Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
2021-11-27T22:14:01.489Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 726 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 10:14:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T22:14:01.489Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 725 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 10:14:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T22:14:01.489Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 724 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 10:14:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T22:14:01.489Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 723 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 10:14:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T22:14:01.489Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 722 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 10:14:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T22:14:01.489Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 721 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 10:14:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 720 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 10:12:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2021-11-28T22:11:30Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 719 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 10:12:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T22:12:26.712Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 24. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 718 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 10:12:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T22:12:26.602Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-29b72438-124b-49c5-9fb2-cde91536dbe6 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 717 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 10:12:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T22:12:26.602Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5460 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 716 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 10:12:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T22:12:26.181Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-29b72438-124b-49c5-9fb2-cde91536dbe6. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 715 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 10:12:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 714 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 10:12:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259076 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 713 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 10:12:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259076)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 712 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 10:12:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 711 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 10:12:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 710 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 10:11:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:49:05.656Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 709 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:49:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:49:05.656Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 708 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:49:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:49:05.656Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 707 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:49:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:49:05.656Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 706 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:49:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:49:05.656Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 705 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:49:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:49:05.656Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 704 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:49:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:49:00.419Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 23. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 703 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:49:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:49:00.317Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-ed512092-9da9-4d3d-b19b-33dad77c3f26 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 702 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:49:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:49:00.317Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 668 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 701 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:49:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:48:59.880Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-ed512092-9da9-4d3d-b19b-33dad77c3f26. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 700 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:48:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 699 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:42:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2021-11-28T21:41:29Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 698 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:42:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 697 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:41:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259106 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 696 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:41:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259106)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 695 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:41:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 694 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:41:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 693 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:41:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:33:22.676Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 692 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:33:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:33:22.676Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 691 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:33:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:33:22.676Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 690 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:33:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:33:22.676Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 689 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:33:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:33:22.676Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 688 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:33:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:33:22.676Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 687 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:33:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:31:19.385Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 22. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 686 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:31:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:31:19.151Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-1416292a-dba9-4a66-85b6-f0929de78ebf | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 685 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:31:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:31:19.151Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 932 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 684 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:31:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:31:18.713Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-1416292a-dba9-4a66-85b6-f0929de78ebf. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 683 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:31:18 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:29:13.310Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 682 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:29:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:29:13.310Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 681 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:29:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:29:13.310Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 680 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:29:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:29:13.310Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 679 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:29:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:29:13.310Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 678 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:29:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:29:13.310Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 677 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:29:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:50.106Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 21. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 676 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:49.912Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-03079e0b-c8b5-4a98-beae-24c4370e0212 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 675 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:49.902Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4220 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 674 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:49.450Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-03079e0b-c8b5-4a98-beae-24c4370e0212. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 673 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:40.165Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 672 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:40.165Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 671 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:40.153Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 670 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:40.153Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 669 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:40.153Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 668 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:40.153Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 667 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:26:37.512Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 666 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:26:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:37.756Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 20. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 665 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:37.576Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-47179aba-1206-4495-8631-f54d46f24132 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 664 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:37.576Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3864 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 663 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:37.144Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-47179aba-1206-4495-8631-f54d46f24132. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 662 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:26.117Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 661 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:26.117Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 660 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:26.117Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 659 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:26.117Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 658 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:26.117Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 657 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:26.117Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 656 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:15.561Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 19. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 655 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:15 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:15.403Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-1b805d42-ea8e-4ad6-a014-727a3ef56792 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 654 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:15 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:15.389Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4084 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 653 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:15 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:25:14.957Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-1b805d42-ea8e-4ad6-a014-727a3ef56792. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 652 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:25:14 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:23:12.114Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 651 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:23:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:23:12.114Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 650 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:23:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:23:12.114Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 649 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:23:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:23:12.114Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 648 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:23:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:23:12.114Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 647 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:23:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:23:12.114Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 646 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:23:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:23:10.618Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 645 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:23:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:22:39.752Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 644 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:22:39 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:22:08.769Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 643 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:22:08 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:21:33.726Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 18. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 642 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:21:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:21:33.585Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-f4f886f9-5e7d-4b5a-bdf9-24c0605166d5 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 641 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:21:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:21:33.585Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 600 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 640 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:21:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:21:33.194Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-f4f886f9-5e7d-4b5a-bdf9-24c0605166d5. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 639 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:21:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:42.837Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 638 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:42.837Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 637 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:42.837Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 636 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:42.837Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 635 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:42.837Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 634 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:42.837Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 633 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:41.477Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 632 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:41.477Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 631 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:41.455Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 630 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:41.455Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 629 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:41.455Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 628 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:41.455Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 627 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:38.773Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 17. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 626 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:38.616Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-cafa9637-d149-456a-b338-409aa272aa0b | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 625 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:38.616Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5288 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 624 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:38.189Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-cafa9637-d149-456a-b338-409aa272aa0b. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 623 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:33.788Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 16. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 622 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:33.714Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5f5833fc-8042-4440-996a-f4d1f028c3c8 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 621 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:33.714Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3176 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 620 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:19:33.305Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5f5833fc-8042-4440-996a-f4d1f028c3c8. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 619 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:19:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:16:44.292Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 618 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:16:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:16:44.292Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 617 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:16:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:16:44.292Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 616 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:16:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:16:44.292Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 615 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:16:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:16:44.292Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 614 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:16:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:16:44.292Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 613 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:16:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:15:52.904Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 15. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 612 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:15:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:15:52.809Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-62a70256-eb0c-4887-87f1-84cf766abe3c | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 611 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:15:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:15:52.793Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 1316 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 610 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:15:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:15:52.375Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-62a70256-eb0c-4887-87f1-84cf766abe3c. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 609 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:15:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 608 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:12:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2021-11-28T21:11:29Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 607 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:12:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 606 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:11:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259136 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 605 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:11:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259136)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 604 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:11:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 603 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:11:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 602 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 9:11:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:51.259Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 601 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:51.259Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 600 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:51.259Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 599 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:51.259Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 598 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:51.259Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 597 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:51.259Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 596 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.542Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 595 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.542Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 594 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.542Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 593 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.542Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 592 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.542Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 591 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.542Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 590 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.323Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 589 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.323Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 588 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.323Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 587 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.323Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 586 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.323Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 585 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.323Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 584 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.088Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 583 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.088Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 582 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:32.088Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 581 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:09.117Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 14. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 580 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:08.930Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-4558af09-ac74-43cf-9df1-40c54ef24649 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 579 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:08 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:08.930Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5260 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 578 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:08 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:08:08.461Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-4558af09-ac74-43cf-9df1-40c54ef24649. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 577 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:08:08 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:00:02.130Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 13. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 576 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:00:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:00:02.051Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d68e4828-a000-482f-90e9-83e87b933855 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 575 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:00:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:00:02.025Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5624 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 574 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:00:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:00:01.673Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d68e4828-a000-482f-90e9-83e87b933855. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 573 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:00:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:00:01.056Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 12. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 572 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:00:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:00:00.911Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-10ddafcd-c9e0-437c-8d6e-29009b4bedca | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 571 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:00:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:00:00.886Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3764 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 570 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:00:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T21:00:00.507Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-10ddafcd-c9e0-437c-8d6e-29009b4bedca. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 569 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 9:00:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:59:59.888Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 11. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 568 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:59:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:59:59.688Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-caa38af6-5178-4b65-9a06-d11b9f7b1114 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 567 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:59:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:59:59.688Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4148 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 566 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:59:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:59:59.272Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-caa38af6-5178-4b65-9a06-d11b9f7b1114. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 565 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:59:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:57:28.333Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 564 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:57:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:57:28.333Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 563 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:57:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:57:28.333Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 562 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:57:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:57:28.333Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 561 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:57:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:57:28.333Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 560 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:57:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:57:28.333Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 559 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:57:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:57:24.934Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 10. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 558 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:57:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:57:24.824Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-3f986e2f-d4ac-4ed5-a12e-42ce18715da5 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 557 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:57:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:57:24.824Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 2108 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 556 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:57:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:57:24.416Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-3f986e2f-d4ac-4ed5-a12e-42ce18715da5. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 555 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:57:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:54:06.687Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 554 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:54:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:54:06.687Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 553 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:54:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:54:06.687Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 552 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:54:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:54:06.687Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 551 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:54:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:54:06.687Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 550 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:54:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:54:04.080Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 9. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 549 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:54:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:54:03.968Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-60217ada-e1c1-41d9-8800-666d6b70b099 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 548 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:54:03 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:54:03.968Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5772 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 547 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:54:03 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:54:03.546Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-60217ada-e1c1-41d9-8800-666d6b70b099. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 546 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:54:03 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:36.429Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 545 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:32.673Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 8. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 544 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:32.593Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-c1d8a7fd-96da-4769-831b-93e5469edd45 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 543 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:32.593Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5192 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 542 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:32.205Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-c1d8a7fd-96da-4769-831b-93e5469edd45. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 541 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:07.534Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 540 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:07.534Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 539 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:07.515Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 538 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:07.515Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 537 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:07.515Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 536 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:07.515Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 535 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:04.219Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 7. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 534 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:04.125Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-bb8e6d39-28b6-481a-996e-22a668b9411c | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 533 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:04.125Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5332 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 532 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:53:03.703Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-bb8e6d39-28b6-481a-996e-22a668b9411c. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 531 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:53:03 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:51:12.681Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 530 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:51:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:51:12.681Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 529 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:51:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:51:12.681Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 528 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:51:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:51:12.681Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 527 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:51:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:51:12.681Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 526 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:51:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:51:12.681Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 525 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:51:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:32.755Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 524 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:32.755Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 523 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:32.755Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 522 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:32.755Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 521 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:32.755Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 520 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:32.755Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 519 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:23.785Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 6. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 518 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:23.691Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-96fb951e-cc34-4858-9c6f-c24a0ea53a71 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 517 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:23.691Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4468 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 516 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:23.191Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-96fb951e-cc34-4858-9c6f-c24a0ea53a71. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 515 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:06.385Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 5. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 514 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:06.210Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d11b7295-70ad-482a-85d7-2803b1944190 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 513 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:06.210Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 700 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 512 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:50:05.832Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d11b7295-70ad-482a-85d7-2803b1944190. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 511 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:50:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 510 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 1776 | 3672 | nch1-master-1.nc-master-1.local | S-1-5-18 | 11/27/2021 8:49:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:38.443Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 509 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:38.443Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 508 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:38.443Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 507 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:38.443Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 506 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:38.443Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 505 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:38.443Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 504 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:18.083Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 4. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 503 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:18 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:17.991Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-fc5e1853-9753-4aec-9663-f67f2c4249be | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 502 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:17 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:17.991Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5936 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 501 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:17 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:17.552Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-fc5e1853-9753-4aec-9663-f67f2c4249be. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 500 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:17 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:15.648Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 499 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:15 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:15.648Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 498 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:15 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:15.648Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 497 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:15 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:15.648Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 496 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:15 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:01.899Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 495 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:01.899Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 494 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:01.899Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 493 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:01.899Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 492 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:01.899Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 491 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:49:01.899Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 490 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:49:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:48:59.882Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 3. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 489 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:48:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:48:59.786Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-531124a5-0591-4505-b7a9-fd42aca352f7 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 488 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:48:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:48:59.786Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 100 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 487 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:48:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:48:59.312Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-531124a5-0591-4505-b7a9-fd42aca352f7. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 486 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:48:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:48:57.021Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 2. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 485 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:48:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:48:56.872Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5fd33332-c012-4d3f-89d3-348f26863f24 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 484 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:48:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:48:56.872Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3988 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 483 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:48:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2021-11-27T20:48:56.387Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5fd33332-c012-4d3f-89d3-348f26863f24. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 482 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:48:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 481 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:44:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2021-11-28T20:43:31Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 480 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:44:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 479 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:44:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259164 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 478 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:44:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259164)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 477 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:44:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 476 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:44:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:<none> | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 475 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:44:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 474 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:44:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 473 | neutron-hyperv-agent | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:43:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 472 | nova-compute | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:42:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service has created default configuration for new user 'NC-MASTER-1\administrator' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 471 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:42:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 470 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:42:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2021-11-28T20:41:39Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 469 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:42:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 468 | cloudbase-init | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:42:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 467 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 1464 | 2852 | nch1-master-1.nc-master-1.local | S-1-5-18 | 11/27/2021 8:42:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Security policy in the Group policy objects has been applied successfully. | 1704 | | 16384 | 4 | 0 | | 36028797018963968 | 466 | SceCli | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:42:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 465 | cloudbase-init | | Application | | | nch1-master-1.nc-master-1.local | | 11/27/2021 8:41:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 464 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:41:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259166 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 463 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:41:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259166)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 462 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:41:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 461 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:41:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 460 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 11/27/2021 8:41:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 459 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 1464 | 1608 | nch1-master-1.nc-master-1.local | S-1-5-18 | 11/27/2021 8:41:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 458 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 1464 | 1500 | nch1-master-1.nc-master-1.local | S-1-5-18 | 11/27/2021 8:41:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 457 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | NCH1-MASTER-1 | | 11/27/2021 8:41:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 456 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 548 | 1680 | nch1-master-1 | S-1-5-18 | 11/27/2021 8:41:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 455 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:41:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The VSS service is shutting down due to shutdown event from the Service Control Manager. | 8225 | | 0 | 4 | 0 | | 36028797018963968 | 454 | VSS | | Application | | | nch1-master-1 | | 11/27/2021 8:41:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 453 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:34:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2021-11-28T20:33:35Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 452 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:34:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 451 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:34:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259174 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 450 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:34:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 449 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:34:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 448 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:34:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 447 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:34:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 446 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 5104 | 1452 | nch1-master-1 | S-1-5-18 | 11/27/2021 8:28:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2021?-?11?-?27T20:19:48.363631200Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 445 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 1172 | 3144 | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:19:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 4100. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 444 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 11/27/2021 8:19:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 443 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:19:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Ceph for Windows -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 442 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:19:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2021?-?11?-?27T20:19:48.363631200Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 441 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 1172 | 5060 | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:19:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 4100. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 440 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:19:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 439 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:19:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root list with effective date: ?Monday, ?October ?18, ?2021 8:14:37 PM. | 4111 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 438 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1744 | nch1-master-1 | | 11/27/2021 8:19:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 437 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1744 | nch1-master-1 | | 11/27/2021 8:19:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 436 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1744 | nch1-master-1 | | 11/27/2021 8:19:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 435 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1744 | nch1-master-1 | | 11/27/2021 8:19:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 434 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1744 | nch1-master-1 | | 11/27/2021 8:19:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 433 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1744 | nch1-master-1 | | 11/27/2021 8:19:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 432 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1744 | nch1-master-1 | | 11/27/2021 8:19:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 431 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1744 | nch1-master-1 | | 11/27/2021 8:19:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2021?-?11?-?27T20:12:11.064986300Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 430 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 3984 | 1152 | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:12:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 5036. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 429 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 11/27/2021 8:12:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 428 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:12:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 427 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:12:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2021?-?11?-?27T20:12:11.064986300Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 426 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 3984 | 5108 | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:12:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2021?-?11?-?27T20:12:10.408887100Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 425 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 3984 | 1152 | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:12:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2021?-?11?-?27T20:12:10.408887100Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 424 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 3984 | 4184 | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:12:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 5036. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 423 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:12:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 5036. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 422 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 11/27/2021 8:12:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 421 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:12:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 420 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:12:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 5036. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 419 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1001 | 11/27/2021 8:12:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 418 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 11/27/2021 8:12:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 417 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 4048 | 1140 | nch1-master-1 | S-1-5-18 | 11/27/2021 8:10:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 416 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1968 | nch1-master-1 | | 11/27/2021 8:10:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 415 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:08:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2021-11-28T20:07:05Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 414 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:08:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 413 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/05/26:20:07:35;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 412 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 411 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259200 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 410 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 409 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 408 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
These policies are being excluded since they are only defined with override-only attribute.
Policy Names=(Security-SPP-Reserved-EnableNotificationMode)
App Id=55c92734-d682-4d71-983e-d6ec3f16059f
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1033 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 407 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 406 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Validity period has been started. Validity minutes=259200 Grace type=9. | 1036 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 405 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MSA client has been successfully triggered to update the Device License | 12311 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 404 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f} | 12304 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 403 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f | 12305 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 402 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection ended.
| 20489 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 401 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 400 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check passed.
| 20482 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 399 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check initiated.
| 20481 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 398 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection started.
| 20488 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 397 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS.
| 1067 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 396 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE}
License Id=83a4632a-fa87-4180-80f3-3558ff98dbfc | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 395 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC}
License Id=6b1d9665-2ee4-438e-af76-d7b81f4ff636 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 394 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquisition of End User License was successful.
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1013 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 393 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 392 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1308 | nch1-master-1 | | 11/27/2021 8:07:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2021/12/07:20:03:24;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 391 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:07:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 390 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:06:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 389 | cloudbase-init | | Application | | | nch1-master-1 | | 11/27/2021 8:04:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 388 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:04:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied.
.
| 1534 | 0 | | 3 | 0 | 0 | -9223372036854775808 | 387 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 548 | 3068 | nch1-master-1 | S-1-5-21-3406607950-1493306065-2934654709-1000 | 11/27/2021 8:04:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service failed to create default configuration for new user 'NCH1-MASTER-1\Admin' in response to user profile creation. Error code 0x80070005.
Access is denied.
. | 6 | 0 | 49152 | 2 | 0 | 0 | 36028797018963968 | 386 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:04:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 385 | cloudbase-init | | Application | | | nch1-master-1 | | 11/27/2021 8:04:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service has created default configuration for new user 'NCH1-MASTER-1\cloudbase-init' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 384 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:04:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 383 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1724 | nch1-master-1 | | 11/27/2021 8:04:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 382 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 548 | 660 | nch1-master-1 | S-1-5-18 | 11/27/2021 8:04:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 381 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 548 | 1204 | nch1-master-1 | S-1-5-18 | 11/27/2021 8:04:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 380 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 548 | 1680 | nch1-master-1 | S-1-5-18 | 11/27/2021 8:04:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14399)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 379 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:04:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 378 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:04:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Proof of Purchase installed successfully.
ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4
PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845 | 1016 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 377 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:04:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 376 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | nch1-master-1 | | 11/27/2021 8:04:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 375 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 512 | 1468 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2021 8:03:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 374 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 11/27/2021 8:03:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de}
Writer Name: Microsoft Hyper-V VSS Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 373 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/27/2021 8:02:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?March ?16, ?2021 7:29:24 AM. | 4112 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 372 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1708 | 1800 | WIN-5T344G8GM1H | | 11/27/2021 8:02:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 371 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 512 | 548 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2021 8:02:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 370 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 512 | 1552 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2021 8:02:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 369 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 512 | 1468 | WIN-5T344G8GM1H | S-1-5-18 | 11/27/2021 8:02:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Name: Shadow Copy Optimization Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 368 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/27/2021 8:02:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 367 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/27/2021 8:02:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Writer Name: COM+ REGDB Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 366 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/27/2021 8:02:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 365 | VSS | | Application | | | WIN-5T344G8GM1H | | 11/27/2021 8:02:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 364 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 1228 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.
DETAIL -
9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500:
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore
Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main
Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security
| 1530 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 363 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 3432 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The winlogon notification subscriber <SessionEnv> failed a notification event. | 6001 | 0 | 32768 | 3 | 0 | 0 | 36028797018963968 | 362 | Microsoft-Windows-Winlogon | dbe9b383-7cf3-4331-91cc-a3cb16a3b538 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 361 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448 | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 360 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 359 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining. | 12306 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 358 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 357 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 356 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Grace period has been started. Grace days=10 Grace type=6. | 1025 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 355 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 354 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The hardware has changed. | 1024 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 353 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Hardware has changed from previous boot.
AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4. | 1040 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 352 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 351 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=Sysprep.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 350 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 349 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:47:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |