Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
[71074457-CFB8-4F5B-AFEB-91F7C3A95970] Query compute system notification, result 0x00000000, notification 2 / 0x00000000	2008	0		4	0	0	4611686018427387904	31	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:32 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[71074457-CFB8-4F5B-AFEB-91F7C3A95970] Create compute system, result 0xC0370103	2000	0		4	0	0	4611686018427387904	30	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:32 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[71074457-CFB8-4F5B-AFEB-91F7C3A95970] Queue system notification: 2 / 0x00000000	2009	0		4	0	0	4611686018427387904	29	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:32 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[71074457-CFB8-4F5B-AFEB-91F7C3A95970] Create Virtual Machine	2014	0		4	0	0	4611686018427387904	28	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:32 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[E0654CDD-36C8-4D5D-90BC-DD73C743A26A] Query compute system notification, result 0x00000000, notification 2 / 0x00000000	2008	0		4	0	0	4611686018427387904	27	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:30 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[E0654CDD-36C8-4D5D-90BC-DD73C743A26A] Create compute system, result 0xC0370103	2000	0		4	0	0	4611686018427387904	26	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:30 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[E0654CDD-36C8-4D5D-90BC-DD73C743A26A] Queue system notification: 2 / 0x00000000	2009	0		4	0	0	4611686018427387904	25	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:30 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[E0654CDD-36C8-4D5D-90BC-DD73C743A26A] Create Virtual Machine	2014	0		4	0	0	4611686018427387904	24	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:30 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[42EF746F-7042-4C51-B645-631075E7DC9E] Query compute system notification, result 0x00000000, notification 2 / 0x00000000	2008	0		4	0	0	4611686018427387904	23	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:28 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[42EF746F-7042-4C51-B645-631075E7DC9E] Create compute system, result 0xC0370103	2000	0		4	0	0	4611686018427387904	22	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:28 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[42EF746F-7042-4C51-B645-631075E7DC9E] Queue system notification: 2 / 0x00000000	2009	0		4	0	0	4611686018427387904	21	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:28 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[42EF746F-7042-4C51-B645-631075E7DC9E] Create Virtual Machine	2014	0		4	0	0	4611686018427387904	20	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:28 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[F3CB9F66-E0E4-4EF5-B70A-CF8000BA24AC] Query compute system notification, result 0x00000000, notification 2 / 0x00000000	2008	0		4	0	0	4611686018427387904	19	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:11 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[F3CB9F66-E0E4-4EF5-B70A-CF8000BA24AC] Create compute system, result 0xC0370103	2000	0		4	0	0	4611686018427387904	18	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:11 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[F3CB9F66-E0E4-4EF5-B70A-CF8000BA24AC] Queue system notification: 2 / 0x00000000	2009	0		4	0	0	4611686018427387904	17	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:11 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[F3CB9F66-E0E4-4EF5-B70A-CF8000BA24AC] Create Virtual Machine	2014	0		4	0	0	4611686018427387904	16	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:11 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[970392E4-B27C-4821-9C05-89B6DE5A6B54] Query compute system notification, result 0x00000000, notification 2 / 0x00000000	2008	0		4	0	0	4611686018427387904	15	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:08 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[970392E4-B27C-4821-9C05-89B6DE5A6B54] Create compute system, result 0xC0370103	2000	0		4	0	0	4611686018427387904	14	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:08 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[970392E4-B27C-4821-9C05-89B6DE5A6B54] Queue system notification: 2 / 0x00000000	2009	0		4	0	0	4611686018427387904	13	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:08 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[970392E4-B27C-4821-9C05-89B6DE5A6B54] Create Virtual Machine	2014	0		4	0	0	4611686018427387904	12	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:05:07 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[E605826D-C6FB-414D-BB3A-BC9D25CFA707] Queue system notification: 1 / 0x00000000	2009	0		4	0	0	4611686018427387904	11	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:04:41 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[E605826D-C6FB-414D-BB3A-BC9D25CFA707] Query compute system notification, result 0x00000000, notification 2 / 0x00000000	2008	0		4	0	0	4611686018427387904	10	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:04:33 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[E605826D-C6FB-414D-BB3A-BC9D25CFA707] Create compute system, result 0xC0370103	2000	0		4	0	0	4611686018427387904	9	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:04:33 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[E605826D-C6FB-414D-BB3A-BC9D25CFA707] Queue system notification: 2 / 0x00000000	2009	0		4	0	0	4611686018427387904	8	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:04:33 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
[E605826D-C6FB-414D-BB3A-BC9D25CFA707] Create Virtual Machine	2014	0		4	0	0	4611686018427387904	7	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3692	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 4:04:33 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Host Compute Service is starting.	1000	0		4	0	0	4611686018427387904	6	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	3648	3688	n-h2-811818-2.cbci-811818-2.local	S-1-5-18	9/30/2021 3:59:52 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Host Compute Service is starting.	1000	0		4	0	0	4611686018427387904	5	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	2544	2776	n-h2-811818-2	S-1-5-18	9/30/2021 3:08:09 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Host Compute Service is starting.	1000	0		4	0	0	4611686018427387904	4	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	2692	2716	WIN-5T344G8GM1H	S-1-5-18	9/30/2021 3:06:32 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Host Compute Service is starting.	1000	0		4	0	0	4611686018427387904	3	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	2948	2972	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:41:31 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Host Compute Service is starting.	1000	0		4	0	0	4611686018427387904	2	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	2928	2952	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:27:17 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Host Compute Service is starting.	1000	0		4	0	0	4611686018427387904	1	Microsoft-Windows-Hyper-V-Compute	17103e3f-3c6e-4677-bb17-3b267eb5be57	Microsoft-Windows-Hyper-V-Compute-Operational	2692	2132	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:26:53 AM			microsoft-windows-hyper-v-compute-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]