MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
The Software Protection service has stopped. 90301638400036028797018963968687Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 10:03:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-12-26T22:02:51Z. Reason: TBL.1638401638440036028797018963968686Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 10:03:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968685Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 10:03:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259089 minutes.103703276840036028797018963968684Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 10:03:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259089)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968683Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 10:03:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968682Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 10:03:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968681Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 10:03:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Fault bucket 2297874237392975317, type 5 Event Name: BEX64 Response: Not available Cab Id: 0 Problem signature: P1: vmms.exe P2: 10.0.14393.2035 P3: 5a5701be P4: ntdll.dll P5: 10.0.14393.1715 P6: 59b0d03e P7: 000000000009644f P8: c0000409 P9: 000000000000000a P10: Attached files: These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_vmms.exe_61d1379391a5b38b3776b51f526463e462c32_7dea5303_100a2a36 Analysis symbol: Rechecking for solution: 0 Report Id: 6b3995bc-2d6b-4d27-9080-1d62adcb90c6 Report Status: 0 Hashed bucket: 022a7b6d28d57728cfe3b071ba5475d5100104036028797018963968680Windows Error ReportingApplicationnch2-master-1.nc-master-1.local12/25/2021 10:02:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Fault bucket , type 0 Event Name: BEX64 Response: Not available Cab Id: 0 Problem signature: P1: vmms.exe P2: 10.0.14393.2035 P3: 5a5701be P4: ntdll.dll P5: 10.0.14393.1715 P6: 59b0d03e P7: 000000000009644f P8: c0000409 P9: 000000000000000a P10: Attached files: These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_vmms.exe_61d1379391a5b38b3776b51f526463e462c32_7dea5303_12ca21d9 Analysis symbol: Rechecking for solution: 0 Report Id: 6b3995bc-2d6b-4d27-9080-1d62adcb90c6 Report Status: 4 Hashed bucket: 100104036028797018963968679Windows Error ReportingApplicationnch2-master-1.nc-master-1.local12/25/2021 10:02:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Faulting application name: vmms.exe, version: 10.0.14393.2035, time stamp: 0x5a5701be Faulting module name: ntdll.dll, version: 10.0.14393.1715, time stamp: 0x59b0d03e Exception code: 0xc0000409 Fault offset: 0x000000000009644f Faulting process id: 0xa30 Faulting application start time: 0x01d7f9d2d8212211 Faulting application path: C:\windows\system32\vmms.exe Faulting module path: C:\windows\SYSTEM32\ntdll.dll Report Id: 6b3995bc-2d6b-4d27-9080-1d62adcb90c6 Faulting package full name: Faulting package-relative application ID: 10000210036028797018963968678Application ErrorApplicationnch2-master-1.nc-master-1.local12/25/2021 10:02:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoApplication Crashing EventsSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:41:45.602Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968677rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:41:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:41:45.602Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968676rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:41:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:41:45.602Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968675rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:41:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:41:45.602Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968674rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:41:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:41:45.602Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968673rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:41:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:41:45.602Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968672rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:41:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:41:44.084Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968671rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:41:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:41:08.320Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968670rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:41:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:40:35.289Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968669rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:40:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:49.442Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 19.2163844036028797018963968668rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:49.067Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-f03e9745-84e8-42ce-aae1-83a861dbd6292163844036028797018963968667rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:49.067Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 16882163844036028797018963968666rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:48.710Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-f03e9745-84e8-42ce-aae1-83a861dbd629. Error: -22163844036028797018963968665rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:19.036Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968664rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:19.036Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968663rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:19.036Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968662rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:19.036Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968661rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:19.036Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968660rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:19.036Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968659rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:10.571Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968658rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:10.571Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968657rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:10.571Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968656rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:10.571Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968655rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:10.571Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968654rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:10.571Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968653rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:39:07.802Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968652rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:39:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:38:34.572Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968651rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:38:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:38:01.680Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968650rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:38:01 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:37:09.902Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 18.2163844036028797018963968649rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:37:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:37:09.516Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-84b7c2f5-06e2-4582-b712-ba8e2cf1d2a72163844036028797018963968648rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:37:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:37:09.494Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 36082163844036028797018963968647rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:37:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:37:09.120Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-84b7c2f5-06e2-4582-b712-ba8e2cf1d2a7. Error: -22163844036028797018963968646rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:37:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:35:33.106Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 17.2163844036028797018963968645rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:35:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:35:32.716Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-1f66629a-ecb8-47cb-8a87-8abb304c2f962163844036028797018963968644rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:35:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:35:32.716Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 17202163844036028797018963968643rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:35:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:35:32.200Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-1f66629a-ecb8-47cb-8a87-8abb304c2f96. Error: -22163844036028797018963968642rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:35:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:34:45.236Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968641rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:34:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:34:45.236Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968640rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:34:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:34:45.233Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968639rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:34:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:34:45.233Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968638rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:34:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:34:45.233Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968637rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:34:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:34:45.233Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968636rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:34:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:34:41.604Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968635rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:34:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968634Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:33:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-12-26T21:32:50Z. Reason: TBL.1638401638440036028797018963968633Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:33:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968632Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:33:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259119 minutes.103703276840036028797018963968631Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:33:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259119)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968630Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:33:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968629Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:33:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968628Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:33:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:33:12.955Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 16.2163844036028797018963968627rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:33:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:33:12.582Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-63db5869-7587-4d2a-ac56-8b2e330928082163844036028797018963968626rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:33:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:33:12.582Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 27122163844036028797018963968625rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:33:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:33:12.212Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-63db5869-7587-4d2a-ac56-8b2e33092808. Error: -22163844036028797018963968624rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:33:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:31:00.069Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968623rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:31:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:31:00.069Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968622rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:31:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:31:00.069Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968621rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:31:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:31:00.069Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968620rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:31:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:31:00.069Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968619rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:31:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:31:00.069Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968618rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:31:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:18.155Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 15.2163844036028797018963968617rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:17.904Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-06661aab-01cf-4a95-94d1-d80c006009d62163844036028797018963968616rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:17.889Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 15282163844036028797018963968615rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:17.544Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-06661aab-01cf-4a95-94d1-d80c006009d6. Error: -22163844036028797018963968614rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.664Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968613rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.664Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968612rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.664Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968611rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.664Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968610rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.664Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968609rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.664Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968608rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.214Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968607rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.214Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968606rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.214Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968605rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.214Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968604rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.214Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968603rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:03.214Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968602rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:02.933Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968601rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:02.933Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968600rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:02.933Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968599rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:02.933Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968598rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:02.933Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968597rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:30:02.933Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968596rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:30:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:49.777Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968595rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:49.777Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968594rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:49.777Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968593rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:49.777Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968592rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:49.777Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968591rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:49.777Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968590rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:08.931Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 14.2163844036028797018963968589rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:08.710Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-240601d5-5803-4db4-ad87-ded28e2eb84d2163844036028797018963968588rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:08.710Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 41282163844036028797018963968587rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:08.276Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-240601d5-5803-4db4-ad87-ded28e2eb84d. Error: -22163844036028797018963968586rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:02.117Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968585rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:02.117Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968584rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:02.117Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968583rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:02.117Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968582rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:02.117Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968581rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:23:02.117Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968580rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:23:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:22:57.961Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 13.2163844036028797018963968579rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:22:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:22:57.166Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-115961e3-4417-4431-86e4-91e13094bf9d2163844036028797018963968578rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:22:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:22:57.166Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 31762163844036028797018963968577rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:22:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:22:56.758Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-115961e3-4417-4431-86e4-91e13094bf9d. Error: -22163844036028797018963968576rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:22:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:46.651Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968575rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:46.651Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968574rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:46.651Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968573rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:46.651Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968572rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:46.651Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968571rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:46.651Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968570rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:45.058Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968569rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:45.058Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968568rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:45.058Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968567rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:45.058Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968566rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:45.058Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968565rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:45.058Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968564rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:39.966Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 12.2163844036028797018963968563rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:39.544Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-2ff193c5-1a26-432e-be9f-a6ab5fa96be02163844036028797018963968562rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:39.544Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 8282163844036028797018963968561rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:39.201Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-2ff193c5-1a26-432e-be9f-a6ab5fa96be0. Error: -22163844036028797018963968560rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:30.082Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 11.2163844036028797018963968559rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:29.884Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-4de2a9cd-6d5d-47b9-895c-cd2b5909bc972163844036028797018963968558rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:29.884Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 19002163844036028797018963968557rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:21:29.513Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-4de2a9cd-6d5d-47b9-895c-cd2b5909bc97. Error: -22163844036028797018963968556rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:21:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:20.480Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 10.2163844036028797018963968555rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:20.047Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-15822ef8-a596-47a7-bea5-391cbe2651d72163844036028797018963968554rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:20.047Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 41722163844036028797018963968553rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:19.654Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-15822ef8-a596-47a7-bea5-391cbe2651d7. Error: -22163844036028797018963968552rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:18.918Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 9.2163844036028797018963968551rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:18.574Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-801c9bae-0e8c-4c69-99a2-93bfda7668af2163844036028797018963968550rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:18.574Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 40282163844036028797018963968549rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:18.168Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-801c9bae-0e8c-4c69-99a2-93bfda7668af. Error: -22163844036028797018963968548rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:17.543Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 8.2163844036028797018963968547rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:17.247Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-a5c1ad6f-a4c5-4f08-a59c-fa1afed020652163844036028797018963968546rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:17.247Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 25922163844036028797018963968545rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:20:16.846Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-a5c1ad6f-a4c5-4f08-a59c-fa1afed02065. Error: -22163844036028797018963968544rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:20:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:18:12.794Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968543rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:18:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:18:12.794Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968542rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:18:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:18:12.767Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968541rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:18:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:18:12.767Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968540rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:18:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:18:12.767Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968539rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:18:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:18:12.767Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968538rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:18:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:09.664Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968537rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:09.664Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968536rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:09.664Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968535rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:09.664Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968534rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:08.090Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 7.2163844036028797018963968533rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:07.771Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-9ddbed29-7029-4b8d-ab16-b904195f25822163844036028797018963968532rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:07.771Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 39882163844036028797018963968531rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:07.346Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-9ddbed29-7029-4b8d-ab16-b904195f2582. Error: -22163844036028797018963968530rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:04.630Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 6.2163844036028797018963968529rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:04.409Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-451b93e3-1579-44a1-b05d-3475df3c0e222163844036028797018963968528rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:04.409Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 35122163844036028797018963968527rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:17:04.034Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-451b93e3-1579-44a1-b05d-3475df3c0e22. Error: -22163844036028797018963968526rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:17:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:52.363Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968525rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:52.363Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968524rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:52.363Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968523rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:52.363Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968522rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:52.363Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968521rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:52.363Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968520rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:51.781Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968519rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:51.781Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968518rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:51.781Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968517rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:51.781Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968516rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:51.781Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968515rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:51.781Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968514rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:35.425Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 5.2163844036028797018963968513rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:35.215Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-98b6d31e-e760-499e-8962-7b22479c1e9a2163844036028797018963968512rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:35.215Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 32522163844036028797018963968511rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:34.856Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-98b6d31e-e760-499e-8962-7b22479c1e9a. Error: -22163844036028797018963968510rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:20.807Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 4.2163844036028797018963968509rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:20.548Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-a4054058-9bcb-4981-a993-8da409df7a332163844036028797018963968508rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:20.548Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 44802163844036028797018963968507rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:12:20.189Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-a4054058-9bcb-4981-a993-8da409df7a33. Error: -22163844036028797018963968506rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:12:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:11:37.734Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968505rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:11:37.734Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968504rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:11:37.720Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968503rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:11:37.720Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968502rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:11:37.720Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968501rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:11:37.720Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968500rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:11:11.297Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 3.2163844036028797018963968499rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:11:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:11:10.984Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-ceac9d3a-b469-4d1c-92ba-9db241c60a472163844036028797018963968498rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:11:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:11:10.984Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 50962163844036028797018963968497rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:11:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:11:10.577Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-ceac9d3a-b469-4d1c-92ba-9db241c60a47. Error: -22163844036028797018963968496rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:11:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808495Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application29404256nch2-master-1.nc-master-1.localS-1-5-1812/25/2021 9:11:01 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:10:12.910Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968494rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:10:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:10:12.910Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968493rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:10:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:10:12.910Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968492rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:10:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:10:12.910Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968491rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:10:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:10:12.910Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968490rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:10:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:10:12.910Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968489rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:10:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:09:45.331Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 2.2163844036028797018963968488rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:09:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:09:45.003Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-64f56b9c-4663-4274-84df-9ac590d6eef02163844036028797018963968487rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:09:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:09:45.003Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 45402163844036028797018963968486rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:09:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2021-12-25T21:09:44.502Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-64f56b9c-4663-4274-84df-9ac590d6eef0. Error: -22163844036028797018963968485rbd-wnbdApplicationnch2-master-1.nc-master-1.local12/25/2021 9:09:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968484Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:05:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-12-26T21:04:51Z. Reason: TBL.1638401638440036028797018963968483Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:05:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968482Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:05:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259147 minutes.103703276840036028797018963968481Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:05:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259147)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968480Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:05:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968479Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:05:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:<none>90001638440036028797018963968478Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:05:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1 420201638442036028797018963968477Microsoft-Windows-MSDTC 25d9e0020-3761-4f36-90c8-38ce6511bd12Application00nch2-master-1.nc-master-1.local12/25/2021 9:05:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationTMSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968476neutron-hyperv-agentApplicationnch2-master-1.nc-master-1.local12/25/2021 9:04:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968475nova-computeApplicationnch2-master-1.nc-master-1.local12/25/2021 9:04:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NC-MASTER-1\administrator' . 501638440036028797018963968474Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch2-master-1.nc-master-1.local12/25/2021 9:04:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968473Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:03:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-12-26T21:02:59Z. Reason: TBL.1638401638440036028797018963968472Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:03:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968471cloudbase-initApplicationnch2-master-1.nc-master-1.local12/25/2021 9:03:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Security policy in the Group policy objects has been applied successfully.1704163844036028797018963968470SceCliApplicationnch2-master-1.nc-master-1.local12/25/2021 9:03:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808469Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication14921660nch2-master-1.nc-master-1.localS-1-5-1812/25/2021 9:03:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968468Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:03:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259149 minutes.103703276840036028797018963968467Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:03:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259149)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968466Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:03:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968465cloudbase-initApplicationnch2-master-1.nc-master-1.local12/25/2021 9:03:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968464Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:03:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968463Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local12/25/2021 9:03:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808462Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application14921520nch2-master-1.nc-master-1.localS-1-5-1812/25/2021 9:03:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808461Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication14921552nch2-master-1.nc-master-1.localS-1-5-1812/25/2021 9:03:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808460Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5441748nch2-master-1S-1-5-1812/25/2021 9:02:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.411101638441036028797018963968459Microsoft-Windows-MSDTC719be4ed-e9bc-4dd8-a7cf-c85ce8e4975dApplication00nch2-master-112/25/2021 9:02:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSVCSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager. 822504036028797018963968458VSSApplicationnch2-master-112/25/2021 9:02:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968457Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:38:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-12-26T20:37:43Z. Reason: TBL.1638401638440036028797018963968456Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:38:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968455Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:38:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259174 minutes.103703276840036028797018963968454Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:38:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968453Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:38:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968452Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:38:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968451Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:38:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808450Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application50843788nch2-master-1S-1-5-1812/25/2021 8:31:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2021?-?12?-?25T20:23:48.634533700Z.100010400-9223372036854775808449Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application44442396nch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:23:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 104.104204036028797018963968448MsiInstallerApplicationnch2-master-1S-1-5-1812/25/2021 8:23:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.103304036028797018963968447MsiInstallerApplicationnch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:23:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Ceph for Windows -- Installation completed successfully.1170704036028797018963968446MsiInstallerApplicationnch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:23:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2021?-?12?-?25T20:23:48.634533700Z.100000400-9223372036854775808445Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application44442184nch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:23:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 104.104004036028797018963968444MsiInstallerApplicationnch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:23:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.103304036028797018963968443MsiInstallerApplicationnch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:23:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root list with effective date: ?Monday, ?October ?18, ?2021 8:14:37 PM.411100400-9187343239835811840442Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13244728nch2-master-112/25/2021 8:20:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>.410900400-9187343239835811840441Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13244728nch2-master-112/25/2021 8:20:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>.410900400-9187343239835811840440Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13244728nch2-master-112/25/2021 8:20:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>.410900400-9187343239835811840439Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13244728nch2-master-112/25/2021 8:20:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.410900400-9187343239835811840438Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13244728nch2-master-112/25/2021 8:20:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>.410900400-9187343239835811840437Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13244728nch2-master-112/25/2021 8:20:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.410900400-9187343239835811840436Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13244728nch2-master-112/25/2021 8:20:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.410900400-9187343239835811840435Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13244728nch2-master-112/25/2021 8:20:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2021?-?12?-?25T20:15:40.489465800Z.100010400-9223372036854775808434Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application46603880nch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:15:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 3692.104204036028797018963968433MsiInstallerApplicationnch2-master-1S-1-5-1812/25/2021 8:15:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.103304036028797018963968432MsiInstallerApplicationnch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:15:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully.1170704036028797018963968431MsiInstallerApplicationnch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:15:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2021?-?12?-?25T20:15:40.489465800Z.100000400-9223372036854775808430Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application46603788nch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:15:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2021?-?12?-?25T20:15:39.968644300Z.100010400-9223372036854775808429Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application46603880nch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:15:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2021?-?12?-?25T20:15:39.968644300Z.100000400-9223372036854775808428Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application46604744nch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:15:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 3692.104004036028797018963968427MsiInstallerApplicationnch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:15:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 3692.104204036028797018963968426MsiInstallerApplicationnch2-master-1S-1-5-1812/25/2021 8:15:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.103304036028797018963968425MsiInstallerApplicationnch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:15:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully.1170704036028797018963968424MsiInstallerApplicationnch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:15:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 3692.104004036028797018963968423MsiInstallerApplicationnch2-master-1S-1-5-21-1198423013-1918938028-429964960-100112/25/2021 8:15:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0.103504036028797018963968422MsiInstallerApplicationnch2-master-1S-1-5-1812/25/2021 8:15:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808421Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application18043868nch2-master-1S-1-5-1812/25/2021 8:14:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.409700400-9187343239835811840420Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13241652nch2-master-112/25/2021 8:14:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968419Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:12:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-12-26T20:11:21Z. Reason: TBL.1638401638440036028797018963968418Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:12:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent819704915240036028797018963968417Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/06/23:20:11:50;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968416Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent819704915240036028797018963968415Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259200 minutes.103703276840036028797018963968414Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968413Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968412Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
These policies are being excluded since they are only defined with override-only attribute. Policy Names=(Security-SPP-Reserved-EnableNotificationMode) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4103301638440036028797018963968411Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100103401638440036028797018963968410Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Validity period has been started. Validity minutes=259200 Grace type=9.103601638440036028797018963968409Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSA client has been successfully triggered to update the Device License1231101638440036028797018963968408Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f}1230401638440036028797018963968407Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f1230501638440036028797018963968406Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
License Activation (slui.exe) failed with the following error code: hr=0x8007139F Command-line arguments: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=NetworkAvailable819804915220036028797018963968405Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0xC004E003, 0, 0], [( 10 0xC004F200 msft:rm/algorithm/flags/1.0)( 1 0x00000000)(?)(?)(?)(?)( 10 0xC004F200 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14395)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968404Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/01/04:20:06:47;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968403Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection ended. 2048904915240036028797018963968402Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968401Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check passed. 2048204915240036028797018963968400Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check initiated. 2048104915240036028797018963968399Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection started. 2048804915240036028797018963968398Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS. 106703276840036028797018963968397Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE} License Id=21980e30-8639-4b48-9344-a593a0a9f028100401638440036028797018963968396Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC} License Id=547bcf97-2d7f-44df-86fc-450be275ed22100401638440036028797018963968395Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Acquisition of End User License was successful. Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4101301638400036028797018963968394Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.409700400-9187343239835811840393Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13241624nch2-master-112/25/2021 8:11:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/01/04:20:07:39;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968392Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:11:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1 420201638442036028797018963968391Microsoft-Windows-MSDTC 25d9e0020-3761-4f36-90c8-38ce6511bd12Application00nch2-master-112/25/2021 8:10:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationTMSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968390cloudbase-initApplicationnch2-master-112/25/2021 8:09:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968389Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:08:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied. . 15340300-9223372036854775808388Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5442916nch2-master-1S-1-5-21-1198423013-1918938028-429964960-100012/25/2021 8:08:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service failed to create default configuration for new user 'NCH2-MASTER-1\Admin' in response to user profile creation. Error code 0x80070005. Access is denied. .604915220036028797018963968387Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch2-master-112/25/2021 8:08:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968386cloudbase-initApplicationnch2-master-112/25/2021 8:08:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NCH2-MASTER-1\cloudbase-init' . 501638440036028797018963968385Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch2-master-112/25/2021 8:08:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.409700400-9187343239835811840384Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13241624nch2-master-112/25/2021 8:08:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808383Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5441952nch2-master-1S-1-5-1812/25/2021 8:08:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808382Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5441220nch2-master-1S-1-5-1812/25/2021 8:08:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808381Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5441748nch2-master-1S-1-5-1812/25/2021 8:08:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14399)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968380Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:08:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968379Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:08:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Proof of Purchase installed successfully. ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845101601638440036028797018963968378Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-112/25/2021 8:08:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.462501638440036028797018963968377Microsoft-Windows-EventSystem899daace-4868-4295-afcd-9eb8fb497561Application00nch2-master-112/25/2021 8:08:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808376Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5441488WIN-5T344G8GM1HS-1-5-1812/25/2021 8:07:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968375Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H12/25/2021 8:07:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager. 822504036028797018963968374VSSApplicationWIN-5T344G8GM1H12/25/2021 8:07:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} Writer Name: Microsoft Hyper-V VSS Writer821204036028797018963968373VSSApplicationWIN-5T344G8GM1H12/25/2021 8:06:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?March ?16, ?2021 7:29:24 AM.411200400-9187343239835811840372Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication17161808WIN-5T344G8GM1H12/25/2021 8:06:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808371Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication544568WIN-5T344G8GM1HS-1-5-1812/25/2021 8:06:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808370Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5441612WIN-5T344G8GM1HS-1-5-1812/25/2021 8:06:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808369Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5441488WIN-5T344G8GM1HS-1-5-1812/25/2021 8:06:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer821204036028797018963968368VSSApplicationWIN-5T344G8GM1H12/25/2021 8:06:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4} Writer Name: ASR Writer821204036028797018963968367VSSApplicationWIN-5T344G8GM1H12/25/2021 8:06:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f} Writer Name: COM+ REGDB Writer821204036028797018963968366VSSApplicationWIN-5T344G8GM1H12/25/2021 8:06:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485} Writer Name: Registry Writer821204036028797018963968365VSSApplicationWIN-5T344G8GM1H12/25/2021 8:06:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808364Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application9761228WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:13 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required. DETAIL - 9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500: Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security 15300400-9223372036854775808363Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application9763432WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The winlogon notification subscriber <SessionEnv> failed a notification event.600103276830036028797018963968362Microsoft-Windows-Winlogondbe9b383-7cf3-4331-91cc-a3cb16a3b538Application00WIN-5T344G8GM1H1/19/2018 9:48:12 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent819704915240036028797018963968361Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448823001638440036028797018963968360Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 100301638440036028797018963968359Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining.1230601638440036028797018963968358Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968357Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968356Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Grace period has been started. Grace days=10 Grace type=6.102501638440036028797018963968355Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968354Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The hardware has changed.102403276840036028797018963968353Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hardware has changed from previous boot. AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4.104001638440036028797018963968352Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968351Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=Sysprep.exe90001638440036028797018963968350Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.411101638441036028797018963968349Microsoft-Windows-MSDTC719be4ed-e9bc-4dd8-a7cf-c85ce8e4975dApplication00WIN-5T344G8GM1H1/19/2018 9:47:34 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSVCSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]