MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
The Software Protection service has stopped. 90301638400036028797018963968729Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 10:18:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-09T22:17:28Z. Reason: TBL.1638401638440036028797018963968728Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 10:18:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968727Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 10:17:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259070 minutes.103703276840036028797018963968726Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 10:17:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259070)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968725Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 10:17:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968724Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 10:17:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968723Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 10:17:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T22:12:16.595Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968722rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 10:12:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T22:12:16.595Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968721rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 10:12:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T22:12:16.595Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968720rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 10:12:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T22:12:16.595Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968719rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 10:12:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T22:12:16.595Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968718rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 10:12:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T22:12:16.595Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968717rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 10:12:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T22:09:48.510Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 23.2163844036028797018963968716rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 10:09:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T22:09:48.343Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-4a4c2867-d278-4fbe-92da-e4f35447373a2163844036028797018963968715rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 10:09:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T22:09:48.343Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 47962163844036028797018963968714rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 10:09:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T22:09:47.906Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-4a4c2867-d278-4fbe-92da-e4f35447373a. Error: -22163844036028797018963968713rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 10:09:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:55:29.717Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968712rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:55:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:55:29.717Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968711rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:55:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:55:29.717Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968710rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:55:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:55:29.717Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968709rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:55:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:55:29.717Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968708rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:55:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:55:29.717Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968707rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:55:29 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:54:10.048Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968706rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:54:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:51:45.665Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 22.2163844036028797018963968705rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:51:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:51:45.556Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-e43bda1c-c18a-48a3-81f9-12a65dd435322163844036028797018963968704rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:51:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:51:45.556Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 31242163844036028797018963968703rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:51:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:51:45.098Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-e43bda1c-c18a-48a3-81f9-12a65dd43532. Error: -22163844036028797018963968702rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:51:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:49:50.914Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968701rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:49:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:49:50.914Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968700rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:49:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:49:50.914Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968699rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:49:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:49:50.914Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968698rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:49:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:49:50.914Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968697rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:49:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:49:50.914Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968696rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:49:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:49:46.069Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 21.2163844036028797018963968695rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:49:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:49:45.990Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d9a80439-6df2-422f-8a08-47768518e62c2163844036028797018963968694rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:49:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:49:45.975Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 17002163844036028797018963968693rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:49:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:49:45.537Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d9a80439-6df2-422f-8a08-47768518e62c. Error: -22163844036028797018963968692rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:49:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968691Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:48:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-09T21:47:27Z. Reason: TBL.1638401638440036028797018963968690Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:48:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968689Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:47:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259100 minutes.103703276840036028797018963968688Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:47:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259100)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968687Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:47:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968686Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:47:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968685Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:47:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:40:51.509Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968684rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:40:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:40:51.509Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968683rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:40:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:40:51.499Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968682rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:40:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:40:51.499Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968681rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:40:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:40:51.499Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968680rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:40:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:40:51.499Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968679rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:40:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:39:00.066Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 20.2163844036028797018963968678rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:39:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:38:59.925Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-65306e30-518e-4a44-99d2-d9613008ad702163844036028797018963968677rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:38:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:38:59.925Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 43362163844036028797018963968676rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:38:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:38:59.475Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-65306e30-518e-4a44-99d2-d9613008ad70. Error: -22163844036028797018963968675rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:38:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:36:57.229Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968674rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:36:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:36:57.229Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968673rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:36:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:36:57.229Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968672rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:36:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:36:57.229Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968671rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:36:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:36:57.229Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968670rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:36:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:36:57.229Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968669rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:36:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:34:43.165Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 19.2163844036028797018963968668rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:34:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:34:43.009Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-35b4d884-2f36-4b2a-b436-df821ca024192163844036028797018963968667rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:34:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:34:43.009Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 12002163844036028797018963968666rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:34:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:34:42.531Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-35b4d884-2f36-4b2a-b436-df821ca02419. Error: -22163844036028797018963968665rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:34:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:56.088Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968664rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:56.088Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968663rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:56.088Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968662rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:56.088Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968661rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:56.088Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968660rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:56.088Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968659rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:52.426Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968658rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:52.426Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968657rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:52.411Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968656rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:52.411Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968655rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:52.411Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968654rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:52.411Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968653rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:48.010Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 18.2163844036028797018963968652rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:47.882Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-bd7b78ab-69e1-441b-b25b-3308b8b4050f2163844036028797018963968651rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:47.882Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 41362163844036028797018963968650rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:33:47.409Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-bd7b78ab-69e1-441b-b25b-3308b8b4050f. Error: -22163844036028797018963968649rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:33:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:32:52.824Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 17.2163844036028797018963968648rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:32:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:32:52.635Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-67154ed5-2fda-4ed4-9784-d919a9ecdfd32163844036028797018963968647rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:32:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:32:52.635Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 47002163844036028797018963968646rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:32:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:32:52.218Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-67154ed5-2fda-4ed4-9784-d919a9ecdfd3. Error: -22163844036028797018963968645rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:32:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:12.937Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968644rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:12.937Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968643rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:12.927Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968642rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:12.927Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968641rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:12.927Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968640rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:12.927Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968639rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:08.282Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968638rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:08.282Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968637rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:08.282Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968636rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:08.282Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968635rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:08.282Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968634rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:08.282Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968633rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:08 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:06.273Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968632rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:06 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:05.693Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 16.2163844036028797018963968631rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:05.584Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d763bbc7-78ba-482f-883e-5cbff59530692163844036028797018963968630rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:05.584Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 35562163844036028797018963968629rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:21:05.161Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d763bbc7-78ba-482f-883e-5cbff5953069. Error: -22163844036028797018963968628rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:21:05 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:20:35.807Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968627rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:20:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:20:04.555Coordinated Universal Time f -1 librbd::Operations: No such snapshot found.2163844036028797018963968626rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:20:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:19:28.881Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 15.2163844036028797018963968625rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:19:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:19:28.773Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-e6e294ba-6781-4b55-bc1c-d34d92ef1ea32163844036028797018963968624rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:19:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:19:28.773Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 43602163844036028797018963968623rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:19:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:19:28.290Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-e6e294ba-6781-4b55-bc1c-d34d92ef1ea3. Error: -22163844036028797018963968622rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:19:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:19:02.276Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968621rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:19:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:19:02.276Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968620rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:19:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:19:02.260Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968619rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:19:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:19:02.260Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968618rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:19:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:19:02.260Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968617rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:19:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:19:00.882Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968616rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:19:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:18:30.429Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968615rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:18:30 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968614Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:18:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-09T21:17:27Z. Reason: TBL.1638401638440036028797018963968613Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:18:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:59.579Coordinated Universal Time e -1 librbd::Operations: No such snapshot found.2163844036028797018963968612rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968611Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:17:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259130 minutes.103703276840036028797018963968610Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:17:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259130)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968609Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:17:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968608Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:17:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968607Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 9:17:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:20.721Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 14.2163844036028797018963968606rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:20.461Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-345abd03-d885-42f6-826d-f0d74c528f9c2163844036028797018963968605rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:20.461Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 45922163844036028797018963968604rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:20.012Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-345abd03-d885-42f6-826d-f0d74c528f9c. Error: -22163844036028797018963968603rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:09.324Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968602rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:09.324Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968601rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:09.324Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968600rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:09.324Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968599rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:09.324Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968598rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:17:09.324Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968597rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:17:09 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:15:48.237Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 13.2163844036028797018963968596rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:15:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:15:48.167Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-71c4c902-18fd-4291-83f7-50d37cc1baef2163844036028797018963968595rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:15:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:15:48.166Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 44562163844036028797018963968594rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:15:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:15:47.711Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-71c4c902-18fd-4291-83f7-50d37cc1baef. Error: -22163844036028797018963968593rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:15:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.812Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968592rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.812Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968591rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.812Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968590rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.812Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968589rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.812Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968588rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.812Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968587rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.381Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968586rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.381Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968585rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.381Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968584rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.381Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968583rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.381Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968582rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.381Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968581rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.109Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968580rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.109Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968579rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.109Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968578rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.109Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968577rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.109Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968576rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:10:39.109Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968575rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:10:39 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:08:25.013Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968574rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:08:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:08:25.013Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968573rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:08:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:08:25.013Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968572rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:08:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:08:25.013Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968571rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:08:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:08:25.013Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968570rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:08:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:08:25.013Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968569rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:08:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:08:21.145Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 12.2163844036028797018963968568rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:08:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:08:21.018Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d22df1a4-c142-4980-a855-4b5f1733fd4d2163844036028797018963968567rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:08:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:08:21.018Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 41002163844036028797018963968566rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:08:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:08:20.611Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d22df1a4-c142-4980-a855-4b5f1733fd4d. Error: -22163844036028797018963968565rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:08:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:07:35.849Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968564rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:07:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:07:35.849Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968563rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:07:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:07:35.849Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968562rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:07:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:07:35.849Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968561rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:07:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:07:35.849Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968560rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:07:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:07:35.849Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968559rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:07:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:43.832Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 11.2163844036028797018963968558rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:43.643Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-1082d721-8d03-4d1a-a930-7e3c44810f2d2163844036028797018963968557rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:43.643Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 42722163844036028797018963968556rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:43.226Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-1082d721-8d03-4d1a-a930-7e3c44810f2d. Error: -22163844036028797018963968555rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:43 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:42.615Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 10.2163844036028797018963968554rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:42.499Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-a86c82f7-9354-427c-b8fd-facabded1ea92163844036028797018963968553rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:42.499Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 43442163844036028797018963968552rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:42.029Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-a86c82f7-9354-427c-b8fd-facabded1ea9. Error: -22163844036028797018963968551rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:42 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:41.396Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 9.2163844036028797018963968550rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:41.268Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d9c63c96-d67e-46bf-97d4-00d738c11e052163844036028797018963968549rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:41.268Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 29522163844036028797018963968548rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:41 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:40.890Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d9c63c96-d67e-46bf-97d4-00d738c11e05. Error: -22163844036028797018963968547rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:40.715Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 8.2163844036028797018963968546rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:40.597Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-2b9d2f56-8742-40d7-8421-fb2664f4d10e2163844036028797018963968545rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:40.597Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 47962163844036028797018963968544rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:06:40.175Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-2b9d2f56-8742-40d7-8421-fb2664f4d10e. Error: -22163844036028797018963968543rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:06:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:03:35.053Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968542rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:03:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:03:35.053Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968541rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:03:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:03:35.053Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968540rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:03:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:03:35.053Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968539rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:03:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:03:35.053Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968538rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:03:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:03:35.053Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968537rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:03:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:02:17.148Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 7.2163844036028797018963968536rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:02:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:02:17.054Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-3d9000e4-0140-4d89-9d9e-4730705b15bf2163844036028797018963968535rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:02:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:02:17.054Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 50642163844036028797018963968534rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:02:17 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:02:16.632Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-3d9000e4-0140-4d89-9d9e-4730705b15bf. Error: -22163844036028797018963968533rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:02:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:00:19.230Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968532rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:00:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:00:19.230Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968531rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:00:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:00:19.230Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968530rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:00:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:00:19.230Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968529rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:00:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:00:19.230Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968528rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:00:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T21:00:19.230Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968527rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 9:00:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:58:52.075Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 6.2163844036028797018963968526rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:58:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:58:51.918Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-f364ca50-5843-462f-9ca6-f2739fdb87ea2163844036028797018963968525rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:58:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:58:51.918Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 43002163844036028797018963968524rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:58:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:58:51.519Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-f364ca50-5843-462f-9ca6-f2739fdb87ea. Error: -22163844036028797018963968523rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:58:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:58:10.324Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968522rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:58:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:58:10.324Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968521rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:58:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:58:10.324Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968520rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:58:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:58:10.324Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968519rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:58:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:58:10.324Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968518rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:58:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:58:10.324Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968517rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:58:10 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:55.764Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 5.2163844036028797018963968516rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:55.608Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-d78a1072-8e08-4aab-83e0-93be77a2a9bb2163844036028797018963968515rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:55.608Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 41842163844036028797018963968514rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:55.199Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-d78a1072-8e08-4aab-83e0-93be77a2a9bb. Error: -22163844036028797018963968513rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:45.151Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968512rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:45.151Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968511rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:45.127Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968510rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:45.127Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968509rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:45.127Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968508rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:45.127Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968507rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:13.313Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 4.2163844036028797018963968506rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:13.123Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-a8994233-8420-4f40-b8b2-5054eebfce142163844036028797018963968505rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:13.123Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 49042163844036028797018963968504rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:13 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:57:12.701Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-a8994233-8420-4f40-b8b2-5054eebfce14. Error: -22163844036028797018963968503rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:57:12 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:58.111Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968502rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:58.111Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968501rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:58.111Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968500rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:58.111Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968499rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:58.111Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968498rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:58.111Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968497rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:54.001Coordinated Universal Time 1 0 libwnbd.dll!WnbdWaitDispatcher INFO The dispatcher isn't running.2163844036028797018963968496rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:54.001Coordinated Universal Time 1 0 libwnbd.dll!WnbdIoctlShow INFO Could not find the specified disk.2163844036028797018963968495rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:54.001Coordinated Universal Time 1f 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968494rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:54.001Coordinated Universal Time 1e 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968493rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:54.001Coordinated Universal Time 1d 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968492rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:54.001Coordinated Universal Time 1c 0 libwnbd.dll!WnbdHandleRequest INFO Received disconnect request.2163844036028797018963968491rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:54 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:35.422Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 3.2163844036028797018963968490rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:35.342Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-b0c11645-2e47-4de8-8a67-b49a20d9fe3e2163844036028797018963968489rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:35.342Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 42962163844036028797018963968488rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:35 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:34.935Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-b0c11645-2e47-4de8-8a67-b49a20d9fe3e. Error: -22163844036028797018963968487rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:28.339Coordinated Universal Time 1 0 libwnbd.dll!WnbdCreate INFO Mapped device. Connection id: 2.2163844036028797018963968486rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:28.246Coordinated Universal Time 1 0 rbd-wnbd: Mapping RBD image: volumes/volume-7646db34-383d-4fbe-a722-be3019ae4a2f2163844036028797018963968485rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:28.230Coordinated Universal Time 1 0 ceph version 15.0.0-20191-g654a88ba0b (654a88ba0b699ab0f12fa98de3845c4501e3985b) pacific (dev), process rbd-wnbd, pid 47402163844036028797018963968484rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
2022-10-08T20:56:27.764Coordinated Universal Time 1 -1 rbd-wnbd: Could not load registry disk info for: volumes/volume-7646db34-383d-4fbe-a722-be3019ae4a2f. Error: -22163844036028797018963968483rbd-wnbdApplicationnch1-master-1.nc-master-1.local10/8/2022 8:56:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808482Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application40602300nch1-master-1.nc-master-1.localS-1-5-1810/8/2022 8:55:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968481Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:50:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-09T20:49:28Z. Reason: TBL.1638401638440036028797018963968480Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:50:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968479Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:49:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259158 minutes.103703276840036028797018963968478Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:49:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259158)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968477Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:49:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968476Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:49:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:<none>90001638440036028797018963968475Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:49:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1 420201638442036028797018963968474Microsoft-Windows-MSDTC 25d9e0020-3761-4f36-90c8-38ce6511bd12Application00nch1-master-1.nc-master-1.local10/8/2022 8:49:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationTMSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968473neutron-hyperv-agentApplicationnch1-master-1.nc-master-1.local10/8/2022 8:49:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968472nova-computeApplicationnch1-master-1.nc-master-1.local10/8/2022 8:48:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NC-MASTER-1\administrator' . 501638440036028797018963968471Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch1-master-1.nc-master-1.local10/8/2022 8:48:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968470Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:48:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-09T20:47:37Z. Reason: TBL.1638401638440036028797018963968469Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:48:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968468cloudbase-initApplicationnch1-master-1.nc-master-1.local10/8/2022 8:48:16 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Security policy in the Group policy objects has been applied successfully.1704163844036028797018963968467SceCliApplicationnch1-master-1.nc-master-1.local10/8/2022 8:47:59 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808466Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication14522132nch1-master-1.nc-master-1.localS-1-5-1810/8/2022 8:47:58 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968465cloudbase-initApplicationnch1-master-1.nc-master-1.local10/8/2022 8:47:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968464Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:47:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259160 minutes.103703276840036028797018963968463Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:47:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259160)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968462Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:47:57 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968461Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:47:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968460Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-1.nc-master-1.local10/8/2022 8:47:56 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808459Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication14521576nch1-master-1.nc-master-1.localS-1-5-1810/8/2022 8:47:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808458Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application14521480nch1-master-1.nc-master-1.localS-1-5-1810/8/2022 8:47:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808457Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5481700nch1-master-1S-1-5-1810/8/2022 8:47:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.411101638441036028797018963968456Microsoft-Windows-MSDTC719be4ed-e9bc-4dd8-a7cf-c85ce8e4975dApplication00nch1-master-110/8/2022 8:47:34 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSVCSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968455Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:34:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-09T20:33:51Z. Reason: TBL.1638401638440036028797018963968454Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:34:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968453Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:34:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259174 minutes.103703276840036028797018963968452Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:34:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968451Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:34:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968450Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:34:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe90001638440036028797018963968449Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:34:21 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808448Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application49641664nch1-master-1S-1-5-1810/8/2022 8:31:53 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 5044.104204036028797018963968447MsiInstallerApplicationnch1-master-1S-1-5-1810/8/2022 8:23:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?10?-?08T20:23:32.588054600Z.100010400-9223372036854775808446Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application47644296nch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:23:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.103304036028797018963968445MsiInstallerApplicationnch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:23:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Ceph for Windows -- Installation completed successfully.1170704036028797018963968444MsiInstallerApplicationnch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:23:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?10?-?08T20:23:32.588054600Z.100000400-9223372036854775808443Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application47641744nch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:23:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: c:\openstack\tmp\ceph-wnbd.msi. Client Process Id: 5044.104004036028797018963968442MsiInstallerApplicationnch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:23:32 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Ceph for Windows. Product Version: 1.0.0.0. Product Language: 1033. Manufacturer: Ceph. Installation success or error status: 0.103304036028797018963968441MsiInstallerApplicationnch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:23:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root list with effective date: ?Tuesday, ?September ?13, ?2022 7:55:56 PM.411100400-9187343239835811840440Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13203968nch1-master-110/8/2022 8:23:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>.410900400-9187343239835811840439Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13203968nch1-master-110/8/2022 8:23:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>.410900400-9187343239835811840438Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13203968nch1-master-110/8/2022 8:23:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>.410900400-9187343239835811840437Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13203968nch1-master-110/8/2022 8:23:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.410900400-9187343239835811840436Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13203968nch1-master-110/8/2022 8:23:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>.410900400-9187343239835811840435Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13203968nch1-master-110/8/2022 8:23:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.410900400-9187343239835811840434Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13203968nch1-master-110/8/2022 8:23:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.410900400-9187343239835811840433Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13203968nch1-master-110/8/2022 8:23:31 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?10?-?08T20:14:38.058071700Z.100010400-9223372036854775808432Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application19843388nch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:14:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 1148.104204036028797018963968431MsiInstallerApplicationnch1-master-1S-1-5-1810/8/2022 8:14:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.103304036028797018963968430MsiInstallerApplicationnch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:14:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully.1170704036028797018963968429MsiInstallerApplicationnch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:14:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?10?-?08T20:14:38.058071700Z.100000400-9223372036854775808428Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application19842484nch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:14:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2022?-?10?-?08T20:14:37.432964300Z.100010400-9223372036854775808427Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application19843388nch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:14:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2022?-?10?-?08T20:14:37.432964300Z.100000400-9223372036854775808426Microsoft-Windows-RestartManager0888e5ef-9b98-4695-979d-e92ce4247224Application19843980nch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:14:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 1148.104004036028797018963968425MsiInstallerApplicationnch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:14:38 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 1148.104204036028797018963968424MsiInstallerApplicationnch1-master-1S-1-5-1810/8/2022 8:14:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.103304036028797018963968423MsiInstallerApplicationnch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:14:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully.1170704036028797018963968422MsiInstallerApplicationnch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:14:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 1148.104004036028797018963968421MsiInstallerApplicationnch1-master-1S-1-5-21-3219154103-572256652-3484982839-100110/8/2022 8:14:37 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0.103504036028797018963968420MsiInstallerApplicationnch1-master-1S-1-5-1810/8/2022 8:14:28 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.409700400-9187343239835811840419Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13203552nch1-master-110/8/2022 8:13:03 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.10000400-9223372036854775808418Microsoft-Windows-LoadPerf122ee297-bb47-41ae-b265-1ca8d1886d40Application23043056nch1-master-1S-1-5-1810/8/2022 8:08:27 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968417Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:08:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2022-10-09T20:07:22Z. Reason: TBL.1638401638440036028797018963968416Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:08:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent819704915240036028797018963968415Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2023/04/06:20:07:52;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968414Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent819704915240036028797018963968413Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259200 minutes.103703276840036028797018963968412Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968411Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )] 100301638440036028797018963968410Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
These policies are being excluded since they are only defined with override-only attribute. Policy Names=(Security-SPP-Reserved-EnableNotificationMode) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4103301638440036028797018963968409Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100103401638440036028797018963968408Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Validity period has been started. Validity minutes=259200 Grace type=9.103601638440036028797018963968407Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:52 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSA client has been successfully triggered to update the Device License1231101638440036028797018963968406Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f}1230401638440036028797018963968405Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f1230501638440036028797018963968404Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:50 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection ended. 2048904915240036028797018963968403Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968402Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check passed. 2048204915240036028797018963968401Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check initiated. 2048104915240036028797018963968400Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:48 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection started. 2048804915240036028797018963968399Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS. 106703276840036028797018963968398Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE} License Id=8f670fb0-054f-4b80-8e6c-83afda6b0b11100401638440036028797018963968397Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC} License Id=f069f895-0d39-4e33-be11-d7c2a36d23f3100401638440036028797018963968396Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:46 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Acquisition of End User License was successful. Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4101301638400036028797018963968395Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:45 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2022/10/18:20:03:40;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL823001638440036028797018963968394Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:07:40 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1 420201638442036028797018963968393Microsoft-Windows-MSDTC 25d9e0020-3761-4f36-90c8-38ce6511bd12Application00nch1-master-110/8/2022 8:06:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationTMSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968392cloudbase-initApplicationnch1-master-110/8/2022 8:05:14 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968391Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:05:02 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied. . 15340300-9223372036854775808390Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5482612nch1-master-1S-1-5-21-3219154103-572256652-3484982839-100010/8/2022 8:05:01 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service failed to create default configuration for new user 'NCH1-MASTER-1\Admin' in response to user profile creation. Error code 0x80070005. Access is denied. .604915220036028797018963968389Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch1-master-110/8/2022 8:05:01 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
004036028797018963968388cloudbase-initApplicationnch1-master-110/8/2022 8:04:25 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkSystem.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'NCH1-MASTER-1\cloudbase-init' . 501638440036028797018963968387Microsoft-Windows-Search-ProfileNotifyfc6f77dd-769a-470e-bcf9-1b6555a118beApplication00nch1-master-110/8/2022 8:04:23 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.409700400-9187343239835811840386Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication13201680nch1-master-110/8/2022 8:04:22 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808385Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication548668nch1-master-1S-1-5-1810/8/2022 8:04:20 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808384Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5481092nch1-master-1S-1-5-1810/8/2022 8:04:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808383Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5481700nch1-master-1S-1-5-1810/8/2022 8:04:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14399)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968382Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:04:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968381Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:04:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.462501638440036028797018963968380Microsoft-Windows-EventSystem899daace-4868-4295-afcd-9eb8fb497561Application00nch1-master-110/8/2022 8:04:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Proof of Purchase installed successfully. ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845101601638440036028797018963968379Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00nch1-master-110/8/2022 8:04:19 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808378Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5161480WIN-5T344G8GM1HS-1-5-1810/8/2022 8:03:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped. 90301638400036028797018963968377Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H10/8/2022 8:03:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager. 822504036028797018963968376VSSApplicationWIN-5T344G8GM1H10/8/2022 8:03:47 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.409700400-9187343239835811840375Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication17001784WIN-5T344G8GM1H10/8/2022 8:03:04 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} Writer Name: Microsoft Hyper-V VSS Writer821204036028797018963968374VSSApplicationWIN-5T344G8GM1H10/8/2022 8:03:00 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?March ?16, ?2021 7:29:24 AM.411200400-9187343239835811840373Microsoft-Windows-CAPI25bbca4a8-b209-48dc-a8c7-b23d3e5216fbApplication17001784WIN-5T344G8GM1H10/8/2022 8:02:55 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully56172400-9223372036854775808372Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication516520WIN-5T344G8GM1HS-1-5-1810/8/2022 8:02:51 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully56152400-9223372036854775808371Microsoft-Windows-WMI1edeee53-0afe-4609-b846-d8c0b2075b1fApplication5161600WIN-5T344G8GM1HS-1-5-1810/8/2022 8:02:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully. 15310400-9223372036854775808370Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application5161480WIN-5T344G8GM1HS-1-5-1810/8/2022 8:02:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer821204036028797018963968369VSSApplicationWIN-5T344G8GM1H10/8/2022 8:02:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4} Writer Name: ASR Writer821204036028797018963968368VSSApplicationWIN-5T344G8GM1H10/8/2022 8:02:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f} Writer Name: COM+ REGDB Writer821204036028797018963968367VSSApplicationWIN-5T344G8GM1H10/8/2022 8:02:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485} Writer Name: Registry Writer821204036028797018963968366VSSApplicationWIN-5T344G8GM1H10/8/2022 8:02:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.462501638440036028797018963968365Microsoft-Windows-EventSystem899daace-4868-4295-afcd-9eb8fb497561Application00WIN-7RLTF7678NJ10/8/2022 8:02:49 PMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped. 15320400-9223372036854775808364Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application9761228WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:13 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required. DETAIL - 9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500: Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security 15300400-9223372036854775808363Microsoft-Windows-User Profiles Service89b1e9f0-5aff-44a6-9b44-0a07a7ce5845Application9763432WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The winlogon notification subscriber <SessionEnv> failed a notification event.600103276830036028797018963968362Microsoft-Windows-Winlogondbe9b383-7cf3-4331-91cc-a3cb16a3b538Application00WIN-5T344G8GM1H1/19/2018 9:48:12 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent819704915240036028797018963968361Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448823001638440036028797018963968360Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 100301638440036028797018963968359Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining.1230601638440036028797018963968358Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.35190201638400036028797018963968357Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])] 100301638440036028797018963968356Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Grace period has been started. Grace days=10 Grace type=6.102501638440036028797018963968355Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500103401638440036028797018963968354Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The hardware has changed.102403276840036028797018963968353Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:10 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hardware has changed from previous boot. AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4.104001638440036028797018963968352Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 106601638440036028797018963968351Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=Sysprep.exe90001638440036028797018963968350Microsoft-Windows-Security-SPPe23b33b0-c8c9-472c-a5f9-f2bdfea0f156Application00WIN-5T344G8GM1H1/19/2018 9:48:09 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.411101638441036028797018963968349Microsoft-Windows-MSDTC719be4ed-e9bc-4dd8-a7cf-c85ce8e4975dApplication00WIN-5T344G8GM1H1/19/2018 9:47:34 AMapplicationSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSVCSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]