MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758087Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11201844n-h1-858383-10.cbci-858383-10.localS-1-5-2010/12/2022 8:41:34 AM52295d9f-de16-0002-b85d-295216ded801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758086Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11201624n-h1-858383-10.cbci-858383-10.localS-1-5-2010/12/2022 8:41:24 AM52295d9f-de16-0002-b85d-295216ded801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758085Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational11201840n-h1-858383-10.cbci-858383-10.localS-1-5-2010/12/2022 8:41:00 AM52295d9f-de16-0002-b85d-295216ded801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758084Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13481700n-h1-858383-10S-1-5-2010/12/2022 8:02:11 AMdbd6bb76-de10-0000-adbb-d6db10ded801microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758083Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational13921532WIN-5T344G8GM1HS-1-5-201/19/2018 9:41:32 AMad8d0f9c-9109-0001-d70f-8dad0991d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758082Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational15241660WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:17 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Subscription policy has changed. Forwarder is adjusting its subscriptions according to the subscription manager(s) in the updated policy.1060400-92233720368547758081Microsoft-Windows-Forwarding699e309c-e782-4400-98c8-e21d162d7b7bMicrosoft-Windows-Forwarding/Operational15241660WIN-5T344G8GM1HS-1-5-201/19/2018 9:27:17 AMaff0bd57-9107-0000-a1bd-f0af0791d301microsoft-windows-forwarding/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]