Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The Fault Tolerant Heap service started.	1001	0		4	1	11	4611686018695823360	3	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1004	1244	n-h1-789963-5.cbci-789963-5.local	S-1-5-19	5/6/2021 11:39:51 PM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Fault Tolerant Heap service stopped.	1002	0		4	1	12	4611686018695823360	2	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1448	3468	n-h1-789963-5	S-1-5-19	5/6/2021 11:37:28 PM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Fault Tolerant Heap service started.	1001	0		4	1	11	4611686018695823360	1	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1448	1840	n-h1-789963-5	S-1-5-19	5/6/2021 10:56:39 PM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]