Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
'instance-00000001' was turned off. (Virtual machine ID 9497179F-5D6C-4225-A59A-118982488259) | 18502 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 5 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 2124 | 1292 | hv-neutron-8194 | S-1-5-83-1-2492929951-1109745004-2299632293-1501710466 | 5/7/2022 6:23:32 AM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 95b7cfa0-7733-4248-b3c5-05e96ab26fb9 (9497179f-5d6c-4225-a59a-118982488259--ff264681-124d-4d6c-abf2-14f25fba05f7) Disconnected from virtual network. (Virtual Machine ID 9497179F-5D6C-4225-A59A-118982488259) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 4 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 2124 | 1292 | hv-neutron-8194 | S-1-5-83-1-2492929951-1109745004-2299632293-1501710466 | 5/7/2022 6:23:32 AM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' started successfully. (Virtual machine ID 9497179F-5D6C-4225-A59A-118982488259) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 3 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 2124 | 2508 | hv-neutron-8194 | S-1-5-83-1-2492929951-1109745004-2299632293-1501710466 | 5/7/2022 6:23:29 AM | 2f8f91a2-61d2-0005-629e-8f2fd261d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 95b7cfa0-7733-4248-b3c5-05e96ab26fb9 (FF264681-124D-4D6C-ABF2-14F25FBA05F7) started successfully. (Virtual Machine ID 9497179F-5D6C-4225-A59A-118982488259) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 2 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 2124 | 2508 | hv-neutron-8194 | S-1-5-83-1-2492929951-1109745004-2299632293-1501710466 | 5/7/2022 6:23:29 AM | 2f8f91a2-61d2-0005-629e-8f2fd261d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 95b7cfa0-7733-4248-b3c5-05e96ab26fb9 (9497179f-5d6c-4225-a59a-118982488259--ff264681-124d-4d6c-abf2-14f25fba05f7) Connected to virtual network. (Virtual Machine ID 9497179F-5D6C-4225-A59A-118982488259) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 1 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 2124 | 2508 | hv-neutron-8194 | S-1-5-83-1-2492929951-1109745004-2299632293-1501710466 | 5/7/2022 6:23:29 AM | 2f8f91a2-61d2-0005-629e-8f2fd261d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |