Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
2022-09-17T22:03:37.446Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	715	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 10:03:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T22:03:37.446Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	714	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 10:03:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T22:03:37.431Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	713	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 10:03:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T22:03:37.431Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	712	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 10:03:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T22:03:37.431Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	711	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 10:03:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T22:03:37.431Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	710	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 10:03:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T22:01:10.263Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 23.	2		16384	4	0		36028797018963968	709	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 10:01:10 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T22:01:10.170Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-7f79dedc-7a7c-44ae-8f34-f9ddfb2ddb43	2		16384	4	0		36028797018963968	708	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 10:01:10 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T22:01:10.170Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5876	2		16384	4	0		36028797018963968	707	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 10:01:10 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T22:01:09.778Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-7f79dedc-7a7c-44ae-8f34-f9ddfb2ddb43. Error: -2	2		16384	4	0		36028797018963968	706	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 10:01:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	705	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:47:22 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-09-18T21:46:22Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	704	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:47:22 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	703	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:46:52 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259102 minutes.	1037	0	32768	4	0	0	36028797018963968	702	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:46:52 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259102)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	701	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:46:52 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	700	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:46:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	699	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:46:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:41:32.773Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	698	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:41:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:41:32.773Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	697	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:41:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:41:32.773Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	696	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:41:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:41:32.773Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	695	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:41:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:41:32.773Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	694	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:41:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:41:32.773Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	693	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:41:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:41:27.025Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 22.	2		16384	4	0		36028797018963968	692	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:41:27 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:41:26.960Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-1b39e8a5-9ba7-4ac0-bf9f-2a0c1bcbad0b	2		16384	4	0		36028797018963968	691	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:41:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:41:26.960Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4272	2		16384	4	0		36028797018963968	690	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:41:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:41:26.587Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-1b39e8a5-9ba7-4ac0-bf9f-2a0c1bcbad0b. Error: -2	2		16384	4	0		36028797018963968	689	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:41:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:27:09.748Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	688	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:27:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:27:09.748Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	687	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:27:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:27:09.748Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	686	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:27:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:27:09.748Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	685	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:27:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:27:09.748Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	684	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:27:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:27:09.748Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	683	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:27:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:26:15.261Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 21.	2		16384	4	0		36028797018963968	682	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:26:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:26:15.173Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-bdf805c4-767e-4378-a2eb-85d92fa21105	2		16384	4	0		36028797018963968	681	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:26:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:26:15.173Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5640	2		16384	4	0		36028797018963968	680	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:26:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:26:14.780Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-bdf805c4-767e-4378-a2eb-85d92fa21105. Error: -2	2		16384	4	0		36028797018963968	679	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:26:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:25:17.349Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	678	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:25:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:25:17.349Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	677	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:25:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:25:17.349Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	676	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:25:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:25:17.349Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	675	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:25:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:25:17.349Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	674	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:25:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:25:17.349Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	673	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:25:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:25:05.467Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 20.	2		16384	4	0		36028797018963968	672	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:25:05 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:25:05.309Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-4459bb90-d891-42ee-a973-a12bb406a773	2		16384	4	0		36028797018963968	671	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:25:05 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:25:05.309Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4104	2		16384	4	0		36028797018963968	670	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:25:05 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:25:04.922Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-4459bb90-d891-42ee-a973-a12bb406a773. Error: -2	2		16384	4	0		36028797018963968	669	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:25:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:16.409Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	668	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:16.409Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	667	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:16.409Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	666	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:16.409Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	665	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:16.409Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	664	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:16.409Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	663	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:14.918Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	662	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:14.918Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	661	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:14.909Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	660	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:14.909Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	659	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:14.909Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	658	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:14.909Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	657	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:12.332Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 19.	2		16384	4	0		36028797018963968	656	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:12.253Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-97fd9efa-2583-43e8-ae8f-bced2696518e	2		16384	4	0		36028797018963968	655	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:12.253Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 2140	2		16384	4	0		36028797018963968	654	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:11.848Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-97fd9efa-2583-43e8-ae8f-bced2696518e. Error: -2	2		16384	4	0		36028797018963968	653	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:11 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:06.942Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 18.	2		16384	4	0		36028797018963968	652	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:06.868Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-2b705eb5-8de6-4864-836d-ce99f20a165c	2		16384	4	0		36028797018963968	651	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:06.868Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3228	2		16384	4	0		36028797018963968	650	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:20:06.503Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-2b705eb5-8de6-4864-836d-ce99f20a165c. Error: -2	2		16384	4	0		36028797018963968	649	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:20:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:18:12.041Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	648	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:18:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:18:12.041Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	647	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:18:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:18:12.041Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	646	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:18:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:18:12.041Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	645	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:18:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:18:12.041Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	644	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:18:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:18:12.041Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	643	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:18:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	642	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:17:21 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-09-18T21:16:21Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	641	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:17:21 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:17:20.540Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 17.	2		16384	4	0		36028797018963968	640	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:17:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:17:20.446Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-779942d3-ce89-44ed-bbfc-e00719495d8e	2		16384	4	0		36028797018963968	639	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:17:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:17:20.446Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 2404	2		16384	4	0		36028797018963968	638	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:17:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:17:20.056Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-779942d3-ce89-44ed-bbfc-e00719495d8e. Error: -2	2		16384	4	0		36028797018963968	637	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:17:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	636	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:16:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259132 minutes.	1037	0	32768	4	0	0	36028797018963968	635	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:16:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259132)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	634	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:16:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	633	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:16:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	632	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 9:16:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.996Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	631	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.996Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	630	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.996Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	629	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.996Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	628	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.996Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	627	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.996Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	626	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.762Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	625	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.762Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	624	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.762Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	623	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.762Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	622	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.762Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	621	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.762Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	620	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.543Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	619	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.543Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	618	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.527Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	617	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.527Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	616	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.527Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	615	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:13:53.527Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	614	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:13:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:42.956Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	613	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:42.956Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	612	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:42.941Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	611	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:42.941Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	610	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:42.941Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	609	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:42.941Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	608	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:42.799Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 16.	2		16384	4	0		36028797018963968	607	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:42.644Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-63216c51-2591-4185-b165-a1abff51874d	2		16384	4	0		36028797018963968	606	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:42.644Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 6124	2		16384	4	0		36028797018963968	605	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:42.237Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-63216c51-2591-4185-b165-a1abff51874d. Error: -2	2		16384	4	0		36028797018963968	604	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:41.627Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 15.	2		16384	4	0		36028797018963968	603	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:41.517Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-03debbe2-b045-44c5-a1ec-8136363e731b	2		16384	4	0		36028797018963968	602	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:41.517Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3792	2		16384	4	0		36028797018963968	601	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:41.111Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-03debbe2-b045-44c5-a1ec-8136363e731b. Error: -2	2		16384	4	0		36028797018963968	600	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:39.910Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 14.	2		16384	4	0		36028797018963968	599	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:39 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:39.753Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-c9e0dd22-ca21-4935-99e2-ec55ffcac017	2		16384	4	0		36028797018963968	598	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:39 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:39.738Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4040	2		16384	4	0		36028797018963968	597	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:39 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:09:39.332Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-c9e0dd22-ca21-4935-99e2-ec55ffcac017. Error: -2	2		16384	4	0		36028797018963968	596	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:09:39 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:08:40.847Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	595	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:08:40 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:08:40.847Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	594	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:08:40 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:08:40.847Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	593	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:08:40 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:08:40.847Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	592	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:08:40 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:08:40.847Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	591	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:08:40 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:08:40.847Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	590	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:08:40 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:08:27.327Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 13.	2		16384	4	0		36028797018963968	589	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:08:27 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:08:27.222Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5ba7aae4-11cf-4bae-825a-6ea9f7b052fa	2		16384	4	0		36028797018963968	588	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:08:27 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:08:27.222Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 4824	2		16384	4	0		36028797018963968	587	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:08:27 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:08:26.835Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5ba7aae4-11cf-4bae-825a-6ea9f7b052fa. Error: -2	2		16384	4	0		36028797018963968	586	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:08:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:07:20.802Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 12.	2		16384	4	0		36028797018963968	585	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:07:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:07:20.678Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d1c88125-bbdc-4e6f-99b5-cc2bbb27caf2	2		16384	4	0		36028797018963968	584	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:07:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:07:20.678Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3552	2		16384	4	0		36028797018963968	583	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:07:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:07:20.279Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d1c88125-bbdc-4e6f-99b5-cc2bbb27caf2. Error: -2	2		16384	4	0		36028797018963968	582	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:07:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:01:45.215Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	581	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:01:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:01:45.215Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	580	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:01:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:01:45.215Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	579	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:01:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:01:45.215Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	578	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:01:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:01:45.215Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	577	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:01:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:01:45.215Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	576	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:01:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:01:41.776Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 11.	2		16384	4	0		36028797018963968	575	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:01:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:01:41.641Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-25a02b63-f7d3-40d4-8373-cc437ceef99e	2		16384	4	0		36028797018963968	574	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:01:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:01:41.641Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5916	2		16384	4	0		36028797018963968	573	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:01:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:01:41.268Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-25a02b63-f7d3-40d4-8373-cc437ceef99e. Error: -2	2		16384	4	0		36028797018963968	572	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:01:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.425Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	571	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.425Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	570	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.425Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	569	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.425Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	568	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.425Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	567	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.112Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	566	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.112Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	565	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.112Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	564	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.112Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	563	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.112Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	562	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:31.112Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	561	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:30.692Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	560	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:30.692Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	559	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:30.671Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	558	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:30.671Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	557	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:30.671Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	556	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T21:00:30.671Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	555	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 9:00:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:58:20.300Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	554	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:58:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:58:20.300Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	553	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:58:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:58:20.300Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	552	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:58:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:58:20.300Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	551	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:58:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:58:20.300Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	550	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:58:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:58:20.300Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	549	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:58:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:58:15.690Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 10.	2		16384	4	0		36028797018963968	548	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:58:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:58:15.579Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-6852ac9c-d055-4788-8316-b59dbb632040	2		16384	4	0		36028797018963968	547	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:58:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:58:15.579Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 3724	2		16384	4	0		36028797018963968	546	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:58:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:58:15.159Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-6852ac9c-d055-4788-8316-b59dbb632040. Error: -2	2		16384	4	0		36028797018963968	545	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:58:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:57:46.299Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	544	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:57:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:57:46.299Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	543	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:57:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:57:46.299Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	542	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:57:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:57:46.299Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	541	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:57:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:57:46.299Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	540	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:57:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:57:46.299Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	539	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:57:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:57:24.158Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 9.	2		16384	4	0		36028797018963968	538	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:57:24 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:57:24.048Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-67568702-e073-4ebf-aeae-310160ebcb1e	2		16384	4	0		36028797018963968	537	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:57:24 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:57:24.048Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5640	2		16384	4	0		36028797018963968	536	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:57:24 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:57:23.670Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-67568702-e073-4ebf-aeae-310160ebcb1e. Error: -2	2		16384	4	0		36028797018963968	535	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:57:23 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:45.493Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	534	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:45.493Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	533	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:45.493Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	532	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:45.493Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	531	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:45.493Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	530	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:45.493Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	529	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:43.021Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	528	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:43.021Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	527	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:43.021Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	526	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:43.021Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	525	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:43.021Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	524	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:43.021Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	523	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:18.375Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 8.	2		16384	4	0		36028797018963968	522	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:18 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:18.253Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 7.	2		16384	4	0		36028797018963968	521	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:18 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:18.243Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-39a2a629-4cdb-497c-8f9e-729c11354b4b	2		16384	4	0		36028797018963968	520	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:18 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:18.243Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 1440	2		16384	4	0		36028797018963968	519	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:18 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:18.161Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-1a721e0a-0c66-4cab-9a36-ed78def77377	2		16384	4	0		36028797018963968	518	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:18 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:18.161Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 1748	2		16384	4	0		36028797018963968	517	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:18 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:17.675Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-39a2a629-4cdb-497c-8f9e-729c11354b4b. Error: -2	2		16384	4	0		36028797018963968	516	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:17.473Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-1a721e0a-0c66-4cab-9a36-ed78def77377. Error: -2	2		16384	4	0		36028797018963968	515	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:16.724Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 6.	2		16384	4	0		36028797018963968	514	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:16.615Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-39a25695-6a20-4519-b4cc-233d172fde0a	2		16384	4	0		36028797018963968	513	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:16.615Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5976	2		16384	4	0		36028797018963968	512	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:16.066Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-39a25695-6a20-4519-b4cc-233d172fde0a. Error: -2	2		16384	4	0		36028797018963968	511	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:15.411Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 5.	2		16384	4	0		36028797018963968	510	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:15.237Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-99848cf4-d1b1-4750-bd2d-84def7a9a754	2		16384	4	0		36028797018963968	509	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:15.237Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5844	2		16384	4	0		36028797018963968	508	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:14.852Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-99848cf4-d1b1-4750-bd2d-84def7a9a754. Error: -2	2		16384	4	0		36028797018963968	507	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:04.775Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 4.	2		16384	4	0		36028797018963968	506	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:04.632Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-73bec761-6a0d-444f-9c7c-1504a4ca70c6	2		16384	4	0		36028797018963968	505	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:04.632Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5512	2		16384	4	0		36028797018963968	504	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:56:04.223Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-73bec761-6a0d-444f-9c7c-1504a4ca70c6. Error: -2	2		16384	4	0		36028797018963968	503	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:56:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.819Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	502	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.819Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	501	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.819Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	500	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.819Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	499	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.819Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	498	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.819Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	497	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.380Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.	2		16384	4	0		36028797018963968	496	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.380Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.	2		16384	4	0		36028797018963968	495	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.380Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	494	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.380Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	493	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.380Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	492	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:33.380Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.	2		16384	4	0		36028797018963968	491	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:07.192Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 3.	2		16384	4	0		36028797018963968	490	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:07 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:07.083Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d2a1c319-7ed9-4fb7-af62-52e9373195bf	2		16384	4	0		36028797018963968	489	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:07 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:07.083Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5592	2		16384	4	0		36028797018963968	488	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:07 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:55:06.647Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d2a1c319-7ed9-4fb7-af62-52e9373195bf. Error: -2	2		16384	4	0		36028797018963968	487	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:55:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.	1000	0		4	0	0	-9223372036854775808	486	Microsoft-Windows-LoadPerf	122ee297-bb47-41ae-b265-1ca8d1886d40	Application	4904	4772	nch2-master-1.nc-master-1.local	S-1-5-18	9/17/2022 8:54:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:53:54.076Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 2.	2		16384	4	0		36028797018963968	485	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:53:54 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:53:53.858Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d32359bf-ad08-4517-9759-3f42907f23c0	2		16384	4	0		36028797018963968	484	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:53:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:53:53.858Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 2000	2		16384	4	0		36028797018963968	483	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:53:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-09-17T20:53:53.436Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d32359bf-ad08-4517-9759-3f42907f23c0. Error: -2	2		16384	4	0		36028797018963968	482	rbd-wnbd		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:53:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	481	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:49:22 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-09-18T20:48:22Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	480	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:49:22 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	479	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:48:52 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259160 minutes.	1037	0	32768	4	0	0	36028797018963968	478	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:48:52 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259160)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	477	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:48:52 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	476	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:48:52 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:<none>	900	0	16384	4	0	0	36028797018963968	475	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:48:52 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1	4202	0	16384	4	2	0	36028797018963968	474	Microsoft-Windows-MSDTC 2	5d9e0020-3761-4f36-90c8-38ce6511bd12	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:48:52 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information		TM	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	473	neutron-hyperv-agent		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:47:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	472	nova-compute		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:47:48 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NC-MASTER-1\administrator' .	5	0	16384	4	0	0	36028797018963968	471	Microsoft-Windows-Search-ProfileNotify	fc6f77dd-769a-470e-bcf9-1b6555a118be	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:47:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	470	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:47:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-09-18T20:46:31Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	469	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:47:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	468	cloudbase-init		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:47:10 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Security policy in the Group policy objects has been applied successfully.	1704		16384	4	0		36028797018963968	467	SceCli		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:46:53 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully	5617	2		4	0	0	-9223372036854775808	466	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	1448	2584	nch2-master-1.nc-master-1.local	S-1-5-18	9/17/2022 8:46:52 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	465	cloudbase-init		Application			nch2-master-1.nc-master-1.local		9/17/2022 8:46:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	464	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:46:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259162 minutes.	1037	0	32768	4	0	0	36028797018963968	463	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:46:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259162)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	462	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:46:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	461	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:46:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	460	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1.nc-master-1.local		9/17/2022 8:46:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully	5615	2		4	0	0	-9223372036854775808	459	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	1448	1540	nch2-master-1.nc-master-1.local	S-1-5-18	9/17/2022 8:46:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully.	1531	0		4	0	0	-9223372036854775808	458	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	1448	1488	nch2-master-1.nc-master-1.local	S-1-5-18	9/17/2022 8:46:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped.	1532	0		4	0	0	-9223372036854775808	457	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	548	1672	nch2-master-1	S-1-5-18	9/17/2022 8:46:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager.	8225		0	4	0		36028797018963968	456	VSS		Application			nch2-master-1		9/17/2022 8:46:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.	4111	0	16384	4	1	0	36028797018963968	455	Microsoft-Windows-MSDTC	719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d	Application	0	0	nch2-master-1		9/17/2022 8:46:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information		SVC	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	454	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:35:08 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-09-18T20:34:08Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	453	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:35:08 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	452	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:34:38 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259174 minutes.	1037	0	32768	4	0	0	36028797018963968	451	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:34:38 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	450	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:34:38 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	449	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:34:38 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	448	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:34:38 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.	1000	0		4	0	0	-9223372036854775808	447	Microsoft-Windows-LoadPerf	122ee297-bb47-41ae-b265-1ca8d1886d40	Application	4864	4752	nch2-master-1	S-1-5-18	9/17/2022 8:25:59 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?09?-?17T20:17:55.448468200Z.	10001	0		4	0	0	-9223372036854775808	446	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	3980	4244	nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:17:59 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 4140.	1042		0	4	0		36028797018963968	445	MsiInstaller		Application			nch2-master-1	S-1-5-18	9/17/2022 8:17:59 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.	1033		0	4	0		36028797018963968	444	MsiInstaller		Application			nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:17:59 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Ceph for Windows -- Installation completed successfully.	11707		0	4	0		36028797018963968	443	MsiInstaller		Application			nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:17:59 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?09?-?17T20:17:55.448468200Z.	10000	0		4	0	0	-9223372036854775808	442	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	3980	1852	nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:17:55 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 4140.	1040		0	4	0		36028797018963968	441	MsiInstaller		Application			nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:17:55 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.	1033		0	4	0		36028797018963968	440	MsiInstaller		Application			nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:17:54 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root list with effective date: ?Tuesday, ?July ?19, ?2022 4:36:22 PM.	4111	0	0	4	0	0	-9187343239835811840	439	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1320	3316	nch2-master-1		9/17/2022 8:16:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>.	4109	0	0	4	0	0	-9187343239835811840	438	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1320	3316	nch2-master-1		9/17/2022 8:16:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>.	4109	0	0	4	0	0	-9187343239835811840	437	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1320	3316	nch2-master-1		9/17/2022 8:16:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>.	4109	0	0	4	0	0	-9187343239835811840	436	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1320	3316	nch2-master-1		9/17/2022 8:16:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.	4109	0	0	4	0	0	-9187343239835811840	435	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1320	3316	nch2-master-1		9/17/2022 8:16:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>.	4109	0	0	4	0	0	-9187343239835811840	434	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1320	3316	nch2-master-1		9/17/2022 8:16:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.	4109	0	0	4	0	0	-9187343239835811840	433	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1320	3316	nch2-master-1		9/17/2022 8:16:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.	4109	0	0	4	0	0	-9187343239835811840	432	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1320	3316	nch2-master-1		9/17/2022 8:16:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?09?-?17T20:10:49.634070600Z.	10001	0		4	0	0	-9223372036854775808	431	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	1116	2012	nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:10:50 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4912.	1042		0	4	0		36028797018963968	430	MsiInstaller		Application			nch2-master-1	S-1-5-18	9/17/2022 8:10:50 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.	1033		0	4	0		36028797018963968	429	MsiInstaller		Application			nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:10:50 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully.	11707		0	4	0		36028797018963968	428	MsiInstaller		Application			nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:10:50 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?09?-?17T20:10:49.634070600Z.	10000	0		4	0	0	-9223372036854775808	427	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	1116	5012	nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:10:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?09?-?17T20:10:49.102851300Z.	10001	0		4	0	0	-9223372036854775808	426	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	1116	2012	nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:10:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?09?-?17T20:10:49.102851300Z.	10000	0		4	0	0	-9223372036854775808	425	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	1116	4820	nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:10:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4912.	1040		0	4	0		36028797018963968	424	MsiInstaller		Application			nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:10:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4912.	1042		0	4	0		36028797018963968	423	MsiInstaller		Application			nch2-master-1	S-1-5-18	9/17/2022 8:10:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.	1033		0	4	0		36028797018963968	422	MsiInstaller		Application			nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:10:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully.	11707		0	4	0		36028797018963968	421	MsiInstaller		Application			nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:10:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4912.	1040		0	4	0		36028797018963968	420	MsiInstaller		Application			nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1001	9/17/2022 8:10:48 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0.	1035		0	4	0		36028797018963968	419	MsiInstaller		Application			nch2-master-1	S-1-5-18	9/17/2022 8:10:40 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.	1000	0		4	0	0	-9223372036854775808	418	Microsoft-Windows-LoadPerf	122ee297-bb47-41ae-b265-1ca8d1886d40	Application	2236	3904	nch2-master-1	S-1-5-18	9/17/2022 8:09:57 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.	4097	0	0	4	0	0	-9187343239835811840	417	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1320	1764	nch2-master-1		9/17/2022 8:09:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	416	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-09-18T20:07:44Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	415	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent	8197	0	49152	4	0	0	36028797018963968	414	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/03/16:20:08:13;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL	8230	0	16384	4	0	0	36028797018963968	413	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent	8197	0	49152	4	0	0	36028797018963968	412	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259200 minutes.	1037	0	32768	4	0	0	36028797018963968	411	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	410	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	409	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
These policies are being excluded since they are only defined with override-only attribute. Policy Names=(Security-SPP-Reserved-EnableNotificationMode) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4	1033	0	16384	4	0	0	36028797018963968	408	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100	1034	0	16384	4	0	0	36028797018963968	407	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Validity period has been started. Validity minutes=259200 Grace type=9.	1036	0	16384	4	0	0	36028797018963968	406	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSA client has been successfully triggered to update the Device License	12311	0	16384	4	0	0	36028797018963968	405	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f}	12304	0	16384	4	0	0	36028797018963968	404	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f	12305	0	16384	4	0	0	36028797018963968	403	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection ended.	20489	0	49152	4	0	0	36028797018963968	402	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:11 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500	1034	0	16384	4	0	0	36028797018963968	401	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:11 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check passed.	20482	0	49152	4	0	0	36028797018963968	400	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:10 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check initiated.	20481	0	49152	4	0	0	36028797018963968	399	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection started.	20488	0	49152	4	0	0	36028797018963968	398	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS.	1067	0	32768	4	0	0	36028797018963968	397	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:08 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE} License Id=615c8d5b-1876-4926-8b13-1315dbab63f4	1004	0	16384	4	0	0	36028797018963968	396	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:08 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC} License Id=558f9526-8113-4121-b512-8915bc2ef9f1	1004	0	16384	4	0	0	36028797018963968	395	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:08 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Acquisition of End User License was successful. Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4	1013	0	16384	0	0	0	36028797018963968	394	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:08 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/09/27:20:04:03;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL	8230	0	16384	4	0	0	36028797018963968	393	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:08:03 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1	4202	0	16384	4	2	0	36028797018963968	392	Microsoft-Windows-MSDTC 2	5d9e0020-3761-4f36-90c8-38ce6511bd12	Application	0	0	nch2-master-1		9/17/2022 8:06:39 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information		TM	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	391	cloudbase-init		Application			nch2-master-1		9/17/2022 8:05:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]	1003	0	16384	4	0	0	36028797018963968	390	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:05:20 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied. .	1534	0		3	0	0	-9223372036854775808	389	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	548	2872	nch2-master-1	S-1-5-21-449157348-924182257-2544467473-1000	9/17/2022 8:05:19 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service failed to create default configuration for new user 'NCH2-MASTER-1\Admin' in response to user profile creation. Error code 0x80070005. Access is denied. .	6	0	49152	2	0	0	36028797018963968	388	Microsoft-Windows-Search-ProfileNotify	fc6f77dd-769a-470e-bcf9-1b6555a118be	Application	0	0	nch2-master-1		9/17/2022 8:05:19 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	387	cloudbase-init		Application			nch2-master-1		9/17/2022 8:04:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NCH2-MASTER-1\cloudbase-init' .	5	0	16384	4	0	0	36028797018963968	386	Microsoft-Windows-Search-ProfileNotify	fc6f77dd-769a-470e-bcf9-1b6555a118be	Application	0	0	nch2-master-1		9/17/2022 8:04:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.	4097	0	0	4	0	0	-9187343239835811840	385	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1320	1940	nch2-master-1		9/17/2022 8:04:40 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully	5617	2		4	0	0	-9223372036854775808	384	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	548	528	nch2-master-1	S-1-5-18	9/17/2022 8:04:38 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully	5615	2		4	0	0	-9223372036854775808	383	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	548	1380	nch2-master-1	S-1-5-18	9/17/2022 8:04:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully.	1531	0		4	0	0	-9223372036854775808	382	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	548	1672	nch2-master-1	S-1-5-18	9/17/2022 8:04:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14399)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]	1003	0	16384	4	0	0	36028797018963968	381	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:04:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500	1034	0	16384	4	0	0	36028797018963968	380	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:04:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.	4625	0	16384	4	0	0	36028797018963968	379	Microsoft-Windows-EventSystem	899daace-4868-4295-afcd-9eb8fb497561	Application	0	0	nch2-master-1		9/17/2022 8:04:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Proof of Purchase installed successfully. ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845	1016	0	16384	4	0	0	36028797018963968	378	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	nch2-master-1		9/17/2022 8:04:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped.	1532	0		4	0	0	-9223372036854775808	377	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	532	1464	WIN-5T344G8GM1H	S-1-5-18	9/17/2022 8:04:08 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager.	8225		0	4	0		36028797018963968	376	VSS		Application			WIN-5T344G8GM1H		9/17/2022 8:04:08 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.	4097	0	0	4	0	0	-9187343239835811840	375	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1660	1856	WIN-5T344G8GM1H		9/17/2022 8:03:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} Writer Name: Microsoft Hyper-V VSS Writer	8212		0	4	0		36028797018963968	374	VSS		Application			WIN-5T344G8GM1H		9/17/2022 8:03:23 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?March ?16, ?2021 7:29:24 AM.	4112	0	0	4	0	0	-9187343239835811840	373	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1660	1784	WIN-5T344G8GM1H		9/17/2022 8:03:18 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully	5617	2		4	0	0	-9223372036854775808	372	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	532	508	WIN-5T344G8GM1H	S-1-5-18	9/17/2022 8:03:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully	5615	2		4	0	0	-9223372036854775808	371	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	532	1556	WIN-5T344G8GM1H	S-1-5-18	9/17/2022 8:03:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully.	1531	0		4	0	0	-9223372036854775808	370	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	532	1464	WIN-5T344G8GM1H	S-1-5-18	9/17/2022 8:03:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer	8212		0	4	0		36028797018963968	369	VSS		Application			WIN-5T344G8GM1H		9/17/2022 8:03:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4} Writer Name: ASR Writer	8212		0	4	0		36028797018963968	368	VSS		Application			WIN-5T344G8GM1H		9/17/2022 8:03:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f} Writer Name: COM+ REGDB Writer	8212		0	4	0		36028797018963968	367	VSS		Application			WIN-5T344G8GM1H		9/17/2022 8:03:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485} Writer Name: Registry Writer	8212		0	4	0		36028797018963968	366	VSS		Application			WIN-5T344G8GM1H		9/17/2022 8:03:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.	4625	0	16384	4	0	0	36028797018963968	365	Microsoft-Windows-EventSystem	899daace-4868-4295-afcd-9eb8fb497561	Application	0	0	WIN-FU0T5SV9FMA		9/17/2022 8:03:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped.	1532	0		4	0	0	-9223372036854775808	364	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	976	1228	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:48:13 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required. DETAIL - 9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500: Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security	1530	0		4	0	0	-9223372036854775808	363	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	976	3432	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:48:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The winlogon notification subscriber <SessionEnv> failed a notification event.	6001	0	32768	3	0	0	36028797018963968	362	Microsoft-Windows-Winlogon	dbe9b383-7cf3-4331-91cc-a3cb16a3b538	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent	8197	0	49152	4	0	0	36028797018963968	361	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448	8230	0	16384	4	0	0	36028797018963968	360	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	359	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining.	12306	0	16384	4	0	0	36028797018963968	358	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	357	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]	1003	0	16384	4	0	0	36028797018963968	356	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Grace period has been started. Grace days=10 Grace type=6.	1025	0	16384	4	0	0	36028797018963968	355	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500	1034	0	16384	4	0	0	36028797018963968	354	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The hardware has changed.	1024	0	32768	4	0	0	36028797018963968	353	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hardware has changed from previous boot. AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4.	1040	0	16384	4	0	0	36028797018963968	352	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	351	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=Sysprep.exe	900	0	16384	4	0	0	36028797018963968	350	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.	4111	0	16384	4	1	0	36028797018963968	349	Microsoft-Windows-MSDTC	719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:47:34 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information		SVC	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]