Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Witness Client initialization failed with error (The system cannot find the file specified.)	1	0		2	0	0	-9223372036854775808	1	Microsoft-Windows-SMBWitnessClient	32254f6c-aa33-46f0-a5e3-1cbcc74bf683	Microsoft-Windows-SMBWitnessClient/Admin	1644	1820	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 5:01:15 PM			microsoft-windows-smbwitnessclient/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]