Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
2022-09-17T22:05:19.033Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 709 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 10:05:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T22:05:19.033Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 708 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 10:05:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T22:05:19.033Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 707 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 10:05:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T22:05:19.033Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 706 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 10:05:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T22:05:19.033Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 705 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 10:05:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T22:05:19.033Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 704 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 10:05:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T22:03:43.504Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 22. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 703 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 10:03:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T22:03:43.410Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-7f79dedc-7a7c-44ae-8f34-f9ddfb2ddb43 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 702 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 10:03:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T22:03:43.410Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4176 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 701 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 10:03:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T22:03:43.056Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-7f79dedc-7a7c-44ae-8f34-f9ddfb2ddb43. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 700 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 10:03:43 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:49:00.454Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 699 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:49:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:49:00.454Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 698 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:49:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:49:00.454Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 697 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:49:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:49:00.454Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 696 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:49:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:49:00.454Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 695 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:49:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:49:00.454Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 694 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:49:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:47:46.056Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 21. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 693 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:47:45.999Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-20302c04-a690-4750-9ebe-75495dc664c0 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 692 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:47:45.999Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4888 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 691 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:47:45.595Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-20302c04-a690-4750-9ebe-75495dc664c0. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 690 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:45 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 689 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2022-09-18T21:46:22Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 688 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:47:07.207Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 687 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:47:07.207Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 686 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:47:07.207Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 685 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:47:07.207Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 684 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:47:07.207Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 683 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:47:07.207Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 682 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:47:07 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 681 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:46:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259101 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 680 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:46:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259101)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 679 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:46:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 678 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:46:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 677 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:46:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:45:48.182Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 676 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:45:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:43:26.982Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 20. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 675 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:43:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:43:26.932Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-f4da1dea-5959-4df8-a95c-887273815e5f | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 674 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:43:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:43:26.932Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3340 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 673 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:43:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:43:26.526Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-f4da1dea-5959-4df8-a95c-887273815e5f. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 672 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:43:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:41.281Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 671 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:41.281Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 670 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:41.272Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 669 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:41.272Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 668 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:41.272Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 667 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:41.272Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 666 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:41 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:37.415Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 19. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 665 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:37.357Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-1b39e8a5-9ba7-4ac0-bf9f-2a0c1bcbad0b | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 664 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:37.334Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4876 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 663 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:37 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:36.982Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-1b39e8a5-9ba7-4ac0-bf9f-2a0c1bcbad0b. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 662 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:22.466Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 661 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:22.466Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 660 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:22.451Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 659 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:22.451Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 658 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:22.451Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 657 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:22.451Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 656 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:06.636Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 18. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 655 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:06.570Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-1b39e8a5-9ba7-4ac0-bf9f-2a0c1bcbad0b | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 654 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:06.570Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5060 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 653 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:41:06.077Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-1b39e8a5-9ba7-4ac0-bf9f-2a0c1bcbad0b. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 652 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:41:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:33:04.226Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 651 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:33:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:33:04.226Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 650 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:33:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:33:04.219Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 649 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:33:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:33:04.219Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 648 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:33:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:33:04.219Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 647 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:33:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:33:04.219Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 646 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:33:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:33:00.594Coordinated Universal Time f -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 645 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:33:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:32:27.247Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 644 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:32:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:32:27.247Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 643 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:32:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:32:27.237Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 642 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:32:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:32:27.237Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 641 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:32:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:32:27.237Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 640 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:32:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:32:27.237Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 639 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:32:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:30:32.406Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 17. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 638 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:30:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:30:32.287Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-6a0cfe92-0d9c-46d1-91d9-ddfcb8b8ceac | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 637 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:30:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:30:32.287Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 2168 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 636 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:30:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:30:31.916Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-6a0cfe92-0d9c-46d1-91d9-ddfcb8b8ceac. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 635 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:30:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:28:35.844Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 16. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 634 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:28:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:28:35.761Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-43df5366-32dd-4c44-ad36-15410ac6ac72 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 633 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:28:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:28:35.746Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4284 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 632 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:28:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:28:35.386Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-43df5366-32dd-4c44-ad36-15410ac6ac72. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 631 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:28:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:28:27.762Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 630 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:28:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:28:27.762Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 629 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:28:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:28:27.762Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 628 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:28:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:28:27.762Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 627 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:28:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:28:27.762Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 626 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:28:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:28:27.762Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 625 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:28:27 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:26:11.971Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 15. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 624 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:26:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:26:11.872Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-43df5366-32dd-4c44-ad36-15410ac6ac72 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 623 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:26:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:26:11.872Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4724 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 622 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:26:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:26:11.487Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-43df5366-32dd-4c44-ad36-15410ac6ac72. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 621 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:26:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:25:53.067Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 620 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:25:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:25:53.067Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 619 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:25:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:25:53.067Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 618 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:25:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:25:53.067Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 617 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:25:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:25:53.067Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 616 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:25:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:25:53.067Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 615 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:25:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:25:50.394Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 614 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:25:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:46.832Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 14. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 613 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:46.731Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-181d1f0d-1ec7-49df-8b5b-e3c264fefd29 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 612 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:46.711Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 2776 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 611 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:46.349Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-181d1f0d-1ec7-49df-8b5b-e3c264fefd29. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 610 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:31.450Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 609 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:31.450Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 608 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:31.450Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 607 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:31.450Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 606 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:31.450Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 605 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:31.443Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 604 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:23.193Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 13. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 603 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:23.084Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-f631d440-70da-4e51-9e54-eba9b08d1bb7 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 602 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:23.084Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3780 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 601 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:24:22.725Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-f631d440-70da-4e51-9e54-eba9b08d1bb7. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 600 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:24:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:22:58.763Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 599 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:22:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:22:58.763Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 598 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:22:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:22:58.763Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 597 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:22:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:22:58.763Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 596 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:22:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:22:58.763Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 595 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:22:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:22:58.763Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 594 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:22:58 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:22:57.404Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 593 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:22:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:22:26.714Coordinated Universal Time f -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 592 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:22:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:21:56.208Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 591 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:21:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:21:20.606Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 12. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 590 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:21:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:21:20.543Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5b712483-f63f-4381-9968-4e3fa55f72b6 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 589 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:21:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:21:20.543Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4052 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 588 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:21:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:21:20.179Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5b712483-f63f-4381-9968-4e3fa55f72b6. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 587 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:21:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:20:53.356Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 586 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:20:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:20:53.356Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 585 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:20:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:20:53.356Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 584 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:20:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:20:53.356Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 583 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:20:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:20:53.356Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 582 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:20:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:20:53.356Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 581 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:20:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:20:51.794Coordinated Universal Time f -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 580 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:20:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:20:21.282Coordinated Universal Time f -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 579 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:20:21 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:19:49.295Coordinated Universal Time e -1 librbd::Operations: No such snapshot found. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 578 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:19:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:19:12.422Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 11. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 577 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:19:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:19:12.310Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-f21f3370-6eb4-457e-9061-0f3b2e826e13 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 576 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:19:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:19:12.310Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 2904 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 575 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:19:12 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:19:11.922Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-f21f3370-6eb4-457e-9061-0f3b2e826e13. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 574 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:19:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 573 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:17:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2022-09-18T21:16:22Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 572 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:17:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:17:19.582Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 571 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:17:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:17:19.582Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 570 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:17:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:17:19.582Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 569 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:17:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:17:19.582Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 568 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:17:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:17:19.582Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 567 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:17:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:17:19.582Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 566 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:17:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 565 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:16:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259131 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 564 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:16:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259131)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 563 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:16:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 562 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:16:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 561 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 9:16:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:16:36.766Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 10. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 560 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:16:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:16:36.649Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-b2bc9cfa-f40b-411e-8a44-20b3f6134615 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 559 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:16:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:16:36.649Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 932 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 558 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:16:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:16:36.280Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-b2bc9cfa-f40b-411e-8a44-20b3f6134615. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 557 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:16:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:11:32.854Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 556 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:11:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:11:32.854Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 555 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:11:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:11:32.842Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 554 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:11:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:11:32.842Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 553 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:11:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:11:32.842Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 552 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:11:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:11:32.842Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 551 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:11:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:11:29.549Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 9. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 550 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:11:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:11:29.417Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-06e1e35e-a1c2-4ffd-b75a-88d143d3a4e2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 549 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:11:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:11:29.417Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 832 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 548 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:11:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:11:28.984Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-06e1e35e-a1c2-4ffd-b75a-88d143d3a4e2. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 547 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:11:28 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:10:10.596Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 546 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:10:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:10:10.596Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 545 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:10:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:10:10.590Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 544 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:10:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:10:10.590Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 543 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:10:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:10:10.590Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 542 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:10:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:10:10.590Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 541 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:10:10 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:10:06.892Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 8. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 540 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:10:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:10:06.721Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-f04b4403-7625-47e5-a148-a05fd9ddc8e4 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 539 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:10:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:10:06.721Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3344 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 538 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:10:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:10:06.341Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-f04b4403-7625-47e5-a148-a05fd9ddc8e4. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 537 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:10:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:09:29.190Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 536 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:09:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:09:29.190Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 535 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:09:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:09:29.190Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 534 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:09:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:09:29.190Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 533 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:09:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:09:29.190Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 532 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:09:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:09:29.190Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 531 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:09:29 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:09:05.466Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 7. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 530 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:09:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:09:05.404Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-ab2daf87-1564-4764-b491-1e5192ed5de8 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 529 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:09:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:09:05.404Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5088 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 528 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:09:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:09:04.998Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-ab2daf87-1564-4764-b491-1e5192ed5de8. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 527 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:09:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:07:09.439Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 526 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:07:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:07:09.439Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 525 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:07:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:07:09.427Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 524 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:07:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:07:09.427Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 523 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:07:09 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:07:06.599Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 6. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 522 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:07:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:07:06.425Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-345bdac6-8146-4c95-b81c-59ac61c7b198 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 521 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:07:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:07:06.425Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4312 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 520 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:07:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T21:07:06.020Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-345bdac6-8146-4c95-b81c-59ac61c7b198. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 519 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 9:07:06 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:32.114Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 518 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:32.114Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 517 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:32.114Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 516 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:32.114Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 515 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:32.114Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 514 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:32.114Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 513 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:01.698Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 5. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 512 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:01.572Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-67568702-e073-4ebf-aeae-310160ebcb1e | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 511 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:01.572Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4572 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 510 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:01.168Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-67568702-e073-4ebf-aeae-310160ebcb1e. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 509 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:01 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:00.774Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 508 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:00.774Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 507 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:00.767Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 506 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:00.767Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 505 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:00.767Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 504 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:57:00.767Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 503 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:57:00 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:56:34.429Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 4. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 502 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:56:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:56:34.308Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-73bec761-6a0d-444f-9c7c-1504a4ca70c6 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 501 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:56:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:56:34.308Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 1032 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 500 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:56:34 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:56:33.927Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-73bec761-6a0d-444f-9c7c-1504a4ca70c6. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 499 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:56:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:56:33.823Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 498 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:56:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:56:05.148Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 3. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 497 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:56:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:56:05.061Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-39a2a629-4cdb-497c-8f9e-729c11354b4b | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 496 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:56:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:56:05.061Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4820 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 495 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:56:05 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:56:04.667Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-39a2a629-4cdb-497c-8f9e-729c11354b4b. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 494 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:56:04 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:55:49.228Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 493 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:55:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:55:49.228Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 492 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:55:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:55:49.228Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 491 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:55:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:55:49.228Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 490 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:55:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:55:49.228Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 489 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:55:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:55:49.228Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 488 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:55:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:55:19.933Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 2. | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 487 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:55:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:55:19.785Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d2a1c319-7ed9-4fb7-af62-52e9373195bf | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 486 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:55:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:55:19.785Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 2540 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 485 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:55:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
2022-09-17T20:55:19.264Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d2a1c319-7ed9-4fb7-af62-52e9373195bf. Error: -2 | 2 | | 16384 | 4 | 0 | | 36028797018963968 | 484 | rbd-wnbd | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:55:19 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 483 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 3180 | 3928 | nch1-master-1.nc-master-1.local | S-1-5-18 | 9/17/2022 8:54:35 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 482 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:49:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2022-09-18T20:48:23Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 481 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:49:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 480 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:48:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259159 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 479 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:48:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259159)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 478 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:48:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 477 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:48:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:<none> | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 476 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:48:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 475 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:48:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 474 | neutron-hyperv-agent | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:47:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 473 | nova-compute | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:47:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service has created default configuration for new user 'NC-MASTER-1\administrator' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 472 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:47:46 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 471 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:47:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2022-09-18T20:46:32Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 470 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:47:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 469 | cloudbase-init | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:47:11 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Security policy in the Group policy objects has been applied successfully. | 1704 | | 16384 | 4 | 0 | | 36028797018963968 | 468 | SceCli | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:46:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 467 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 1480 | 1856 | nch1-master-1.nc-master-1.local | S-1-5-18 | 9/17/2022 8:46:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 466 | cloudbase-init | | Application | | | nch1-master-1.nc-master-1.local | | 9/17/2022 8:46:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 465 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:46:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259161 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 464 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:46:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259161)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 463 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:46:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 462 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:46:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 461 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1.nc-master-1.local | | 9/17/2022 8:46:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 460 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 1480 | 1548 | nch1-master-1.nc-master-1.local | S-1-5-18 | 9/17/2022 8:46:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 459 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 1480 | 1508 | nch1-master-1.nc-master-1.local | S-1-5-18 | 9/17/2022 8:46:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 458 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 608 | 1612 | nch1-master-1 | S-1-5-18 | 9/17/2022 8:46:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The VSS service is shutting down due to shutdown event from the Service Control Manager. | 8225 | | 0 | 4 | 0 | | 36028797018963968 | 457 | VSS | | Application | | | nch1-master-1 | | 9/17/2022 8:46:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 456 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:46:30 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 455 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:34:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2022-09-18T20:33:22Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 454 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:34:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 453 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:33:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259174 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 452 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:33:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 451 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:33:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 450 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:33:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=wlms.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 449 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:33:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 448 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 1112 | 1128 | nch1-master-1 | S-1-5-18 | 9/17/2022 8:25:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2022?-?09?-?17T20:17:55.475600300Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 447 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 2772 | 1988 | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:17:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 5016. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 446 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 9/17/2022 8:17:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 445 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:17:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Ceph for Windows -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 444 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:17:59 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2022?-?09?-?17T20:17:55.475600300Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 443 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 2772 | 1056 | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:17:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 5016. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 442 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:17:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root list with effective date: ?Tuesday, ?July ?19, ?2022 4:36:22 PM. | 4111 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 441 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1908 | nch1-master-1 | | 9/17/2022 8:17:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 440 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1908 | nch1-master-1 | | 9/17/2022 8:17:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 439 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1908 | nch1-master-1 | | 9/17/2022 8:17:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 438 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1908 | nch1-master-1 | | 9/17/2022 8:17:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 437 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1908 | nch1-master-1 | | 9/17/2022 8:17:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 436 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1908 | nch1-master-1 | | 9/17/2022 8:17:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 435 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1908 | nch1-master-1 | | 9/17/2022 8:17:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4109 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 434 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1908 | nch1-master-1 | | 9/17/2022 8:17:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 433 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:17:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2022?-?09?-?17T20:10:49.613238000Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 432 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4936 | 376 | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:10:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4336. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 431 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 9/17/2022 8:10:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 430 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:10:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 429 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:10:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2022?-?09?-?17T20:10:49.613238000Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 428 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4936 | 2004 | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending session 0 started ?2022?-?09?-?17T20:10:49.083679500Z. | 10001 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 427 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4936 | 376 | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Starting session 0 - ?2022?-?09?-?17T20:10:49.083679500Z. | 10000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 426 | Microsoft-Windows-RestartManager | 0888e5ef-9b98-4695-979d-e92ce4247224 | Application | 4936 | 4952 | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4336. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 425 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4336. | 1042 | | 0 | 4 | 0 | | 36028797018963968 | 424 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 9/17/2022 8:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. | 1033 | | 0 | 4 | 0 | | 36028797018963968 | 423 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully. | 11707 | | 0 | 4 | 0 | | 36028797018963968 | 422 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:10:49 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4336. | 1040 | | 0 | 4 | 0 | | 36028797018963968 | 421 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1001 | 9/17/2022 8:10:48 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0. | 1035 | | 0 | 4 | 0 | | 36028797018963968 | 420 | MsiInstaller | | Application | | | nch1-master-1 | S-1-5-18 | 9/17/2022 8:10:40 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. | 1000 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 419 | Microsoft-Windows-LoadPerf | 122ee297-bb47-41ae-b265-1ca8d1886d40 | Application | 3900 | 3872 | nch1-master-1 | S-1-5-18 | 9/17/2022 8:09:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 418 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1908 | nch1-master-1 | | 9/17/2022 8:09:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 417 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully scheduled Software Protection service for re-start at 2022-09-18T20:06:56Z. Reason: TBL. | 16384 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 416 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:56 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 415 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/03/16:20:07:26;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 414 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 413 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Time-based license remaining validity time 259200 minutes. | 1037 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 412 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 411 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 410 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
These policies are being excluded since they are only defined with override-only attribute.
Policy Names=(Security-SPP-Reserved-EnableNotificationMode)
App Id=55c92734-d682-4d71-983e-d6ec3f16059f
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1033 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 409 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 408 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Validity period has been started. Validity minutes=259200 Grace type=9. | 1036 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 407 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MSA client has been successfully triggered to update the Device License | 12311 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 406 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:25 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f} | 12304 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 405 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f | 12305 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 404 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection ended.
| 20489 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 403 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 402 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check passed.
| 20482 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 401 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:23 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Health check initiated.
| 20481 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 400 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine validation data collection started.
| 20488 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 399 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS.
| 1067 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 398 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE}
License Id=ead2fa57-a178-478f-928c-6c62143622c7 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 397 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has successfully installed the license.
License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC}
License Id=3f985e72-747a-442b-84e7-664fad35c541 | 1004 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 396 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquisition of End User License was successful.
Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 | 1013 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 395 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:20 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/27:20:03:15;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 394 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:07:16 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
MSDTC started with the following settings:
Security Configuration (OFF = 0 and ON = 1):
Allow Remote Administrator = 0,
Network Clients = 0,
Transaction Manager Communication:
Allow Inbound Transactions = 0,
Allow Outbound Transactions = 0,
Transaction Internet Protocol (TIP) = 0,
Enable XA Transactions = 0,
Enable SNA LU 6.2 Transactions = 1,
MSDTC Communications Security = Mutual Authentication Required,
Account = NT AUTHORITY\NetworkService,
Firewall Exclusion Detected = 0
Transaction Bridge Installed = 0
Filtering Duplicate Events = 1
| 4202 | 0 | 16384 | 4 | 2 | 0 | 36028797018963968 | 393 | Microsoft-Windows-MSDTC 2 | 5d9e0020-3761-4f36-90c8-38ce6511bd12 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:05:53 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | TM | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 392 | cloudbase-init | | Application | | | nch1-master-1 | | 9/17/2022 8:04:44 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 391 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:04:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied.
.
| 1534 | 0 | | 3 | 0 | 0 | -9223372036854775808 | 390 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 608 | 2808 | nch1-master-1 | S-1-5-21-777017095-1571429054-3076480372-1000 | 9/17/2022 8:04:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service failed to create default configuration for new user 'NCH1-MASTER-1\Admin' in response to user profile creation. Error code 0x80070005.
Access is denied.
. | 6 | 0 | 49152 | 2 | 0 | 0 | 36028797018963968 | 389 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:04:32 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
| 0 | | 0 | 4 | 0 | | 36028797018963968 | 388 | cloudbase-init | | Application | | | nch1-master-1 | | 9/17/2022 8:03:57 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | | | | | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Search Service has created default configuration for new user 'NCH1-MASTER-1\cloudbase-init' .
| 5 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 387 | Microsoft-Windows-Search-ProfileNotify | fc6f77dd-769a-470e-bcf9-1b6555a118be | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:03:55 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 386 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1336 | 1884 | nch1-master-1 | | 9/17/2022 8:03:54 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 385 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 608 | 2072 | nch1-master-1 | S-1-5-18 | 9/17/2022 8:03:52 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 384 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 608 | 1248 | nch1-master-1 | S-1-5-18 | 9/17/2022 8:03:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14399)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 383 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:03:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 382 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:03:51 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Proof of Purchase installed successfully.
ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4
PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845 | 1016 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 381 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:03:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 380 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | nch1-master-1 | | 9/17/2022 8:03:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 379 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 608 | 1612 | nch1-master-1 | S-1-5-18 | 9/17/2022 8:03:50 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 378 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 520 | 1480 | WIN-5T344G8GM1H | S-1-5-18 | 9/17/2022 8:03:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The VSS service is shutting down due to shutdown event from the Service Control Manager. | 8225 | | 0 | 4 | 0 | | 36028797018963968 | 377 | VSS | | Application | | | WIN-5T344G8GM1H | | 9/17/2022 8:03:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has stopped.
| 903 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 376 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 9/17/2022 8:03:22 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>. | 4097 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 375 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1636 | 1808 | WIN-5T344G8GM1H | | 9/17/2022 8:02:36 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?March ?16, ?2021 7:29:24 AM. | 4112 | 0 | 0 | 4 | 0 | 0 | -9187343239835811840 | 374 | Microsoft-Windows-CAPI2 | 5bbca4a8-b209-48dc-a8c7-b23d3e5216fb | Application | 1636 | 1808 | WIN-5T344G8GM1H | | 9/17/2022 8:02:31 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de}
Writer Name: Microsoft Hyper-V VSS Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 373 | VSS | | Application | | | WIN-5T344G8GM1H | | 9/17/2022 8:02:33 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service subsystems initialized successfully | 5617 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 372 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 520 | 872 | WIN-5T344G8GM1H | S-1-5-18 | 9/17/2022 8:02:26 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows Management Instrumentation Service started sucessfully | 5615 | 2 | | 4 | 0 | 0 | -9223372036854775808 | 371 | Microsoft-Windows-WMI | 1edeee53-0afe-4609-b846-d8c0b2075b1f | Application | 520 | 1576 | WIN-5T344G8GM1H | S-1-5-18 | 9/17/2022 8:02:25 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has started successfully.
| 1531 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 370 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 520 | 1480 | WIN-5T344G8GM1H | S-1-5-18 | 9/17/2022 8:02:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Name: Shadow Copy Optimization Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 369 | VSS | | Application | | | WIN-5T344G8GM1H | | 9/17/2022 8:02:25 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Writer Name: ASR Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 368 | VSS | | Application | | | WIN-5T344G8GM1H | | 9/17/2022 8:02:25 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Writer Name: COM+ REGDB Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 367 | VSS | | Application | | | WIN-5T344G8GM1H | | 9/17/2022 8:02:25 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup.
Operation:
Initializing Writer
Context:
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer | 8212 | | 0 | 4 | 0 | | 36028797018963968 | 366 | VSS | | Application | | | WIN-5T344G8GM1H | | 9/17/2022 8:02:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. | 4625 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 365 | Microsoft-Windows-EventSystem | 899daace-4868-4295-afcd-9eb8fb497561 | Application | 0 | 0 | WIN-V5F5V6CM08A | | 9/17/2022 8:02:24 PM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The User Profile Service has stopped.
| 1532 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 364 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 1228 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:13 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.
DETAIL -
9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500:
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore
Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main
Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners
Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children
Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security
| 1530 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 363 | Microsoft-Windows-User Profiles Service | 89b1e9f0-5aff-44a6-9b44-0a07a7ce5845 | Application | 976 | 3432 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The winlogon notification subscriber <SessionEnv> failed a notification event. | 6001 | 0 | 32768 | 3 | 0 | 0 | 36028797018963968 | 362 | Microsoft-Windows-Winlogon | dbe9b383-7cf3-4331-91cc-a3cb16a3b538 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:12 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Warning | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SLUI.exe was launched with the following command-line parameters:
RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent | 8197 | 0 | 49152 | 4 | 0 | 0 | 36028797018963968 | 361 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The rules engine successfully re-evaluated the schedule.
Kernel policies:
Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448 | 8230 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 360 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 359 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining. | 12306 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 358 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has started.
10.0.14393.351 | 902 | 0 | 16384 | 0 | 0 | 0 | 36028797018963968 | 357 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]
| 1003 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 356 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Grace period has been started. Grace days=10 Grace type=6. | 1025 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 355 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500 | 1034 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 354 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The hardware has changed. | 1024 | 0 | 32768 | 4 | 0 | 0 | 36028797018963968 | 353 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:10 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Hardware has changed from previous boot.
AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4. | 1040 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 352 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Initialization status for service objects.
C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000
| 1066 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 351 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The Software Protection service is starting.
Parameters:caller=Sysprep.exe | 900 | 0 | 16384 | 4 | 0 | 0 | 36028797018963968 | 350 | Microsoft-Windows-Security-SPP | e23b33b0-c8c9-472c-a5f9-f2bdfea0f156 | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:48:09 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
The MS DTC service is stopping. | 4111 | 0 | 16384 | 4 | 1 | 0 | 36028797018963968 | 349 | Microsoft-Windows-MSDTC | 719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d | Application | 0 | 0 | WIN-5T344G8GM1H | | 1/19/2018 9:47:34 AM | | | application | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | | SVC | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |