MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758088Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11401704n-h1-771749-1.cbci-771749-1.localS-1-5-201/22/2021 8:13:37 PMf88e39de-f0fa-0002-f039-8ef8faf0d601microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758087Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11401344n-h1-771749-1.cbci-771749-1.localS-1-5-201/22/2021 8:13:26 PMf88e39de-f0fa-0002-f039-8ef8faf0d601microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758086Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11401968n-h1-771749-1.cbci-771749-1.localS-1-5-201/22/2021 8:13:09 PMf88e39de-f0fa-0002-f039-8ef8faf0d601microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758085Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11401344n-h1-771749-1.cbci-771749-1.localS-1-5-201/22/2021 8:13:07 PMf88e39de-f0fa-0002-f039-8ef8faf0d601microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758084Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13361368n-h1-771749-1S-1-5-201/22/2021 7:19:43 PM7528ee8b-f0f3-0004-b4ee-2875f3f0d601microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758083Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13921532WIN-5T344G8GM1HS-1-5-201/19/2018 9:41:32 AMad8d0f9c-9109-0001-d70f-8dad0991d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758082Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational15241660WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:17 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758081Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational15241660WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:17 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]