Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The Windows Resource Exhaustion Resolver stopped.	1002	0		4	1	12	-9223372036854771712	4	Microsoft-Windows-Resource-Exhaustion-Resolver	91f5fb12-fdea-4095-85d5-614b495cd9de	Microsoft-Windows-Resource-Exhaustion-Resolver/Operational	3872	5712	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:35:49 PM			microsoft-windows-resource-exhaustion-resolver/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion resolver is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Resolver received a notification to perform memory leak diagnosis. This notification was processed and dropped.	1014	0		4	5	41	-9223372036854759424	3	Microsoft-Windows-Resource-Exhaustion-Resolver	91f5fb12-fdea-4095-85d5-614b495cd9de	Microsoft-Windows-Resource-Exhaustion-Resolver/Operational	3872	2956	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:29:03 PM	35776b6d-ca2b-431e-84ad-bff9f5ae424f		microsoft-windows-resource-exhaustion-resolver/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged after an attempt to launch the leak diagnoser is made.	Leak Diagnosis Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Resolver received an event from the Windows Resource Exhaustion Detector.	1015	0		4	3	21	-9223372036854767616	2	Microsoft-Windows-Resource-Exhaustion-Resolver	91f5fb12-fdea-4095-85d5-614b495cd9de	Microsoft-Windows-Resource-Exhaustion-Resolver/Operational	3872	2956	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:29:01 PM	35776b6d-ca2b-431e-84ad-bff9f5ae424f		microsoft-windows-resource-exhaustion-resolver/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when diagnosis is started.	Resolution Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Resolver started.	1001	0		4	1	11	-9223372036854771712	1	Microsoft-Windows-Resource-Exhaustion-Resolver	91f5fb12-fdea-4095-85d5-614b495cd9de	Microsoft-Windows-Resource-Exhaustion-Resolver/Operational	3872	2956	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:29:01 PM			microsoft-windows-resource-exhaustion-resolver/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion resolver is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]