MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758088Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11961352n-h2-827314-1.cbci-827314-1.localS-1-5-202/1/2022 5:10:47 PM8977d584-178e-0003-a6d5-77898e17d801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758087Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11961640n-h2-827314-1.cbci-827314-1.localS-1-5-202/1/2022 5:10:37 PM8977d584-178e-0003-a6d5-77898e17d801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758086Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11961632n-h2-827314-1.cbci-827314-1.localS-1-5-202/1/2022 5:10:11 PM8977d584-178e-0003-a6d5-77898e17d801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758085Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11961352n-h2-827314-1.cbci-827314-1.localS-1-5-202/1/2022 5:10:11 PM8977d584-178e-0003-a6d5-77898e17d801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758084Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13241904n-h2-827314-1S-1-5-202/1/2022 4:21:36 PMb1189880-1787-0001-c398-18b18717d801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758083Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13921532WIN-5T344G8GM1HS-1-5-201/19/2018 9:41:32 AMad8d0f9c-9109-0001-d70f-8dad0991d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758082Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational15241660WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:17 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758081Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational15241660WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:17 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]