| Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
| 2022-02-12T22:08:33.612Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 758 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 10:08:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T22:08:33.612Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 757 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 10:08:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T22:08:33.601Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 756 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 10:08:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T22:08:33.601Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 755 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 10:08:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T22:08:33.601Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 754 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 10:08:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T22:08:33.601Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 753 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 10:08:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T22:05:01.487Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 27. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 752 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 10:05:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T22:05:01.071Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-0e5e96c8-86e8-46c4-8182-fceff0f56d54 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 751 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 10:05:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T22:05:01.071Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5404 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 750 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 10:05:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T22:05:00.596Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-0e5e96c8-86e8-46c4-8182-fceff0f56d54. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 749 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 10:05:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 748 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:58:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successfully scheduled Software Protection service for re-start at 2022-02-13T21:57:42Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 747 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:58:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 746 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:58:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Time-based license remaining validity time 259090 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 745 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:58:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259090)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 744 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:58:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 743 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:58:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 742 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:58:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:51:42.510Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 741 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:51:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:51:42.510Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 740 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:51:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:51:42.510Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 739 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:51:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:51:42.510Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 738 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:51:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:51:42.510Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 737 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:51:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:51:42.510Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 736 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:51:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:50:23.652Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 26. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 735 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:50:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:50:23.488Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-faa73997-a56d-47de-8320-764458199373 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 734 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:50:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:50:23.488Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5032 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 733 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:50:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:50:23.108Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-faa73997-a56d-47de-8320-764458199373. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 732 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:50:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:22.852Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 731 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:22.852Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 730 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:22.842Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 729 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:22.842Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 728 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:22.842Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 727 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:22.842Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 726 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:17.311Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 25. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 725 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:17 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:17.171Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d8b711c5-5e7d-49f4-852c-25b581c931a5 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 724 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:17 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:17.171Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4172 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 723 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:17 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:16.766Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d8b711c5-5e7d-49f4-852c-25b581c931a5. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 722 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:16 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:00.713Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 721 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:00.713Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 720 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:00.713Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 719 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:00.713Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 718 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:00.713Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 717 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:48:00.713Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 716 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:48:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:47:37.670Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 24. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 715 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:47:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:47:37.441Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d8b711c5-5e7d-49f4-852c-25b581c931a5 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 714 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:47:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:47:37.441Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3304 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 713 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:47:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:47:37.034Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d8b711c5-5e7d-49f4-852c-25b581c931a5. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 712 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:47:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:33:52.348Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 711 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:33:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:33:52.348Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 710 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:33:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:33:52.333Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 709 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:33:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:33:52.333Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 708 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:33:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:33:52.333Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 707 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:33:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:33:52.333Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 706 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:33:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:31:24.355Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 705 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:31:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:31:24.355Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 704 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:31:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:31:24.355Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 703 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:31:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:31:24.355Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 702 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:31:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:31:24.355Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 701 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:31:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:31:24.355Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 700 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:31:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:30:55.949Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 23. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 699 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:30:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:30:55.462Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-3d099d6f-2ad2-42c9-afe0-4edb1118f461 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 698 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:30:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:30:55.462Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 1060 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 697 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:30:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:30:55.013Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-3d099d6f-2ad2-42c9-afe0-4edb1118f461. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 696 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:30:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:59.998Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 22. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 695 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:59.574Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-246c1cd8-ec05-45ad-9455-c09c770c0c58 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 694 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:59.574Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5856 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 693 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:59.075Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-246c1cd8-ec05-45ad-9455-c09c770c0c58. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 692 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:07.500Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 691 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:07.500Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 690 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:07.500Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 689 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:07.500Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 688 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:07.500Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 687 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:07.500Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 686 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:29:00.372Coordinated Universal Time f -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 685 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:29:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 684 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successfully scheduled Software Protection service for re-start at 2022-02-13T21:27:42Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 683 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:28:14.623Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 682 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:14 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:28:14.623Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 681 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:14 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:28:14.623Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 680 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:14 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:28:14.623Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 679 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:14 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:28:14.623Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 678 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:14 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:28:14.623Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 677 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:14 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 676 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Time-based license remaining validity time 259120 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 675 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259120)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 674 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 673 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 672 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:28:02.576Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 21. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 671 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:28:01.904Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-b0096ad5-c3df-491f-84d1-2e1e432e14c6 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 670 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:28:01.904Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4856 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 669 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:28:01.484Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-b0096ad5-c3df-491f-84d1-2e1e432e14c6. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 668 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:28:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:29.373Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 20. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 667 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:28.999Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-ec995a3e-38b5-4860-a73f-89108774c4bf | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 666 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:28.999Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5780 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 665 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:28.619Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-ec995a3e-38b5-4860-a73f-89108774c4bf. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 664 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:05.205Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 663 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:02.368Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 662 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:02.368Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 661 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:02.356Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 660 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:02.356Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 659 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:02.356Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 658 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:27:02.356Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 657 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:27:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:26:58.516Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 656 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:26:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:26:25.788Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 655 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:26:25 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:25:53.954Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 654 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:25:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:25:07.471Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 19. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 653 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:25:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:25:07.252Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-aacc142f-bac9-4d58-9705-49f2b86e3a0a | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 652 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:25:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:25:07.252Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4332 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 651 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:25:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:25:06.849Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-aacc142f-bac9-4d58-9705-49f2b86e3a0a. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 650 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:25:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:59.084Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 649 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:59.084Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 648 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:59.084Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 647 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:59.084Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 646 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:59.084Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 645 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:59.084Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 644 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:57.520Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 643 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:57.520Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 642 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:57.520Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 641 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:57.520Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 640 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:57.520Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 639 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:57.520Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 638 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:47.379Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 18. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 637 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:46.629Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-dbcb87d0-7039-4000-860e-900ca1b07f9d | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 636 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:46.629Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4624 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 635 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:46.241Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-dbcb87d0-7039-4000-860e-900ca1b07f9d. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 634 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:31.723Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 17. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 633 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:31.055Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5fd3ab2d-19da-4502-a2c8-54bdbfdda994 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 632 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:31.055Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5132 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 631 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:23:30.602Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5fd3ab2d-19da-4502-a2c8-54bdbfdda994. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 630 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:23:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:22:00.559Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 629 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:22:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:22:00.559Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 628 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:22:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:22:00.559Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 627 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:22:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:22:00.559Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 626 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:22:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:22:00.559Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 625 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:22:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:22:00.559Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 624 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:22:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:20:59.961Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 16. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 623 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:20:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:20:59.664Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-e4776652-3b7a-4b3e-8749-56e170786d32 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 622 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:20:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:20:59.648Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3372 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 621 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:20:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:20:59.252Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-e4776652-3b7a-4b3e-8749-56e170786d32. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 620 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:20:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:16:05.256Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 619 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:16:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:16:05.256Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 618 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:16:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:16:05.256Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 617 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:16:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:16:05.256Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 616 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:16:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:16:05.256Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 615 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:16:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:16:05.256Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 614 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:16:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:16:01.241Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 15. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 613 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:16:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:16:00.958Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-529282b2-ffa4-43d7-8822-61c791cd9d78 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 612 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:16:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:16:00.958Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4224 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 611 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:16:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:16:00.565Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-529282b2-ffa4-43d7-8822-61c791cd9d78. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 610 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:16:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:43.022Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 609 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:43.022Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 608 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:43.022Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 607 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:43.022Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 606 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:43.022Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 605 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:43.022Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 604 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.784Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 603 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.784Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 602 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.784Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 601 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.784Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 600 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.784Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 599 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.784Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 598 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.547Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 597 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.547Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 596 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.547Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 595 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.547Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 594 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.547Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 593 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:15:42.547Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 592 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:15:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:45.238Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 591 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:45.238Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 590 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:45.238Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 589 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:45.238Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 588 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:45.238Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 587 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:45.238Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 586 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:41.643Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 585 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:41.643Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 584 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:41.643Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 583 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:41.643Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 582 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:41.643Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 581 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:41.643Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 580 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.896Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 579 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.896Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 578 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.896Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 577 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.896Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 576 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.896Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 575 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.896Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 574 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.659Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 573 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.659Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 572 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.659Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 571 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.659Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 570 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.659Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 569 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.659Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 568 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.409Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 567 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.409Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 566 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.409Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 565 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.409Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 564 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.409Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 563 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:38.409Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 562 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:24.615Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 561 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:24.615Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 560 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:24.610Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 559 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:24.610Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 558 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:24.610Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 557 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:24.610Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 556 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:19.503Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 14. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 555 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:19.232Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-e8cb03f3-163b-4e9d-bbc6-451e75bc5c82 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 554 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:19.211Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4676 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 553 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:14:18.753Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-e8cb03f3-163b-4e9d-bbc6-451e75bc5c82. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 552 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:14:18 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:13:47.663Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 13. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 551 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:13:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:13:47.351Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-f467ea62-0ab8-4471-b457-237b5ad7e6a5 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 550 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:13:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:13:47.351Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3460 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 549 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:13:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:13:46.865Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-f467ea62-0ab8-4471-b457-237b5ad7e6a5. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 548 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:13:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:42.866Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 12. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 547 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:42.503Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-2abea7c0-bbed-4f39-8231-884740b5d70b | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 546 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:42.490Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5092 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 545 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:42.106Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-2abea7c0-bbed-4f39-8231-884740b5d70b. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 544 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:41.490Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 11. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 543 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:41.227Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d4a0966d-0bbc-4ea1-8a6b-3fd2b922a34a | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 542 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:41.227Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4000 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 541 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:40.764Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d4a0966d-0bbc-4ea1-8a6b-3fd2b922a34a. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 540 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:40.023Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 10. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 539 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:39.605Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-6eaf870e-5f05-4b08-bd12-c6b8d5f1e1d2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 538 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:39 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:39.605Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3384 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 537 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:39 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:11:38.290Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-6eaf870e-5f05-4b08-bd12-c6b8d5f1e1d2. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 536 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:11:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:37.247Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 9. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 535 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:36.935Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-6fe52308-5497-4bfa-92db-ef7959731976 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 534 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:36.935Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3880 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 533 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:36.535Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-6fe52308-5497-4bfa-92db-ef7959731976. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 532 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:35.901Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 8. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 531 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:35.570Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-e81831ca-45fb-4913-9901-1313416408ea | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 530 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:35.570Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5820 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 529 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:35.122Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-e81831ca-45fb-4913-9901-1313416408ea. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 528 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:34.467Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 7. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 527 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:34.079Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-7c79dff3-d53d-4ae9-a438-23dc0e39df0e | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 526 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:34.079Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 6004 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 525 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:10:33.701Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-7c79dff3-d53d-4ae9-a438-23dc0e39df0e. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 524 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:10:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:08:01.919Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 523 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:08:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:54.684Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 522 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:51.889Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 521 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:51.889Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 520 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:51.889Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 519 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:51.889Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 518 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:51.889Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 517 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:51.889Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 516 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:49.107Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 6. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 515 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:48.887Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-e5b5c656-a8a4-478a-aad0-b56ab96de415 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 514 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:48.887Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5816 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 513 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:48.437Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-e5b5c656-a8a4-478a-aad0-b56ab96de415. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 512 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:31.996Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 5. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 511 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:31.737Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d3c7c811-d95c-47ea-9db2-985a51feb590 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 510 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:31.737Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5296 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 509 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:31.358Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d3c7c811-d95c-47ea-9db2-985a51feb590. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 508 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:29.578Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 4. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 507 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:29.248Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-8ee266c6-2e2c-478a-8cea-d6b05f4f3dc5 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 506 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:29.248Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5092 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 505 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:07:28.859Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-8ee266c6-2e2c-478a-8cea-d6b05f4f3dc5. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 504 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:07:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:06:35.281Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 503 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:06:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:06:35.281Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 502 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:06:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:06:35.265Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 501 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:06:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:06:35.265Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 500 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:06:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:06:35.265Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 499 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:06:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:06:35.265Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 498 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:06:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:06:09.380Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 3. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 497 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:06:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:06:08.859Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-7de8dc2a-bf78-418c-82bc-d35320770acc | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 496 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:06:08 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:06:08.859Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 6112 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 495 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:06:08 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:06:08.470Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-7de8dc2a-bf78-418c-82bc-d35320770acc. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 494 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:06:08 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 493 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 1468 | 1460 | nch1-master-1.nc-master-1.local | S-1-5-18 | 2/12/2022 9:05:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:05:09.149Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 492 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:05:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:05:09.149Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 491 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:05:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:05:09.149Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 490 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:05:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:05:09.149Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 489 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:05:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:05:09.149Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 488 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:05:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:05:09.149Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 487 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:05:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:04:43.892Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 2. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 486 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:04:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:04:43.442Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-3ffffeab-c309-41f1-ac60-d0dc8f4b322e | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 485 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:04:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:04:43.442Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4968 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 484 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:04:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 2022-02-12T21:04:42.895Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-3ffffeab-c309-41f1-ac60-d0dc8f4b322e. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 483 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 9:04:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 482 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:00:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successfully scheduled Software Protection service for re-start at 2022-02-13T20:59:43Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 481 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:00:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 480 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:00:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Time-based license remaining validity time 259148 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 479 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:00:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259148)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 478 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:00:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 477 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:00:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service is starting.
Parameters:<none> | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 476 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:00:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 475 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 9:00:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 474 | neutron-hyperv-agent | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 8:59:14 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 473 | nova-compute | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 8:59:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Search Service has created default configuration for new user 'NC-MASTER-1\administrator' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 472 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 8:59:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 471 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 8:58:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successfully scheduled Software Protection service for re-start at 2022-02-13T20:57:52Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 470 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 8:58:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 469 | cloudbase-init | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 8:58:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Security policy in the Group policy objects has been applied successfully. | 1704 | | 16384 | 4 | 0 | | 36028797018963968 | 468 | SceCli | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 8:58:14 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 467 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 1452 | 2112 | nch1-master-1.nc-master-1.local | S-1-5-18 | 2/12/2022 8:58:13 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 466 | cloudbase-init | | Application | | | nch1-master-1.nc-master-1.local | | 2/12/2022 8:58:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 465 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 8:58:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Time-based license remaining validity time 259150 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 464 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 8:58:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259150)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 463 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 8:58:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 462 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 8:58:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 461 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 2/12/2022 8:58:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 460 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 1452 | 1568 | nch1-master-1.nc-master-1.local | S-1-5-18 | 2/12/2022 8:58:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 459 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 1452 | 1476 | nch1-master-1.nc-master-1.local | S-1-5-18 | 2/12/2022 8:58:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 458 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | NCH1-MASTER-1 | | 2/12/2022 8:58:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 457 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 612 | 1660 | nch1-master-1 | S-1-5-18 | 2/12/2022 8:57:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 456 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:57:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 455 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:34:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successfully scheduled Software Protection service for re-start at 2022-02-13T20:33:31Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 454 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:34:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 453 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:34:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Time-based license remaining validity time 259174 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 452 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:34:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 451 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:34:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 450 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:34:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 449 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:34:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 448 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 4872 | 4900 | nch1-master-1 | S-1-5-18 | 2/12/2022 8:26:47 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Ending session 0 started ?2022?-?02?-?12T20:18:31.880665500Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 447 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4076 | 1388 | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:18:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Ending a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 4672. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 446 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 2/12/2022 8:18:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 445 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:18:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Product: Ceph for Windows -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 444 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:18:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Starting session 0 - ?2022?-?02?-?12T20:18:31.880665500Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 443 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4076 | 2180 | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:18:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Beginning a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 4672. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 442 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:18:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 441 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:18:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto update of third-party root list with effective date: ?Monday, ?October ?18, ?2021 8:14:37 PM. | 4111 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 440 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 1780 | nch1-master-1 | | 2/12/2022 8:18:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 439 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 1780 | nch1-master-1 | | 2/12/2022 8:18:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 438 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 1780 | nch1-master-1 | | 2/12/2022 8:18:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 437 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 1780 | nch1-master-1 | | 2/12/2022 8:18:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 436 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 1780 | nch1-master-1 | | 2/12/2022 8:18:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 435 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 1780 | nch1-master-1 | | 2/12/2022 8:18:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 434 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 1780 | nch1-master-1 | | 2/12/2022 8:18:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 433 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 1780 | nch1-master-1 | | 2/12/2022 8:18:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Ending session 0 started ?2022?-?02?-?12T20:11:20.256818200Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 432 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4024 | 3208 | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:11:21 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 3076. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 431 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 2/12/2022 8:11:21 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 430 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:11:21 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 429 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:11:21 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Starting session 0 - ?2022?-?02?-?12T20:11:20.256818200Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 428 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4024 | 3288 | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:11:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Ending session 0 started ?2022?-?02?-?12T20:11:19.684233600Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 427 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4024 | 3208 | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:11:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Starting session 0 - ?2022?-?02?-?12T20:11:19.684233600Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 426 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4024 | 3176 | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:11:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 3076. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 425 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:11:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 3076. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 424 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 2/12/2022 8:11:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 423 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:11:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 422 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:11:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 3076. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 421 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1001 | 2/12/2022 8:11:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 420 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 2/12/2022 8:11:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 419 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 2328 | 664 | nch1-master-1 | S-1-5-18 | 2/12/2022 8:09:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 418 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 3296 | nch1-master-1 | | 2/12/2022 8:09:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 417 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:08:08 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successfully scheduled Software Protection service for re-start at 2022-02-13T20:07:08Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 416 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:08:08 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| SLUI.exe was launched with the following command-line parameters:
RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 415 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/08/11:20:07:38;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 414 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| SLUI.exe was launched with the following command-line parameters:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 413 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Time-based license remaining validity time 259200 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 412 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 411 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 410 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:38 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| These policies are being excluded since they are only defined with override-only attribute.
Policy Names=(Security-SPP-Reserved-EnableNotificationMode)
App Id=55c92734-d682-4d71-983e-d6ec3f16059f
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1033 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 409 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 408 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Validity period has been started. Validity minutes=259200 Grace type=9. | 1036 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 407 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The MSA client has been successfully triggered to update the Device License | 12311 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 406 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f} | 12304 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 405 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f | 12305 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 404 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Genuine validation data collection ended.
| 20489 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 403 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 402 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Health check passed.
| 20482 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 401 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Health check initiated.
| 20481 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 400 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Genuine validation data collection started.
| 20488 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 399 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS.
| 1067 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 398 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE}
License Id=feb326f4-1b02-4872-94b2-81099dd9dae4 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 397 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC}
License Id=6368a332-34f2-4b02-8c7e-e0e9f9159d57 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 396 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Acquisition of End User License was successful.
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1013 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 395 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 394 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 1780 | nch1-master-1 | | 2/12/2022 8:07:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/02/22:20:03:22;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 393 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:07:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 392 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:06:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 391 | cloudbase-init | | Application | | | nch1-master-1 | | 2/12/2022 8:04:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 390 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:04:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied.
.
| 1534 | 0 | | 3 | 0 | 0 | -9223372036854775808 | 389 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 612 | 2808 | nch1-master-1 | S-1-5-21-1282649868-286110692-2890756182-1000 | 2/12/2022 8:04:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Search Service failed to create default configuration for new user 'NCH1-MASTER-1\Admin' in response to user profile creation. Error code 0x80070005.
Access is denied.
. | 6 | 0 | 49152 | 2 | 0 | 0 | 36028797018963968 | 388 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:04:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 387 | cloudbase-init | | Application | | | nch1-master-1 | | 2/12/2022 8:04:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Search Service has created default configuration for new user 'NCH1-MASTER-1\cloudbase-init' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 386 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:04:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 385 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1324 | 1784 | nch1-master-1 | | 2/12/2022 8:04:02 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 384 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 612 | 500 | nch1-master-1 | S-1-5-18 | 2/12/2022 8:04:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 383 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 612 | 2044 | nch1-master-1 | S-1-5-18 | 2/12/2022 8:03:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 382 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 612 | 1660 | nch1-master-1 | S-1-5-18 | 2/12/2022 8:03:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14399)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 381 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:03:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 380 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:03:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Proof of Purchase installed successfully.
ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4
PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845 | 1016 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 379 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:03:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 378 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | nch1-master-1 | | 2/12/2022 8:03:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 377 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 536 | 1524 | WIN-5T344G8GM1H | S-1-5-18 | 2/12/2022 8:03:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 376 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 2/12/2022 8:03:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The VSS service is shutting down due to shutdown event from the Service Control Manager. | 8225 | | 0 | 4 | 0 | | 36028797018963968 | 375 | VSS | | Application | | | WIN-5T344G8GM1H | | 2/12/2022 8:03:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de}
Writer Name: Microsoft Hyper-V VSS Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 374 | VSS | | Application | | | WIN-5T344G8GM1H | | 2/12/2022 8:02:42 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?March ?16, ?2021 7:29:24 AM. | 4112 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 373 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1688 | 1804 | WIN-5T344G8GM1H | | 2/12/2022 8:02:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 372 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 536 | 584 | WIN-5T344G8GM1H | S-1-5-18 | 2/12/2022 8:02:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 371 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 536 | 1604 | WIN-5T344G8GM1H | S-1-5-18 | 2/12/2022 8:02:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 370 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 536 | 1524 | WIN-5T344G8GM1H | S-1-5-18 | 2/12/2022 8:02:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Name: Shadow Copy Optimization Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 369 | VSS | | Application | | | WIN-5T344G8GM1H | | 2/12/2022 8:02:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 368 | VSS | | Application | | | WIN-5T344G8GM1H | | 2/12/2022 8:02:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Writer Name: COM+ REGDB Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 367 | VSS | | Application | | | WIN-5T344G8GM1H | | 2/12/2022 8:02:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 366 | VSS | | Application | | | WIN-5T344G8GM1H | | 2/12/2022 8:02:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 365 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | WIN-92E1NFMDS11 | | 2/12/2022 8:02:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 364 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 1228 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.
DETAIL -
9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500:
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore
Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main
Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security
| 1530 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 363 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 3432 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The winlogon notification subscriber <SessionEnv> failed a notification event. | 6001 | 0 | 32768 | 3 | 0 | 0 | 36028797018963968 | 362 | Microsoft-Windows-Winlogon | dbe9b383-7cf3-4331-91cc-a3cb16a3b538 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| SLUI.exe was launched with the following command-line parameters:
RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 361 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448 | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 360 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 359 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining. | 12306 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 358 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 357 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 356 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Grace period has been started. Grace days=10 Grace type=6. | 1025 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 355 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 354 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The hardware has changed. | 1024 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 353 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Hardware has changed from previous boot.
AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4. | 1040 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 352 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 351 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The Software Protection service is starting.
Parameters:caller=Sysprep.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 350 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 349 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:47:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |