Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The Fault Tolerant Heap service started.	1001	0		4	1	11	4611686018695823360	3	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	936	1176	n-h1-768852-17.cbci-768852-17.local	S-1-5-19	6/10/2021 10:00:55 AM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Fault Tolerant Heap service stopped.	1002	0		4	1	12	4611686018695823360	2	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1420	4292	n-h1-768852-17	S-1-5-19	6/10/2021 9:58:31 AM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Fault Tolerant Heap service started.	1001	0		4	1	11	4611686018695823360	1	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1420	1532	n-h1-768852-17	S-1-5-19	6/10/2021 9:14:02 AM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]