Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The Fault Tolerant Heap service started.	1001	0		4	1	11	4611686018695823360	3	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	532	1960	n-h1-798054-11.cbci-798054-11.local	S-1-5-19	7/15/2021 1:05:20 PM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Fault Tolerant Heap service stopped.	1002	0		4	1	12	4611686018695823360	2	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1424	108	n-h1-798054-11	S-1-5-19	7/15/2021 1:03:00 PM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is stopped.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Fault Tolerant Heap service started.	1001	0		4	1	11	4611686018695823360	1	Microsoft-Windows-Fault-Tolerant-Heap	6b93bf66-a922-4c11-a617-cf60d95c133d	Microsoft-Windows-Fault-Tolerant-Heap/Operational	1424	1696	n-h1-798054-11	S-1-5-19	7/15/2021 12:27:07 PM			microsoft-windows-fault-tolerant-heap/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Events logged when the FTH (fault tolerant heap) service is started.	Lifecycle Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]