MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
2022-01-22T22:36:09.188Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968716rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:36:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:36:09.188Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968715rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:36:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:36:09.171Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968714rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:36:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:36:09.171Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968713rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:36:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:36:09.171Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968712rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:36:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:36:09.171Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968711rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:36:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:32:32.490Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 22.2163844036028797018963968710rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:32:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:32:32.279Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-0cd27e59-cbf1-4e87-9871-9b39e1e0cbc92163844036028797018963968709rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:32:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:32:32.279Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 48322163844036028797018963968708rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:32:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:32:31.943Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-0cd27e59-cbf1-4e87-9871-9b39e1e0cbc9. Error: -22163844036028797018963968707rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:32:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968706Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 10:26:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-01-23T22:25:51Z. Reason: TBL.1638401638440036028797018963968705Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 10:26:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968704Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 10:26:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259062 minutes.103703276840036028797018963968703Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 10:26:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259062)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968702Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 10:26:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968701Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 10:26:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968700Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 10:26:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:16:32.094Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968699rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:16:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:16:32.094Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968698rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:16:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:16:32.094Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968697rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:16:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:16:32.094Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968696rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:16:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:16:32.094Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968695rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:16:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:16:32.094Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968694rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:16:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:14:06.884Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 21.2163844036028797018963968693rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:14:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:14:06.759Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-8fa161d7-5601-4846-82ec-131a92a4cdbb2163844036028797018963968692rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:14:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:14:06.759Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 49162163844036028797018963968691rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:14:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:14:06.324Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-8fa161d7-5601-4846-82ec-131a92a4cdbb. Error: -22163844036028797018963968690rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:14:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:11:40.415Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968689rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:11:40.415Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968688rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:11:40.399Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968687rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:11:40.399Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968686rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:11:40.399Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968685rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:11:40.399Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968684rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:11:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:11:33.700Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 20.2163844036028797018963968683rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:11:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:11:33.417Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-6306e2dc-90a5-4e80-bc1e-986664ed75cd2163844036028797018963968682rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:11:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:11:33.417Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 48842163844036028797018963968681rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:11:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T22:11:33.071Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-6306e2dc-90a5-4e80-bc1e-986664ed75cd. Error: -22163844036028797018963968680rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 10:11:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968679Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:56:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-01-23T21:55:51Z. Reason: TBL.1638401638440036028797018963968678Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:56:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968677Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:56:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259092 minutes.103703276840036028797018963968676Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:56:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259092)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968675Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:56:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968674Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:56:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968673Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:56:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:56:12.350Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968672rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:56:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:56:12.350Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968671rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:56:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:56:12.339Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968670rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:56:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:56:12.339Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968669rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:56:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:56:12.339Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968668rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:56:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:56:12.339Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968667rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:56:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:51:08.550Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 19.2163844036028797018963968666rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:51:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:51:08.308Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-7787920b-4db0-477d-a5ae-1db8121ceed72163844036028797018963968665rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:51:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:51:08.308Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 48362163844036028797018963968664rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:51:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:51:07.865Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-7787920b-4db0-477d-a5ae-1db8121ceed7. Error: -22163844036028797018963968663rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:51:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:46:52.451Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968662rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:46:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:46:52.451Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968661rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:46:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:46:52.451Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968660rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:46:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:46:52.451Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968659rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:46:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:46:52.451Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968658rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:46:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:46:52.451Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968657rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:46:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:43:17.849Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 18.2163844036028797018963968656rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:43:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:43:17.639Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-0bfe528f-1900-4abf-897d-9ebc47bcb9b12163844036028797018963968655rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:43:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:43:17.639Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 11722163844036028797018963968654rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:43:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:43:17.286Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-0bfe528f-1900-4abf-897d-9ebc47bcb9b1. Error: -22163844036028797018963968653rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:43:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:42:51.266Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968652rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:42:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:42:51.266Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968651rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:42:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:42:51.266Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968650rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:42:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:42:51.266Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968649rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:42:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:42:51.266Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968648rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:42:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:42:51.266Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968647rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:42:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:42:48.177Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968646rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:42:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:41:34.737Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 17.2163844036028797018963968645rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:41:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:41:34.492Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5372a0ff-89fb-48b9-9dc8-50dcd6dd49442163844036028797018963968644rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:41:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:41:34.487Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 60042163844036028797018963968643rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:41:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:41:34.128Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5372a0ff-89fb-48b9-9dc8-50dcd6dd4944. Error: -22163844036028797018963968642rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:41:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:41:06.410Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968641rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:41:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:41:06.410Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968640rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:41:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:41:06.395Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968639rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:41:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:41:06.395Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968638rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:41:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:41:06.395Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968637rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:41:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:41:06.395Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968636rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:41:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:40:56.321Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 16.2163844036028797018963968635rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:40:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:40:56.088Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-e3f7c0ce-b7d4-49f4-8c46-cd7db554e5462163844036028797018963968634rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:40:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:40:56.088Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 59162163844036028797018963968633rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:40:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:40:55.739Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-e3f7c0ce-b7d4-49f4-8c46-cd7db554e546. Error: -22163844036028797018963968632rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:40:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:37:06.904Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968631rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:37:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:37:06.904Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968630rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:37:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:37:06.904Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968629rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:37:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:37:06.878Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968628rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:37:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:37:06.878Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968627rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:37:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:37:06.878Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968626rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:37:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:37:04.769Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968625rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:37:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:36:32.999Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968624rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:36:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:36:00.880Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968623rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:36:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:35:13.583Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 15.2163844036028797018963968622rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:35:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:35:13.274Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-03eda9d7-c3c3-4b8d-8aa5-a1533f9ce58b2163844036028797018963968621rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:35:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:35:13.274Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 58242163844036028797018963968620rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:35:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:35:12.864Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-03eda9d7-c3c3-4b8d-8aa5-a1533f9ce58b. Error: -22163844036028797018963968619rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:35:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:31:22.504Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968618rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:31:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:31:22.504Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968617rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:31:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:31:22.504Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968616rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:31:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:31:22.504Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968615rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:31:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:31:22.504Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968614rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:31:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:31:22.504Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968613rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:31:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:30:57.891Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 14.2163844036028797018963968612rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:30:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:30:57.597Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5c51668d-fc20-4f01-a879-3813357f7a732163844036028797018963968611rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:30:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:30:57.597Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 44682163844036028797018963968610rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:30:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:30:57.138Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5c51668d-fc20-4f01-a879-3813357f7a73. Error: -22163844036028797018963968609rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:30:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:27:16.006Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968608rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:27:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:27:16.006Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968607rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:27:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:27:16.006Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968606rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:27:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:27:16.006Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968605rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:27:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:27:16.006Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968604rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:27:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:27:16.006Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968603rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:27:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968602Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:26:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-01-23T21:25:50Z. Reason: TBL.1638401638440036028797018963968601Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:26:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:26:41.933Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 13.2163844036028797018963968600rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:26:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:26:41.555Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-95aa6904-b117-424d-b97b-91744fe32d8a2163844036028797018963968599rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:26:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:26:41.555Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 58562163844036028797018963968598rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:26:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:26:41.153Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-95aa6904-b117-424d-b97b-91744fe32d8a. Error: -22163844036028797018963968597rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:26:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968596Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:26:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259122 minutes.103703276840036028797018963968595Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:26:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259122)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968594Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:26:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968593Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:26:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968592Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 9:26:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:22:51.456Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968591rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:22:51.456Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968590rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:22:51.456Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968589rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:22:51.456Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968588rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:22:51.456Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968587rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:22:51.456Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968586rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:22:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:22:46.472Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 12.2163844036028797018963968585rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:22:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:22:46.064Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-62156b55-9cd2-42c5-94d9-6b135ebd45d12163844036028797018963968584rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:22:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:22:46.064Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 50762163844036028797018963968583rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:22:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:22:45.674Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-62156b55-9cd2-42c5-94d9-6b135ebd45d1. Error: -22163844036028797018963968582rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:22:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:17:58.840Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968581rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:17:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:17:58.840Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968580rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:17:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:17:58.840Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968579rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:17:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:17:58.840Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968578rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:17:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:17:58.840Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968577rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:17:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:17:58.840Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968576rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:17:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.790Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968575rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.790Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968574rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.790Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968573rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.767Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968572rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.767Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968571rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.767Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968570rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.547Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968569rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.547Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968568rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.547Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968567rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.333Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968566rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.333Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968565rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.333Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968564rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.333Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968563rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.333Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968562rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:16:38.333Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968561rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:16:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:15:52.282Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968560rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:15:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:15:52.282Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968559rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:15:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:15:52.255Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968558rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:15:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:15:52.255Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968557rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:15:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:15:52.255Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968556rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:15:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:15:52.255Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968555rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:15:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:15:47.011Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 11.2163844036028797018963968554rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:15:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:15:46.689Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-17dd6a14-8c30-4a4b-8cea-30088ada29482163844036028797018963968553rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:15:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:15:46.689Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 58802163844036028797018963968552rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:15:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:15:46.239Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-17dd6a14-8c30-4a4b-8cea-30088ada2948. Error: -22163844036028797018963968551rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:15:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:11:53.495Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968550rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:11:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:11:53.495Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968549rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:11:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:11:53.481Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968548rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:11:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:11:53.481Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968547rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:11:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:11:53.481Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968546rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:11:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:11:53.481Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968545rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:11:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:11:49.857Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 10.2163844036028797018963968544rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:11:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:11:49.575Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-8d503e5d-13b7-4392-b749-17ade718b9e52163844036028797018963968543rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:11:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:11:49.575Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 31042163844036028797018963968542rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:11:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:11:49.143Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-8d503e5d-13b7-4392-b749-17ade718b9e5. Error: -22163844036028797018963968541rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:11:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:08:10.007Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 9.2163844036028797018963968540rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:08:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:08:09.692Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-6b81486c-e9f9-4b20-965d-ed0bac18454b2163844036028797018963968539rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:08:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:08:09.692Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 44442163844036028797018963968538rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:08:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:08:09.227Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-6b81486c-e9f9-4b20-965d-ed0bac18454b. Error: -22163844036028797018963968537rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:08:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:54.656Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 8.2163844036028797018963968536rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:54.478Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-fdf5d208-3baf-45d3-9815-e2f0994a442c2163844036028797018963968535rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:54.478Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 26842163844036028797018963968534rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:54.118Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-fdf5d208-3baf-45d3-9815-e2f0994a442c. Error: -22163844036028797018963968533rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:53.465Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 7.2163844036028797018963968532rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:53.257Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-7ef1c996-ac87-48c1-a8c2-c58eed7d1c142163844036028797018963968531rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:53.241Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 25762163844036028797018963968530rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:52.875Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-7ef1c996-ac87-48c1-a8c2-c58eed7d1c14. Error: -22163844036028797018963968529rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:52.217Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 6.2163844036028797018963968528rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:51.889Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-7175172a-4e03-45a2-96c6-13d0d8d19ff62163844036028797018963968527rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:51.889Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 50722163844036028797018963968526rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:06:51.531Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-7175172a-4e03-45a2-96c6-13d0d8d19ff6. Error: -22163844036028797018963968525rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:06:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:32.403Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968524rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:32.403Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968523rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:32.403Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968522rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:32.403Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968521rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:32.403Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968520rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:32.403Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968519rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:30.386Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968518rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:25.024Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968517rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:25.024Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968516rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:25.024Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968515rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:25.024Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968514rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:25.024Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968513rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:25.024Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968512rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:18.177Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 5.2163844036028797018963968511rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:17.907Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-0b17e2f4-e149-4a4b-b525-3d029be2e6f62163844036028797018963968510rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:17.907Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 26162163844036028797018963968509rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:17.513Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-0b17e2f4-e149-4a4b-b525-3d029be2e6f6. Error: -22163844036028797018963968508rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:05.186Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 4.2163844036028797018963968507rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:04.950Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-77269952-ab3c-402f-ad65-b6254782bbb82163844036028797018963968506rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:04.950Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 33482163844036028797018963968505rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:05:04.590Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-77269952-ab3c-402f-ad65-b6254782bbb8. Error: -22163844036028797018963968504rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:05:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808503Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application50403324nch2-master-1.nc-master-1.localS-1-5-181/22/2022 9:03:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:24.907Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968502rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:24.907Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968501rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:24.893Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968500rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:24.893Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968499rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:24.893Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968498rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:24.893Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968497rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:05.626Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968496rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:05.626Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968495rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:05.626Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968494rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:05.626Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968493rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:05.626Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968492rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:03:05.626Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968491rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:03:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:02:50.164Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 3.2163844036028797018963968490rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:02:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:02:49.910Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-135c98ab-cd95-4a5b-baa2-e72e4414fe5b2163844036028797018963968489rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:02:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:02:49.910Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 32482163844036028797018963968488rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:02:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:02:49.469Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-135c98ab-cd95-4a5b-baa2-e72e4414fe5b. Error: -22163844036028797018963968487rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:02:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:02:42.923Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 2.2163844036028797018963968486rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:02:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:02:41.926Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-ce68f69a-0548-4980-9511-4b7d28d8afda2163844036028797018963968485rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:02:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:02:41.926Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 37922163844036028797018963968484rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:02:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-01-22T21:02:41.439Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-ce68f69a-0548-4980-9511-4b7d28d8afda. Error: -22163844036028797018963968483rbd-wnbdApplicationnch2-master-1.nc-master-1.local1/22/2022 9:02:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968482Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:58:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-01-23T20:57:52Z. Reason: TBL.1638401638440036028797018963968481Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:58:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968480Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:58:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259150 minutes.103703276840036028797018963968479Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:58:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259150)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968478Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:58:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968477Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:58:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:<none>90001638440036028797018963968476Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:58:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1 420201638442036028797018963968475Microsoft-Windows-MSDTC 25d9e0020-3761-4f36-90c8-38ce6511bd12Application00nch2-master-1.nc-master-1.local1/22/2022 8:58:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationTMSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968474neutron-hyperv-agentApplicationnch2-master-1.nc-master-1.local1/22/2022 8:57:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968473nova-computeApplicationnch2-master-1.nc-master-1.local1/22/2022 8:57:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NC-MASTER-1\administrator' . 501638440036028797018963968472Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch2-master-1.nc-master-1.local1/22/2022 8:57:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968471Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:57:01 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-01-23T20:56:01Z. Reason: TBL.1638401638440036028797018963968470Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:57:01 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968469cloudbase-initApplicationnch2-master-1.nc-master-1.local1/22/2022 8:56:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Security policy in the Group policy objects has been applied successfully.1704163844036028797018963968468SceCliApplicationnch2-master-1.nc-master-1.local1/22/2022 8:56:23 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808467Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication14801676nch2-master-1.nc-master-1.localS-1-5-181/22/2022 8:56:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968466Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:56:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968465cloudbase-initApplicationnch2-master-1.nc-master-1.local1/22/2022 8:56:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259152 minutes.103703276840036028797018963968464Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:56:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259152)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968463Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:56:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968462Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:56:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968461Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-1.nc-master-1.local1/22/2022 8:56:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808460Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication14801536nch2-master-1.nc-master-1.localS-1-5-181/22/2022 8:56:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808459Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application14801500nch2-master-1.nc-master-1.localS-1-5-181/22/2022 8:56:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.462501638440036028797018963968458Microsoft-Windows-EventSystem899daace-4868-4295-afcd-9eb8fb497561Application00NCH2-MASTER-11/22/2022 8:56:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808457Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5561720nch2-master-1S-1-5-181/22/2022 8:55:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager. 822504036028797018963968456VSSApplicationnch2-master-11/22/2022 8:55:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.411101638441036028797018963968455Microsoft-Windows-MSDTC719be4ed-e9bc-4dd8-a7cf-c85ce8e4975dApplication00nch2-master-11/22/2022 8:55:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSVCSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968454Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:35:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-01-23T20:34:41Z. Reason: TBL.1638401638440036028797018963968453Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:35:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968452Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:35:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259174 minutes.103703276840036028797018963968451Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:35:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968450Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:35:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968449Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:35:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968448Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:35:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808447Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application48643876nch2-master-1S-1-5-181/22/2022 8:28:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?01?-?22T20:20:09.718894800Z.100010400-9223372036854775808446Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application43405092nch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:20:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 4780.104204036028797018963968445MsiInstallerApplicationnch2-master-1S-1-5-181/22/2022 8:20:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.103304036028797018963968444MsiInstallerApplicationnch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:20:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Ceph for Windows -- Installation completed successfully.1170704036028797018963968443MsiInstallerApplicationnch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:20:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?01?-?22T20:20:09.718894800Z.100000400-9223372036854775808442Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application43404792nch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:20:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 4780.104004036028797018963968441MsiInstallerApplicationnch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:20:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.103304036028797018963968440MsiInstallerApplicationnch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:20:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root list with effective date: ?Monday, ?October ?18, ?2021 8:14:37 PM.411100400-9187343239835811840439Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13404804nch2-master-11/22/2022 8:17:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>.410900400-9187343239835811840438Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13404804nch2-master-11/22/2022 8:17:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>.410900400-9187343239835811840437Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13404804nch2-master-11/22/2022 8:17:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>.410900400-9187343239835811840436Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13404804nch2-master-11/22/2022 8:17:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.410900400-9187343239835811840435Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13404804nch2-master-11/22/2022 8:17:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>.410900400-9187343239835811840434Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13404804nch2-master-11/22/2022 8:17:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.410900400-9187343239835811840433Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13404804nch2-master-11/22/2022 8:17:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.410900400-9187343239835811840432Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13404804nch2-master-11/22/2022 8:17:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?01?-?22T20:11:37.440780700Z.100010400-9223372036854775808431Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application43924600nch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:11:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 1032.104204036028797018963968430MsiInstallerApplicationnch2-master-1S-1-5-181/22/2022 8:11:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.103304036028797018963968429MsiInstallerApplicationnch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:11:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully.1170704036028797018963968428MsiInstallerApplicationnch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:11:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?01?-?22T20:11:37.440780700Z.100000400-9223372036854775808427Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application43924924nch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?01?-?22T20:11:36.707597500Z.100010400-9223372036854775808426Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application43924600nch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?01?-?22T20:11:36.707597500Z.100000400-9223372036854775808425Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application4392168nch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:11:36 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 1032.104004036028797018963968424MsiInstallerApplicationnch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 1032.104204036028797018963968423MsiInstallerApplicationnch2-master-1S-1-5-181/22/2022 8:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.103304036028797018963968422MsiInstallerApplicationnch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully.1170704036028797018963968421MsiInstallerApplicationnch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:11:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 1032.104004036028797018963968420MsiInstallerApplicationnch2-master-1S-1-5-21-1157701089-1554816228-210290965-10011/22/2022 8:11:36 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808419Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application48284964nch2-master-1S-1-5-181/22/2022 8:11:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0.103504036028797018963968418MsiInstallerApplicationnch2-master-1S-1-5-181/22/2022 8:11:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.409700400-9187343239835811840417Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13401684nch2-master-11/22/2022 8:10:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968416Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-01-23T20:07:52Z. Reason: TBL.1638401638440036028797018963968415Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent819704915240036028797018963968414Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/07/21:20:08:21;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968413Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent819704915240036028797018963968412Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259200 minutes.103703276840036028797018963968411Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968410Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968409Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
These policies are being excluded since they are only defined with override-only attribute. Policy Names=(Security-SPP-Reserved-EnableNotificationMode) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4103301638440036028797018963968408Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100103401638440036028797018963968407Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Validity period has been started. Validity minutes=259200 Grace type=9.103601638440036028797018963968406Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSA client has been successfully triggered to update the Device License1231101638440036028797018963968405Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f}1230401638440036028797018963968404Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f1230501638440036028797018963968403Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection ended. 2048904915240036028797018963968402Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968401Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check passed. 2048204915240036028797018963968400Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check initiated. 2048104915240036028797018963968399Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection started. 2048804915240036028797018963968398Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS. 106703276840036028797018963968397Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE} License Id=a82cd719-d024-4b13-91cf-ce8121e33822100401638440036028797018963968396Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC} License Id=5c2b9bff-ffef-4f07-9d1a-e574b74fee15100401638440036028797018963968395Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Acquisition of End User License was successful. Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4101301638400036028797018963968394Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.409700400-9187343239835811840393Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13401704nch2-master-11/22/2022 8:08:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/02/01:20:04:05;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968392Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:08:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1 420201638442036028797018963968391Microsoft-Windows-MSDTC 25d9e0020-3761-4f36-90c8-38ce6511bd12Application00nch2-master-11/22/2022 8:07:36 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationTMSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968390cloudbase-initApplicationnch2-master-11/22/2022 8:06:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968389Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:06:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied. . 15340300-9223372036854775808388Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5562940nch2-master-1S-1-5-21-1157701089-1554816228-210290965-10001/22/2022 8:06:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service failed to create default configuration for new user 'NCH2-MASTER-1\Admin' in response to user profile creation. Error code 0x80070005. Access is denied. .604915220036028797018963968387Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch2-master-11/22/2022 8:06:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968386cloudbase-initApplicationnch2-master-11/22/2022 8:05:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NCH2-MASTER-1\cloudbase-init' . 501638440036028797018963968385Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch2-master-11/22/2022 8:05:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.409700400-9187343239835811840384Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13401708nch2-master-11/22/2022 8:05:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808383Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication556496nch2-master-1S-1-5-181/22/2022 8:05:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968382Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:05:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968381Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:05:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Proof of Purchase installed successfully. ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845101601638440036028797018963968380Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch2-master-11/22/2022 8:05:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808379Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5561280nch2-master-1S-1-5-181/22/2022 8:05:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808378Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5561720nch2-master-1S-1-5-181/22/2022 8:05:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.462501638440036028797018963968377Microsoft-Windows-EventSystem899daace-4868-4295-afcd-9eb8fb497561Application00nch2-master-11/22/2022 8:05:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808376Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5281480WIN-5T344G8GM1HS-1-5-181/22/2022 8:04:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968375Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/22/2022 8:04:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager. 822504036028797018963968374VSSApplicationWIN-5T344G8GM1H1/22/2022 8:04:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?March ?16, ?2021 7:29:24 AM.411200400-9187343239835811840373Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication16961816WIN-5T344G8GM1H1/22/2022 8:03:26 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} Writer Name: Microsoft Hyper-V VSS Writer821204036028797018963968372VSSApplicationWIN-5T344G8GM1H1/22/2022 8:03:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808371Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5281880WIN-5T344G8GM1HS-1-5-181/22/2022 8:03:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808370Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5281552WIN-5T344G8GM1HS-1-5-181/22/2022 8:03:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808369Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5281480WIN-5T344G8GM1HS-1-5-181/22/2022 8:03:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer821204036028797018963968368VSSApplicationWIN-5T344G8GM1H1/22/2022 8:03:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4} Writer Name: ASR Writer821204036028797018963968367VSSApplicationWIN-5T344G8GM1H1/22/2022 8:03:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f} Writer Name: COM+ REGDB Writer821204036028797018963968366VSSApplicationWIN-5T344G8GM1H1/22/2022 8:03:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485} Writer Name: Registry Writer821204036028797018963968365VSSApplicationWIN-5T344G8GM1H1/22/2022 8:03:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808364Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application9761228WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:13 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required. DETAIL - 9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500: Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security 15300400-9223372036854775808363Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application9763432WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The winlogon notification subscriber <SessionEnv> failed a notification event.600103276830036028797018963968362Microsoft-Windows-Winlogondbe9b383-7cf3-4331-91cc-a3cb16a3b538Application00WIN-5T344G8GM1H1/19/2018 9:48:12 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent819704915240036028797018963968361Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448823001638440036028797018963968360Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 100301638440036028797018963968359Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining.1230601638440036028797018963968358Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968357Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968356Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Grace period has been started. Grace days=10 Grace type=6.102501638440036028797018963968355Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968354Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The hardware has changed.102403276840036028797018963968353Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hardware has changed from previous boot. AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4.104001638440036028797018963968352Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968351Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=Sysprep.exe90001638440036028797018963968350Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.411101638441036028797018963968349Microsoft-Windows-MSDTC719be4ed-e9bc-4dd8-a7cf-c85ce8e4975dApplication00WIN-5T344G8GM1H1/19/2018 9:47:34 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSVCSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]