Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	27	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1192	1644	n-h1-765311-12.cbci-765311-12.local	S-1-5-19	1/26/2021 9:04:13 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	26	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	540	2784	n-h1-765311-12	S-1-5-19	1/26/2021 8:51:46 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	25	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	540	2124	n-h1-765311-12	S-1-5-19	1/26/2021 8:21:58 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	24	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1232	2800	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 9:48:13 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	23	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1232	2772	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 9:43:30 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	22	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1224	2740	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 9:41:15 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	21	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1224	2740	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 9:29:16 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	20	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1252	1524	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 9:26:23 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	19	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1252	1260	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 9:25:01 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	18	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	88	4652	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:22:50 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	17	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1128	3656	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 9:22:50 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	16	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	88	1952	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:21:51 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	15	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1128	2024	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 8:56:49 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	14	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1124	1160	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 8:54:40 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	13	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1124	2324	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 8:52:03 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	12	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1168	4820	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 8:49:46 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	11	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1016	4480	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:49:46 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	10	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1016	1096	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:40:58 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	9	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1168	2268	WIN-5T344G8GM1H	S-1-5-19	1/19/2018 8:25:56 AM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	8	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1132	3256	WIN-5T344G8GM1H	S-1-5-19	1/16/2018 6:44:39 PM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	7	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1132	1948	WIN-5T344G8GM1H	S-1-5-19	1/16/2018 6:08:25 PM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	6	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1144	668	WIN-5T344G8GM1H	S-1-5-19	1/16/2018 6:06:09 PM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	5	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1144	2508	WIN-5T344G8GM1H	S-1-5-19	1/16/2018 5:44:11 PM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	4	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	964	1176	WIN-5T344G8GM1H	S-1-5-19	1/16/2018 5:41:55 PM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector stopped.	1002	0		4	1	12	4611686018695823360	3	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1468	1560	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:41:55 PM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	2	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	1468	1560	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:29:01 PM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Resource Exhaustion Detector started.	1001	0		4	1	11	4611686018695823360	1	Microsoft-Windows-Resource-Exhaustion-Detector	9988748e-c2e8-4054-85f6-0c3e1cad2470	Microsoft-Windows-Resource-Exhaustion-Detector/Operational	964	5244	WIN-5T344G8GM1H	S-1-5-19	1/16/2018 5:03:59 PM			microsoft-windows-resource-exhaustion-detector/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the resource exhaustion detector is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]