MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
The Software Protection service has stopped. 90301638400036028797018963968730Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 10:15:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-02T22:14:48Z. Reason: TBL.1638401638440036028797018963968729Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 10:15:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968728Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 10:15:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259073 minutes.103703276840036028797018963968727Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 10:15:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259073)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968726Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 10:15:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968725Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 10:15:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968724Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 10:15:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:11:11.697Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968723rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:11:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:11:11.697Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968722rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:11:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:11:11.697Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968721rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:11:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:11:11.697Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968720rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:11:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:11:11.697Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968719rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:11:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:11:11.697Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968718rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:11:11 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:09:43.428Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 24.2163844036028797018963968717rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:09:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:09:43.356Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-223aaf60-9290-4c78-830a-bd61587db2a62163844036028797018963968716rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:09:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:09:43.356Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5002163844036028797018963968715rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:09:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:09:42.970Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-223aaf60-9290-4c78-830a-bd61587db2a6. Error: -22163844036028797018963968714rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:09:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:09:33.952Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968713rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:09:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:09:33.952Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968712rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:09:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:09:33.952Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968711rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:09:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:09:33.952Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968710rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:09:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:09:33.952Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968709rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:09:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:09:33.952Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968708rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:09:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:07:07.152Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 23.2163844036028797018963968707rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:07:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:07:07.074Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-223aaf60-9290-4c78-830a-bd61587db2a62163844036028797018963968706rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:07:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:07:07.074Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 38202163844036028797018963968705rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:07:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T22:07:06.704Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-223aaf60-9290-4c78-830a-bd61587db2a6. Error: -22163844036028797018963968704rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 10:07:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:55:09.086Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968703rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:55:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:55:09.086Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968702rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:55:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:55:09.086Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968701rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:55:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:55:09.086Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968700rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:55:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:55:09.086Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968699rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:55:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:55:09.086Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968698rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:55:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:53:50.747Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 22.2163844036028797018963968697rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:53:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:53:50.700Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-9a9dd363-c0ba-48a2-96cc-d36b034cc7b92163844036028797018963968696rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:53:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:53:50.700Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 60642163844036028797018963968695rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:53:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:53:50.341Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-9a9dd363-c0ba-48a2-96cc-d36b034cc7b9. Error: -22163844036028797018963968694rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:53:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:53:07.820Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968693rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:53:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:53:07.820Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968692rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:53:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:53:07.820Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968691rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:53:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:53:07.820Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968690rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:53:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:53:07.820Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968689rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:53:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:53:07.820Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968688rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:53:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:51:49.559Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968687rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:51:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:49:25.801Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 21.2163844036028797018963968686rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:49:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:49:25.718Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5c5d3990-22f7-4f2d-a4eb-af828a87f0712163844036028797018963968685rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:49:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:49:25.718Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 48722163844036028797018963968684rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:49:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:49:25.343Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5c5d3990-22f7-4f2d-a4eb-af828a87f071. Error: -22163844036028797018963968683rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:49:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:43.763Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968682rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:43.748Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968681rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:43.748Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968680rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:43.748Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968679rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:43.748Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968678rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:43.748Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968677rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:39.763Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 20.2163844036028797018963968676rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:39.716Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-87451133-1fee-4ceb-b64f-d489f8a259852163844036028797018963968675rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:39.716Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 56442163844036028797018963968674rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:39.342Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-87451133-1fee-4ceb-b64f-d489f8a25985. Error: -22163844036028797018963968673rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:25.725Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968672rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:25.725Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968671rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:25.725Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968670rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:25.725Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968669rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:25.725Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968668rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:25.725Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968667rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:04.574Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 19.2163844036028797018963968666rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:04.505Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-87451133-1fee-4ceb-b64f-d489f8a259852163844036028797018963968665rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:04.505Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 5202163844036028797018963968664rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:47:04.083Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-87451133-1fee-4ceb-b64f-d489f8a25985. Error: -22163844036028797018963968663rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:47:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968662Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:45:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-02T21:44:47Z. Reason: TBL.1638401638440036028797018963968661Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:45:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968660Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:45:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259103 minutes.103703276840036028797018963968659Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:45:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259103)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968658Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:45:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968657Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:45:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968656Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:45:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:30:07.260Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968655rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:30:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:30:07.260Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968654rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:30:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:30:07.260Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968653rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:30:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:30:07.260Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968652rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:30:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:30:07.260Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968651rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:30:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:30:07.260Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968650rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:30:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:30:04.068Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968649rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:30:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:29:30.286Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968648rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:29:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:29:30.286Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968647rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:29:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:29:30.273Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968646rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:29:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:29:30.273Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968645rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:29:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:29:30.273Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968644rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:29:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:29:30.273Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968643rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:29:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:27:40.257Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 18.2163844036028797018963968642rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:27:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:27:40.158Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-a61c69d6-7d79-413d-87ad-e254e121f6232163844036028797018963968641rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:27:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:27:40.158Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 25682163844036028797018963968640rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:27:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:27:39.802Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-a61c69d6-7d79-413d-87ad-e254e121f623. Error: -22163844036028797018963968639rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:27:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:25:45.862Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 17.2163844036028797018963968638rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:25:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:25:45.772Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-91a33031-458c-4c6f-8fe0-fccc855ffd7f2163844036028797018963968637rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:25:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:25:45.772Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 49202163844036028797018963968636rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:25:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:25:45.414Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-91a33031-458c-4c6f-8fe0-fccc855ffd7f. Error: -22163844036028797018963968635rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:25:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:25:38.471Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968634rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:25:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:25:38.471Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968633rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:25:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:25:38.471Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968632rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:25:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:25:38.471Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968631rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:25:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:25:38.471Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968630rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:25:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:25:38.471Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968629rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:25:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:23:22.803Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 16.2163844036028797018963968628rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:23:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:23:22.709Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-91a33031-458c-4c6f-8fe0-fccc855ffd7f2163844036028797018963968627rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:23:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:23:22.709Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 6962163844036028797018963968626rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:23:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:23:22.335Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-91a33031-458c-4c6f-8fe0-fccc855ffd7f. Error: -22163844036028797018963968625rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:23:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:40.842Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968624rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:40.842Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968623rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:40.842Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968622rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:40.842Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968621rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:40.842Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968620rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:40.842Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968619rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:33.990Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 15.2163844036028797018963968618rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:33.903Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-2c387064-4e94-46fa-8a41-d63dfab6a47f2163844036028797018963968617rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:33.903Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 60082163844036028797018963968616rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:33.474Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-2c387064-4e94-46fa-8a41-d63dfab6a47f. Error: -22163844036028797018963968615rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:24.580Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968614rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:24.580Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968613rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:24.580Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968612rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:24.580Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968611rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:24.580Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968610rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:24.580Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968609rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:12.866Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 14.2163844036028797018963968608rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:12.711Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-0ee81fee-f2c0-4d11-8269-891242b96cb32163844036028797018963968607rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:12.711Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 41402163844036028797018963968606rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:22:12.321Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-0ee81fee-f2c0-4d11-8269-891242b96cb3. Error: -22163844036028797018963968605rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:22:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968604Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:15:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-02T21:14:47Z. Reason: TBL.1638401638440036028797018963968603Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:15:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968602Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:15:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259133 minutes.103703276840036028797018963968601Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:15:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259133)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968600Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:15:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968599Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:15:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968598Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 9:15:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:14:49.497Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968597rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:14:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:14:49.497Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968596rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:14:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:14:49.481Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968595rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:14:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:14:49.481Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968594rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:14:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:14:49.481Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968593rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:14:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:14:49.481Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968592rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:14:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:14:46.929Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 13.2163844036028797018963968591rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:14:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:14:46.849Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5cc6c2ae-e749-490d-86dd-a079f9551aa12163844036028797018963968590rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:14:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:14:46.849Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 41402163844036028797018963968589rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:14:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:14:46.474Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5cc6c2ae-e749-490d-86dd-a079f9551aa1. Error: -22163844036028797018963968588rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:14:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:11:42.345Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968587rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:11:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:11:42.345Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968586rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:11:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:11:42.345Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968585rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:11:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:11:42.345Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968584rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:11:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:11:42.345Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968583rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:11:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:11:42.345Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968582rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:11:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:55.740Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968581rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:55.740Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968580rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:55.740Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968579rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:55.740Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968578rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:55.740Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968577rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:55.740Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968576rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:53.844Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968575rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:53.844Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968574rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:53.844Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968573rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:53.844Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968572rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:53.844Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968571rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:53.844Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968570rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:51.195Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 12.2163844036028797018963968569rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:51.110Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-c71b7f5d-5340-4105-9d8d-c2c46de550a42163844036028797018963968568rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:51.110Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 53002163844036028797018963968567rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:50.700Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-c71b7f5d-5340-4105-9d8d-c2c46de550a4. Error: -22163844036028797018963968566rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:44.731Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 11.2163844036028797018963968565rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:44.644Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-092a001a-07c1-4c2a-9b64-59c4a913b6992163844036028797018963968564rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:44.644Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 29242163844036028797018963968563rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:44.250Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-092a001a-07c1-4c2a-9b64-59c4a913b699. Error: -22163844036028797018963968562rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:28.624Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 10.2163844036028797018963968561rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:28.498Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-057ca534-4250-412a-aa43-66638a05be1b2163844036028797018963968560rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:28.468Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 21882163844036028797018963968559rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:28.093Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-057ca534-4250-412a-aa43-66638a05be1b. Error: -22163844036028797018963968558rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.470Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968557rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.470Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968556rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.470Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968555rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.470Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968554rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.470Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968553rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.470Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968552rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.225Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968551rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.225Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968550rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.205Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968549rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.205Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968548rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.205Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968547rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:20.205Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968546rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:19.967Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968545rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:19.967Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968544rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:10:19.967Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968543rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:10:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:18.147Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 9.2163844036028797018963968542rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:18.075Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-5f3eb6ba-d61b-4c3c-8018-5709f993e46d2163844036028797018963968541rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:18.075Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 25442163844036028797018963968540rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:17.699Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-5f3eb6ba-d61b-4c3c-8018-5709f993e46d. Error: -22163844036028797018963968539rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:17.154Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 8.2163844036028797018963968538rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:17.074Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-191e827c-2032-49f3-ba21-01dce9c29e112163844036028797018963968537rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:17.074Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 43882163844036028797018963968536rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:16.684Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-191e827c-2032-49f3-ba21-01dce9c29e11. Error: -22163844036028797018963968535rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:16.082Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 7.2163844036028797018963968534rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:15.961Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-10008470-ec42-45af-91f0-d055c3127e462163844036028797018963968533rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:15.961Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 23122163844036028797018963968532rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:06:15.591Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-10008470-ec42-45af-91f0-d055c3127e46. Error: -22163844036028797018963968531rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:06:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:00:42.645Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968530rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:00:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:00:42.645Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968529rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:00:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:00:42.645Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968528rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:00:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:00:42.645Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968527rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:00:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:00:42.645Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968526rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:00:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:00:42.645Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968525rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:00:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:00:36.147Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 6.2163844036028797018963968524rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:00:36 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:00:36.086Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-8854826b-5d7e-43c4-9404-d505ad354cdc2163844036028797018963968523rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:00:36 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:00:36.071Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 57602163844036028797018963968522rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:00:36 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T21:00:35.663Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-8854826b-5d7e-43c4-9404-d505ad354cdc. Error: -22163844036028797018963968521rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 9:00:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:56:07.428Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968520rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:56:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:56:07.428Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968519rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:56:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:56:07.428Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968518rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:56:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:56:07.428Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968517rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:56:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:56:07.428Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968516rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:56:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:56:07.428Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968515rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:56:07 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:49.312Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 5.2163844036028797018963968514rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:49.139Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-bae2c97c-a30a-424b-bc18-c9977d7682662163844036028797018963968513rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:49.139Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 56282163844036028797018963968512rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:47.393Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-bae2c97c-a30a-424b-bc18-c9977d768266. Error: -22163844036028797018963968511rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:08.191Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968510rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:08.191Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968509rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:08.191Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968508rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:08.191Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968507rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:08.191Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968506rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:08.191Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968505rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:02.208Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968504rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:02.208Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968503rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:02.188Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968502rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:02.188Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968501rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:02.188Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968500rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:55:02.188Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968499rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:55:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:54:44.592Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 4.2163844036028797018963968498rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:54:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:54:44.452Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-0657d824-3635-4137-a555-f2ea7736e55a2163844036028797018963968497rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:54:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:54:44.452Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 23682163844036028797018963968496rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:54:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:54:44.036Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-0657d824-3635-4137-a555-f2ea7736e55a. Error: -22163844036028797018963968495rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:54:44 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:54:38.226Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 3.2163844036028797018963968494rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:54:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:54:38.142Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-f83c038c-0838-41d4-b421-20d53a0dec112163844036028797018963968493rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:54:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:54:38.142Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 33642163844036028797018963968492rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:54:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:54:37.685Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-f83c038c-0838-41d4-b421-20d53a0dec11. Error: -22163844036028797018963968491rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:54:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:53:49.487Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968490rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:53:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:53:49.487Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968489rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:53:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:53:49.487Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968488rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:53:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:53:49.487Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968487rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:53:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:53:49.487Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968486rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:53:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:53:49.487Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968485rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:53:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:53:26.703Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 2.2163844036028797018963968484rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:53:26 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:53:26.562Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-2ffa640e-11d3-4b20-a2d6-2b0316d715b02163844036028797018963968483rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:53:26 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:53:26.546Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 50322163844036028797018963968482rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:53:26 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-01T20:53:26.109Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-2ffa640e-11d3-4b20-a2d6-2b0316d715b0. Error: -22163844036028797018963968481rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/1/2022 8:53:26 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808480Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application31603776nch1-master-1.nc-master-1.localS-1-5-1810/1/2022 8:52:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968479Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:47:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-02T20:46:48Z. Reason: TBL.1638401638440036028797018963968478Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:47:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968477Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:47:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259161 minutes.103703276840036028797018963968476Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:47:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259161)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968475Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:47:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968474Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:47:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:<none>90001638440036028797018963968473Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:47:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1 420201638442036028797018963968472Microsoft-Windows-MSDTC 25d9e0020-3761-4f36-90c8-38ce6511bd12Application00nch1-master-1.nc-master-1.local10/1/2022 8:47:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationTMSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968471neutron-hyperv-agentApplicationnch1-master-1.nc-master-1.local10/1/2022 8:46:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968470nova-computeApplicationnch1-master-1.nc-master-1.local10/1/2022 8:46:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NC-MASTER-1\administrator' . 501638440036028797018963968469Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch1-master-1.nc-master-1.local10/1/2022 8:46:01 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968468Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:45:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-02T20:44:57Z. Reason: TBL.1638401638440036028797018963968467Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:45:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968466cloudbase-initApplicationnch1-master-1.nc-master-1.local10/1/2022 8:45:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Security policy in the Group policy objects has been applied successfully.1704163844036028797018963968465SceCliApplicationnch1-master-1.nc-master-1.local10/1/2022 8:45:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808464Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication14442108nch1-master-1.nc-master-1.localS-1-5-1810/1/2022 8:45:18 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968463Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:45:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968462cloudbase-initApplicationnch1-master-1.nc-master-1.local10/1/2022 8:45:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259163 minutes.103703276840036028797018963968461Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:45:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259163)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968460Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:45:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968459Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:45:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968458Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/1/2022 8:45:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808457Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication14441504nch1-master-1.nc-master-1.localS-1-5-1810/1/2022 8:45:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808456Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application14441472nch1-master-1.nc-master-1.localS-1-5-1810/1/2022 8:45:15 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808455Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5961700nch1-master-1S-1-5-1810/1/2022 8:44:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.411101638441036028797018963968454Microsoft-Windows-MSDTC719be4ed-e9bc-4dd8-a7cf-c85ce8e4975dApplication00nch1-master-110/1/2022 8:44:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSVCSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968453Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:34:23 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-02T20:33:23Z. Reason: TBL.1638401638440036028797018963968452Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:34:23 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968451Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:33:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259174 minutes.103703276840036028797018963968450Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:33:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968449Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:33:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968448Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:33:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968447Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:33:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808446Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application3601804nch1-master-1S-1-5-1810/1/2022 8:26:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?10?-?01T20:18:06.329981700Z.100010400-9223372036854775808445Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application46405032nch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:18:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 1412.104204036028797018963968444MsiInstallerApplicationnch1-master-1S-1-5-1810/1/2022 8:18:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.103304036028797018963968443MsiInstallerApplicationnch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:18:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Ceph for Windows -- Installation completed successfully.1170704036028797018963968442MsiInstallerApplicationnch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:18:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?10?-?01T20:18:06.329981700Z.100000400-9223372036854775808441Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application46402408nch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:18:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 1412.104004036028797018963968440MsiInstallerApplicationnch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:18:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.103304036028797018963968439MsiInstallerApplicationnch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:18:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root list with effective date: ?Tuesday, ?September ?13, ?2022 7:55:56 PM.411100400-9187343239835811840438Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13361372nch1-master-110/1/2022 8:18:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>.410900400-9187343239835811840437Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13361372nch1-master-110/1/2022 8:18:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>.410900400-9187343239835811840436Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13361372nch1-master-110/1/2022 8:18:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>.410900400-9187343239835811840435Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13361372nch1-master-110/1/2022 8:18:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.410900400-9187343239835811840434Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13361372nch1-master-110/1/2022 8:18:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>.410900400-9187343239835811840433Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13361372nch1-master-110/1/2022 8:18:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.410900400-9187343239835811840432Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13361372nch1-master-110/1/2022 8:18:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.410900400-9187343239835811840431Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13361372nch1-master-110/1/2022 8:18:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?10?-?01T20:10:25.002305800Z.100010400-9223372036854775808430Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application24121140nch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:10:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4112.104204036028797018963968429MsiInstallerApplicationnch1-master-1S-1-5-1810/1/2022 8:10:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.103304036028797018963968428MsiInstallerApplicationnch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:10:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully.1170704036028797018963968427MsiInstallerApplicationnch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:10:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?10?-?01T20:10:25.002305800Z.100000400-9223372036854775808426Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application24123504nch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:10:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?10?-?01T20:10:24.486669600Z.100010400-9223372036854775808425Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application24121140nch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:10:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?10?-?01T20:10:24.486669600Z.100000400-9223372036854775808424Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application24124640nch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:10:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4112.104004036028797018963968423MsiInstallerApplicationnch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:10:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4112.104204036028797018963968422MsiInstallerApplicationnch1-master-1S-1-5-1810/1/2022 8:10:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.103304036028797018963968421MsiInstallerApplicationnch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:10:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully.1170704036028797018963968420MsiInstallerApplicationnch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:10:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4112.104004036028797018963968419MsiInstallerApplicationnch1-master-1S-1-5-21-1442269917-938638949-3445306617-100110/1/2022 8:10:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0.103504036028797018963968418MsiInstallerApplicationnch1-master-1S-1-5-1810/1/2022 8:10:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808417Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application31442268nch1-master-1S-1-5-1810/1/2022 8:09:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.409700400-9187343239835811840416Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13361372nch1-master-110/1/2022 8:08:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968415Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:08:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-02T20:07:01Z. Reason: TBL.1638401638440036028797018963968414Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:08:01 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent819704915240036028797018963968413Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/03/30:20:07:31;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968412Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent819704915240036028797018963968411Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259200 minutes.103703276840036028797018963968410Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968409Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968408Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
These policies are being excluded since they are only defined with override-only attribute. Policy Names=(Security-SPP-Reserved-EnableNotificationMode) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4103301638440036028797018963968407Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100103401638440036028797018963968406Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Validity period has been started. Validity minutes=259200 Grace type=9.103601638440036028797018963968405Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSA client has been successfully triggered to update the Device License1231101638440036028797018963968404Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f}1230401638440036028797018963968403Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f1230501638440036028797018963968402Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection ended. 2048904915240036028797018963968401Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968400Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check passed. 2048204915240036028797018963968399Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check initiated. 2048104915240036028797018963968398Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:26 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection started. 2048804915240036028797018963968397Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:26 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS. 106703276840036028797018963968396Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE} License Id=5d42ab32-845e-4c97-bba6-cbdb65fbfcb8100401638440036028797018963968395Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC} License Id=e303e06c-1291-414d-a233-8e3f75a4df84100401638440036028797018963968394Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Acquisition of End User License was successful. Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4101301638400036028797018963968393Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/11:20:03:19;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968392Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:07:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1 420201638442036028797018963968391Microsoft-Windows-MSDTC 25d9e0020-3761-4f36-90c8-38ce6511bd12Application00nch1-master-110/1/2022 8:05:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationTMSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968390cloudbase-initApplicationnch1-master-110/1/2022 8:04:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968389Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:04:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied. . 15340300-9223372036854775808388Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5962164nch1-master-1S-1-5-21-1442269917-938638949-3445306617-100010/1/2022 8:04:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service failed to create default configuration for new user 'NCH1-MASTER-1\Admin' in response to user profile creation. Error code 0x80070005. Access is denied. .604915220036028797018963968387Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch1-master-110/1/2022 8:04:33 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968386cloudbase-initApplicationnch1-master-110/1/2022 8:03:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NCH1-MASTER-1\cloudbase-init' . 501638440036028797018963968385Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch1-master-110/1/2022 8:03:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.409700400-9187343239835811840384Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13361792nch1-master-110/1/2022 8:03:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808383Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication596984nch1-master-1S-1-5-1810/1/2022 8:03:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808382Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication596540nch1-master-1S-1-5-1810/1/2022 8:03:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808381Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5961700nch1-master-1S-1-5-1810/1/2022 8:03:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14399)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968380Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:03:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968379Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:03:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Proof of Purchase installed successfully. ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845101601638440036028797018963968378Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/1/2022 8:03:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.462501638440036028797018963968377Microsoft-Windows-EventSystem899daace-4868-4295-afcd-9eb8fb497561Application00nch1-master-110/1/2022 8:03:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808376Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5201480WIN-5T344G8GM1HS-1-5-1810/1/2022 8:03:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager. 822504036028797018963968375VSSApplicationWIN-5T344G8GM1H10/1/2022 8:03:24 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.409700400-9187343239835811840374Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication16921816WIN-5T344G8GM1H10/1/2022 8:02:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} Writer Name: Microsoft Hyper-V VSS Writer821204036028797018963968373VSSApplicationWIN-5T344G8GM1H10/1/2022 8:02:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?March ?16, ?2021 7:29:24 AM.411200400-9187343239835811840372Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication16921816WIN-5T344G8GM1H10/1/2022 8:02:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808371Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5208WIN-5T344G8GM1HS-1-5-1810/1/2022 8:02:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808370Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5201556WIN-5T344G8GM1HS-1-5-1810/1/2022 8:02:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808369Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5201480WIN-5T344G8GM1HS-1-5-1810/1/2022 8:02:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer821204036028797018963968368VSSApplicationWIN-5T344G8GM1H10/1/2022 8:02:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4} Writer Name: ASR Writer821204036028797018963968367VSSApplicationWIN-5T344G8GM1H10/1/2022 8:02:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f} Writer Name: COM+ REGDB Writer821204036028797018963968366VSSApplicationWIN-5T344G8GM1H10/1/2022 8:02:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485} Writer Name: Registry Writer821204036028797018963968365VSSApplicationWIN-5T344G8GM1H10/1/2022 8:02:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808364Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application9761228WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:13 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required. DETAIL - 9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500: Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security 15300400-9223372036854775808363Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application9763432WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The winlogon notification subscriber <SessionEnv> failed a notification event.600103276830036028797018963968362Microsoft-Windows-Winlogondbe9b383-7cf3-4331-91cc-a3cb16a3b538Application00WIN-5T344G8GM1H1/19/2018 9:48:12 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent819704915240036028797018963968361Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448823001638440036028797018963968360Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 100301638440036028797018963968359Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining.1230601638440036028797018963968358Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968357Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968356Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Grace period has been started. Grace days=10 Grace type=6.102501638440036028797018963968355Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968354Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The hardware has changed.102403276840036028797018963968353Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hardware has changed from previous boot. AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4.104001638440036028797018963968352Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968351Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=Sysprep.exe90001638440036028797018963968350Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.411101638441036028797018963968349Microsoft-Windows-MSDTC719be4ed-e9bc-4dd8-a7cf-c85ce8e4975dApplication00WIN-5T344G8GM1H1/19/2018 9:47:34 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSVCSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]