968497rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:56:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:56:44.738Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968496rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:56:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:56:44.738Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968495rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:56:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:56:44.738Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968494rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:56:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:56:44.738Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968493rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:56:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:56:27.503Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 3.2163844036028797018963968492rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:56:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:56:27.394Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-fa98b723-a4ea-4a19-a28c-a7cff197c3af2163844036028797018963968491rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:56:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:56:27.394Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 31842163844036028797018963968490rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:56:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:56:27.068Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-fa98b723-a4ea-4a19-a28c-a7cff197c3af. Error: -22163844036028797018963968489rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:56:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:50:27.701Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968488rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:50:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:50:27.701Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968487rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:50:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:50:27.701Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968486rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:50:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:50:21.763Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 2.2163844036028797018963968485rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:50:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:50:21.467Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-f8882978-9643-4508-9f06-f2502787c1592163844036028797018963968484rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:50:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:50:21.467Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 40122163844036028797018963968483rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:50:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-11-06T20:50:20.939Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-f8882978-9643-4508-9f06-f2502787c159. Error: -22163844036028797018963968482rbd-wnbdApplicationnch1-master-1.nc-master-1.local11/6/2021 8:50:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808481Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application27724256nch1-master-1.nc-master-1.localS-1-5-1811/6/2021 8:50:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968480Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:45:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-11-07T20:44:31Z. Reason: TBL.1638401638440036028797018963968479Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:45:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968478Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:45:01 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259163 minutes.103703276840036028797018963968477Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:45:01 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259163)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968476Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:45:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968475Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:45:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:<none>90001638440036028797018963968474Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:45:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1 420201638442036028797018963968473Microsoft-Windows-MSDTC 25d9e0020-3761-4f36-90c8-38ce6511bd12Application00nch1-master-1.nc-master-1.local11/6/2021 8:45:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationTMSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968472neutron-hyperv-agentApplicationnch1-master-1.nc-master-1.local11/6/2021 8:43:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968471nova-computeApplicationnch1-master-1.nc-master-1.local11/6/2021 8:43:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NC-MASTER-1\administrator' . 501638440036028797018963968470Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch1-master-1.nc-master-1.local11/6/2021 8:43:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968469Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:43:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-11-07T20:42:38Z. Reason: TBL.1638401638440036028797018963968468Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:43:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968467cloudbase-initApplicationnch1-master-1.nc-master-1.local11/6/2021 8:43:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Security policy in the Group policy objects has been applied successfully.1704163844036028797018963968466SceCliApplicationnch1-master-1.nc-master-1.local11/6/2021 8:43:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808465Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication13921888nch1-master-1.nc-master-1.localS-1-5-1811/6/2021 8:43:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968464Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:42:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259165 minutes.103703276840036028797018963968463Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:42:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259165)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968462Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:42:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968461cloudbase-initApplicationnch1-master-1.nc-master-1.local11/6/2021 8:42:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968460Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:42:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968459Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local11/6/2021 8:42:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808458Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication13921500nch1-master-1.nc-master-1.localS-1-5-1811/6/2021 8:42:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808457Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application13921456nch1-master-1.nc-master-1.localS-1-5-1811/6/2021 8:42:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808456Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application6121652nch1-master-1S-1-5-1811/6/2021 8:42:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.411101638441036028797018963968455Microsoft-Windows-MSDTC719be4ed-e9bc-4dd8-a7cf-c85ce8e4975dApplication00nch1-master-111/6/2021 8:42:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSVCSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager. 822504036028797018963968454VSSApplicationnch1-master-111/6/2021 8:42:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968453Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:34:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-11-07T20:33:51Z. Reason: TBL.1638401638440036028797018963968452Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:34:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968451Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:34:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259174 minutes.103703276840036028797018963968450Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:34:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968449Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:34:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968448Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:34:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968447Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:34:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808446Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application34961484nch1-master-1S-1-5-1811/6/2021 8:28:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2021?-?11?-?06T20:19:48.305108300Z.100010400-9223372036854775808445Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application36684436nch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:19:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 3732.104204036028797018963968444MsiInstallerApplicationnch1-master-1S-1-5-1811/6/2021 8:19:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.103304036028797018963968443MsiInstallerApplicationnch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:19:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Ceph for Windows -- Installation completed successfully.1170704036028797018963968442MsiInstallerApplicationnch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:19:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2021?-?11?-?06T20:19:48.305108300Z.100000400-9223372036854775808441Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application36684976nch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:19:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 3732.104004036028797018963968440MsiInstallerApplicationnch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:19:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.103304036028797018963968439MsiInstallerApplicationnch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:19:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root list with effective date: ?Monday, ?October ?18, ?2021 8:14:37 PM.411100400-9187343239835811840438Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13324512nch1-master-111/6/2021 8:16:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>.410900400-9187343239835811840437Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13324512nch1-master-111/6/2021 8:16:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>.410900400-9187343239835811840436Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13324512nch1-master-111/6/2021 8:16:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>.410900400-9187343239835811840435Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13324512nch1-master-111/6/2021 8:16:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.410900400-9187343239835811840434Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13324512nch1-master-111/6/2021 8:16:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>.410900400-9187343239835811840433Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13324512nch1-master-111/6/2021 8:16:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.410900400-9187343239835811840432Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13324512nch1-master-111/6/2021 8:16:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.410900400-9187343239835811840431Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13324512nch1-master-111/6/2021 8:16:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2021?-?11?-?06T20:12:33.121077700Z.100010400-9223372036854775808430Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application42124668nch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:12:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 2592.104204036028797018963968429MsiInstallerApplicationnch1-master-1S-1-5-1811/6/2021 8:12:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.103304036028797018963968428MsiInstallerApplicationnch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:12:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully.1170704036028797018963968427MsiInstallerApplicationnch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:12:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2021?-?11?-?06T20:12:33.121077700Z.100000400-9223372036854775808426Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application42124904nch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:12:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2021?-?11?-?06T20:12:32.359852900Z.100010400-9223372036854775808425Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application42124668nch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:12:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2021?-?11?-?06T20:12:32.359852900Z.100000400-9223372036854775808424Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application42121464nch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:12:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 2592.104004036028797018963968423MsiInstallerApplicationnch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:12:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 2592.104204036028797018963968422MsiInstallerApplicationnch1-master-1S-1-5-1811/6/2021 8:12:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.103304036028797018963968421MsiInstallerApplicationnch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:12:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully.1170704036028797018963968420MsiInstallerApplicationnch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:12:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 2592.104004036028797018963968419MsiInstallerApplicationnch1-master-1S-1-5-21-1768540222-719384191-3038964438-100111/6/2021 8:12:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0.103504036028797018963968418MsiInstallerApplicationnch1-master-1S-1-5-1811/6/2021 8:12:23 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.409700400-9187343239835811840417Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13321760nch1-master-111/6/2021 8:10:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808416Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application19482844nch1-master-1S-1-5-1811/6/2021 8:10:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968415Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:08:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-11-07T20:07:02Z. Reason: TBL.1638401638440036028797018963968414Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:08:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent819704915240036028797018963968413Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/05/05:20:07:32;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968412Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent819704915240036028797018963968411Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259200 minutes.103703276840036028797018963968410Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968409Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968408Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
These policies are being excluded since they are only defined with override-only attribute. Policy Names=(Security-SPP-Reserved-EnableNotificationMode) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4103301638440036028797018963968407Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100103401638440036028797018963968406Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Validity period has been started. Validity minutes=259200 Grace type=9.103601638440036028797018963968405Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSA client has been successfully triggered to update the Device License1231101638440036028797018963968404Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f}1230401638440036028797018963968403Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f1230501638440036028797018963968402Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection ended. 2048904915240036028797018963968401Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968400Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check passed. 2048204915240036028797018963968399Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check initiated. 2048104915240036028797018963968398Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection started. 2048804915240036028797018963968397Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS. 106703276840036028797018963968396Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:23 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE} License Id=87fe5322-ec25-42da-bcc8-eda31f8ed1c5100401638440036028797018963968395Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC} License Id=fc775679-1562-4f7b-b49f-2227e744aa0b100401638440036028797018963968394Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Acquisition of End User License was successful. Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4101301638400036028797018963968393Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.409700400-9187343239835811840392Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13321768nch1-master-111/6/2021 8:07:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2021/11/16:20:03:17;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968391Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:07:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1 420201638442036028797018963968390Microsoft-Windows-MSDTC 25d9e0020-3761-4f36-90c8-38ce6511bd12Application00nch1-master-111/6/2021 8:06:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationTMSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968389cloudbase-initApplicationnch1-master-111/6/2021 8:05:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968388Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:05:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied. . 15340300-9223372036854775808387Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application6122956nch1-master-1S-1-5-21-1768540222-719384191-3038964438-100011/6/2021 8:05:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service failed to create default configuration for new user 'NCH1-MASTER-1\Admin' in response to user profile creation. Error code 0x80070005. Access is denied. .604915220036028797018963968386Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch1-master-111/6/2021 8:05:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968385cloudbase-initApplicationnch1-master-111/6/2021 8:04:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NCH1-MASTER-1\cloudbase-init' . 501638440036028797018963968384Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch1-master-111/6/2021 8:04:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.409700400-9187343239835811840383Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13321364nch1-master-111/6/2021 8:04:23 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808382Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication612528nch1-master-1S-1-5-1811/6/2021 8:04:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968381Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:04:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968380Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:04:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808379Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication6121204nch1-master-1S-1-5-1811/6/2021 8:04:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Proof of Purchase installed successfully. ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845101601638440036028797018963968378Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-111/6/2021 8:04:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Profile notification of event Delete for component {D63AA156-D534-4BAC-9BF1-55359CF5EC30} failed, error code is The system cannot find the path specified. . 15340300-9223372036854775808377Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application612544nch1-master-1S-1-5-1811/6/2021 8:04:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808376Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application6121652nch1-master-1S-1-5-1811/6/2021 8:04:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.462501638440036028797018963968375Microsoft-Windows-EventSystem899daace-4868-4295-afcd-9eb8fb497561Application00nch1-master-111/6/2021 8:04:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808374Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5321496WIN-5T344G8GM1HS-1-5-1811/6/2021 8:03:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?March ?16, ?2021 7:29:24 AM.411200400-9187343239835811840373Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication17161816WIN-5T344G8GM1H11/6/2021 8:02:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} Writer Name: Microsoft Hyper-V VSS Writer821204036028797018963968372VSSApplicationWIN-5T344G8GM1H11/6/2021 8:02:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808371Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication532604WIN-5T344G8GM1HS-1-5-1811/6/2021 8:02:26 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808370Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5321588WIN-5T344G8GM1HS-1-5-1811/6/2021 8:02:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808369Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5321496WIN-5T344G8GM1HS-1-5-1811/6/2021 8:02:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer821204036028797018963968368VSSApplicationWIN-5T344G8GM1H11/6/2021 8:02:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4} Writer Name: ASR Writer821204036028797018963968367VSSApplicationWIN-5T344G8GM1H11/6/2021 8:02:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f} Writer Name: COM+ REGDB Writer821204036028797018963968366VSSApplicationWIN-5T344G8GM1H11/6/2021 8:02:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485} Writer Name: Registry Writer821204036028797018963968365VSSApplicationWIN-5T344G8GM1H11/6/2021 8:02:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808364Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application9761228WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:13 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required. DETAIL - 9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500: Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security 15300400-9223372036854775808363Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application9763432WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The winlogon notification subscriber <SessionEnv> failed a notification event.600103276830036028797018963968362Microsoft-Windows-Winlogondbe9b383-7cf3-4331-91cc-a3cb16a3b538Application00WIN-5T344G8GM1H1/19/2018 9:48:12 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent819704915240036028797018963968361Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448823001638440036028797018963968360Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 100301638440036028797018963968359Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining.1230601638440036028797018963968358Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968357Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968356Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Grace period has been started. Grace days=10 Grace type=6.102501638440036028797018963968355Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968354Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The hardware has changed.102403276840036028797018963968353Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hardware has changed from previous boot. AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4.104001638440036028797018963968352Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968351Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=Sysprep.exe90001638440036028797018963968350Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.411101638441036028797018963968349Microsoft-Windows-MSDTC719be4ed-e9bc-4dd8-a7cf-c85ce8e4975dApplication00WIN-5T344G8GM1H1/19/2018 9:47:34 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSVCSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]