MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758088Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11561772n-h2-841017-5.cbci-841017-5.localS-1-5-208/22/2022 2:53:03 PMc1fed0b8-b636-0005-d4d0-fec136b6d801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758087Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11561656n-h2-841017-5.cbci-841017-5.localS-1-5-208/22/2022 2:52:53 PMc1fed0b8-b636-0005-d4d0-fec136b6d801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758086Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11561332n-h2-841017-5.cbci-841017-5.localS-1-5-208/22/2022 2:52:27 PMc1fed0b8-b636-0005-d4d0-fec136b6d801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758085Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11561660n-h2-841017-5.cbci-841017-5.localS-1-5-208/22/2022 2:52:27 PMc1fed0b8-b636-0005-d4d0-fec136b6d801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758084Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13481752n-h2-841017-5S-1-5-208/22/2022 2:06:58 PM59127060-b630-0002-8770-125930b6d801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758083Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13921532WIN-5T344G8GM1HS-1-5-201/19/2018 9:41:32 AMad8d0f9c-9109-0001-d70f-8dad0991d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758082Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational15241660WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:17 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758081Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational15241660WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:17 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]