Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
'instance-00000004' started successfully. (Virtual machine ID 0CD7CED9-F22C-4B99-8BE8-958DE4842CEB)	18500	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4764	1996	hv-neutron-8273	S-1-5-83-1-215469785-1268380204-2375411851-3945563364	2/2/2022 3:48:40 PM	eab7d8ca-1841-0004-d4b8-b8ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' 5b434d49-604c-48a9-87ab-2806887e72fe (CA8A21E0-784B-4AFC-A4D0-B1A95D483E92) started successfully. (Virtual Machine ID 0CD7CED9-F22C-4B99-8BE8-958DE4842CEB)	12582	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4764	1996	hv-neutron-8273	S-1-5-83-1-215469785-1268380204-2375411851-3945563364	2/2/2022 3:48:40 PM	eab7d8ca-1841-0004-d4b8-b8ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' 5b434d49-604c-48a9-87ab-2806887e72fe (0cd7ced9-f22c-4b99-8be8-958de4842ceb--ca8a21e0-784b-4afc-a4d0-b1a95d483e92) Connected to virtual network. (Virtual Machine ID 0CD7CED9-F22C-4B99-8BE8-958DE4842CEB)	12597	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4764	1996	hv-neutron-8273	S-1-5-83-1-215469785-1268380204-2375411851-3945563364	2/2/2022 3:48:40 PM	eab7d8ca-1841-0004-d4b8-b8ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000003' was turned off. (Virtual machine ID 2F6D0E0D-0038-4A81-99F7-D3F9B1BECE5D)	18502	0		4	0	0	-9223372036854775808	20	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4364	3404	hv-neutron-8273	S-1-5-83-1-795676173-1249968184-4191418265-1573830321	2/2/2022 3:48:38 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000003' c085874c-a701-4968-a804-d30362d0e8c5 (2f6d0e0d-0038-4a81-99f7-d3f9b1bece5d--19c54f43-635a-477e-8b24-f02aaeb2e6a5) Disconnected from virtual network. (Virtual Machine ID 2F6D0E0D-0038-4A81-99F7-D3F9B1BECE5D)	12598	0		4	0	0	-9223372036854775808	19	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4364	3404	hv-neutron-8273	S-1-5-83-1-795676173-1249968184-4191418265-1573830321	2/2/2022 3:48:38 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' was turned off. (Virtual machine ID 317A4855-6D46-49FB-AE8A-E1230BE22FE9)	18502	0		4	0	0	-9223372036854775808	18	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4028	4052	hv-neutron-8273	S-1-5-83-1-830097493-1241214278-601983662-3912229387	2/2/2022 3:48:37 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' 1a7250c7-3382-4c79-aeae-5cf96b0bfdbe (317a4855-6d46-49fb-ae8a-e1230be22fe9--bd4ea6ff-6908-48b3-a0c1-0ed074a6d826) Disconnected from virtual network. (Virtual Machine ID 317A4855-6D46-49FB-AE8A-E1230BE22FE9)	12598	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4028	4052	hv-neutron-8273	S-1-5-83-1-830097493-1241214278-601983662-3912229387	2/2/2022 3:48:37 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' was resumed. (Virtual machine ID 1FE9D664-0A12-4A9C-B7AC-DBA2611812C8)	18518	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4728	732	hv-neutron-8273	S-1-5-83-1-535418468-1251740178-2732305591-3356629089	2/2/2022 3:47:34 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' was paused. (Virtual machine ID 1FE9D664-0A12-4A9C-B7AC-DBA2611812C8)	18516	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4728	596	hv-neutron-8273	S-1-5-83-1-535418468-1251740178-2732305591-3356629089	2/2/2022 3:47:31 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' started successfully. (Virtual machine ID 1FE9D664-0A12-4A9C-B7AC-DBA2611812C8)	18500	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4728	4464	hv-neutron-8273	S-1-5-83-1-535418468-1251740178-2732305591-3356629089	2/2/2022 3:47:28 PM	eab7d8ca-1841-0004-e114-b8ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' b137118f-9e00-4187-b535-d65f26a26460 (5AEF4F2F-38EF-4106-BEA0-A4FEBC31D7BC) started successfully. (Virtual Machine ID 1FE9D664-0A12-4A9C-B7AC-DBA2611812C8)	12582	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4728	4464	hv-neutron-8273	S-1-5-83-1-535418468-1251740178-2732305591-3356629089	2/2/2022 3:47:28 PM	eab7d8ca-1841-0004-e114-b8ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' b137118f-9e00-4187-b535-d65f26a26460 (1fe9d664-0a12-4a9c-b7ac-dba2611812c8--5aef4f2f-38ef-4106-bea0-a4febc31d7bc) Connected to virtual network. (Virtual Machine ID 1FE9D664-0A12-4A9C-B7AC-DBA2611812C8)	12597	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4728	4464	hv-neutron-8273	S-1-5-83-1-535418468-1251740178-2732305591-3356629089	2/2/2022 3:47:28 PM	eab7d8ca-1841-0004-e114-b8ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' was shut down using the Shutdown Integration Component with parameters: Force = false, Reason = 'Soft shutdown requested by OpenStack Nova.' (Virtual machine ID 1FE9D664-0A12-4A9C-B7AC-DBA2611812C8)	18504	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4444	1908	hv-neutron-8273	S-1-5-83-1-535418468-1251740178-2732305591-3356629089	2/2/2022 3:47:24 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' b137118f-9e00-4187-b535-d65f26a26460 (1fe9d664-0a12-4a9c-b7ac-dba2611812c8--5aef4f2f-38ef-4106-bea0-a4febc31d7bc) Disconnected from virtual network. (Virtual Machine ID 1FE9D664-0A12-4A9C-B7AC-DBA2611812C8)	12598	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4444	1908	hv-neutron-8273	S-1-5-83-1-535418468-1251740178-2732305591-3356629089	2/2/2022 3:47:24 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000003' started successfully. (Virtual machine ID 2F6D0E0D-0038-4A81-99F7-D3F9B1BECE5D)	18500	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4364	1328	hv-neutron-8273	S-1-5-83-1-795676173-1249968184-4191418265-1573830321	2/2/2022 3:46:56 PM	eab7d8ca-1841-0003-1ee7-b7ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000003' c085874c-a701-4968-a804-d30362d0e8c5 (19C54F43-635A-477E-8B24-F02AAEB2E6A5) started successfully. (Virtual Machine ID 2F6D0E0D-0038-4A81-99F7-D3F9B1BECE5D)	12582	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4364	1328	hv-neutron-8273	S-1-5-83-1-795676173-1249968184-4191418265-1573830321	2/2/2022 3:46:56 PM	eab7d8ca-1841-0003-1ee7-b7ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000003' c085874c-a701-4968-a804-d30362d0e8c5 (2f6d0e0d-0038-4a81-99f7-d3f9b1bece5d--19c54f43-635a-477e-8b24-f02aaeb2e6a5) Connected to virtual network. (Virtual Machine ID 2F6D0E0D-0038-4A81-99F7-D3F9B1BECE5D)	12597	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4364	1328	hv-neutron-8273	S-1-5-83-1-795676173-1249968184-4191418265-1573830321	2/2/2022 3:46:56 PM	eab7d8ca-1841-0003-1ee7-b7ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' started successfully. (Virtual machine ID 317A4855-6D46-49FB-AE8A-E1230BE22FE9)	18500	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4028	5072	hv-neutron-8273	S-1-5-83-1-830097493-1241214278-601983662-3912229387	2/2/2022 3:46:56 PM	eab7d8ca-1841-0004-8501-b8ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' 1a7250c7-3382-4c79-aeae-5cf96b0bfdbe (BD4EA6FF-6908-48B3-A0C1-0ED074A6D826) started successfully. (Virtual Machine ID 317A4855-6D46-49FB-AE8A-E1230BE22FE9)	12582	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4028	5072	hv-neutron-8273	S-1-5-83-1-830097493-1241214278-601983662-3912229387	2/2/2022 3:46:56 PM	eab7d8ca-1841-0004-8501-b8ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' 1a7250c7-3382-4c79-aeae-5cf96b0bfdbe (317a4855-6d46-49fb-ae8a-e1230be22fe9--bd4ea6ff-6908-48b3-a0c1-0ed074a6d826) Connected to virtual network. (Virtual Machine ID 317A4855-6D46-49FB-AE8A-E1230BE22FE9)	12597	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4028	5072	hv-neutron-8273	S-1-5-83-1-830097493-1241214278-601983662-3912229387	2/2/2022 3:46:56 PM	eab7d8ca-1841-0004-8501-b8ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' started successfully. (Virtual machine ID 1FE9D664-0A12-4A9C-B7AC-DBA2611812C8)	18500	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4444	2464	hv-neutron-8273	S-1-5-83-1-535418468-1251740178-2732305591-3356629089	2/2/2022 3:46:54 PM	eab7d8ca-1841-0002-aee5-b7ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' b137118f-9e00-4187-b535-d65f26a26460 (5AEF4F2F-38EF-4106-BEA0-A4FEBC31D7BC) started successfully. (Virtual Machine ID 1FE9D664-0A12-4A9C-B7AC-DBA2611812C8)	12582	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4444	2464	hv-neutron-8273	S-1-5-83-1-535418468-1251740178-2732305591-3356629089	2/2/2022 3:46:54 PM	eab7d8ca-1841-0002-aee5-b7ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000002' b137118f-9e00-4187-b535-d65f26a26460 (1fe9d664-0a12-4a9c-b7ac-dba2611812c8--5aef4f2f-38ef-4106-bea0-a4febc31d7bc) Connected to virtual network. (Virtual Machine ID 1FE9D664-0A12-4A9C-B7AC-DBA2611812C8)	12597	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4444	2464	hv-neutron-8273	S-1-5-83-1-535418468-1251740178-2732305591-3356629089	2/2/2022 3:46:54 PM	eab7d8ca-1841-0002-aee5-b7ea4118d801		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]