MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758088Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13481516n-h1-817778-4.cbci-817778-4.localS-1-5-2011/12/2021 6:43:44 PM1dbcd8f3-d7f5-0002-0ad9-bc1df5d7d701microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758087Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13481648n-h1-817778-4.cbci-817778-4.localS-1-5-2011/12/2021 6:43:35 PM1dbcd8f3-d7f5-0002-0ad9-bc1df5d7d701microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758086Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13481644n-h1-817778-4.cbci-817778-4.localS-1-5-2011/12/2021 6:43:15 PM1dbcd8f3-d7f5-0002-0ad9-bc1df5d7d701microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758085Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13481656n-h1-817778-4.cbci-817778-4.localS-1-5-2011/12/2021 6:43:15 PM1dbcd8f3-d7f5-0002-0ad9-bc1df5d7d701microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758084Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13481708n-h1-817778-4S-1-5-2011/12/2021 6:05:55 PMdd0cbca1-d7ef-0004-f0bc-0cddefd7d701microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758083Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13921532WIN-5T344G8GM1HS-1-5-201/19/2018 9:41:32 AMad8d0f9c-9109-0001-d70f-8dad0991d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758082Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational15241660WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:17 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758081Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational15241660WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:17 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]