Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The Fault Tolerant Heap service started.	1001	0		4	1	11	4611686018695823360	3	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1040	1864	n-h1-766380-17.cbci-766380-17.local	S-1-5-19	5/21/2021 12:26:24 PM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Fault Tolerant Heap service stopped.	1002	0		4	1	12	4611686018695823360	2	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1424	2540	n-h1-766380-17	S-1-5-19	5/21/2021 12:24:03 PM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Fault Tolerant Heap service started.	1001	0		4	1	11	4611686018695823360	1	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1424	1652	n-h1-766380-17	S-1-5-19	5/21/2021 11:32:21 AM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]