Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The Fault Tolerant Heap service started.	1001	0		4	1	11	4611686018695823360	3	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	104	1148	n-h2-766380-17.cbci-766380-17.local	S-1-5-19	5/21/2021 12:26:30 PM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Fault Tolerant Heap service stopped.	1002	0		4	1	12	4611686018695823360	2	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1420	2452	n-h2-766380-17	S-1-5-19	5/21/2021 12:24:03 PM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Fault Tolerant Heap service started.	1001	0		4	1	11	4611686018695823360	1	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1420	1868	n-h2-766380-17	S-1-5-19	5/21/2021 11:33:39 AM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]