Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
'instance-00000005' was turned off. (Virtual machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	18502	0		4	0	0	-9223372036854775808	25	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	1856	92	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:42:28 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' e5f6bf2c-6830-4381-b2a7-369f0fe34ec8 (62a277ef-8f41-4211-b24e-3577e590348e--7f1a2691-55b6-4893-a2db-568788b003c9) Disconnected from virtual network. (Virtual Machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	12598	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	1856	92	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:42:28 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' was restored successfully. (Virtual machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	18596	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	1856	3280	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:42:22 AM	9e22b819-d84e-0003-1818-259e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' e5f6bf2c-6830-4381-b2a7-369f0fe34ec8 (7F1A2691-55B6-4893-A2DB-568788B003C9) started successfully. (Virtual Machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	12582	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	1856	3280	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:42:21 AM	9e22b819-d84e-0003-1818-259e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' e5f6bf2c-6830-4381-b2a7-369f0fe34ec8 (62a277ef-8f41-4211-b24e-3577e590348e--7f1a2691-55b6-4893-a2db-568788b003c9) Connected to virtual network. (Virtual Machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	12597	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	1856	3280	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:42:21 AM	9e22b819-d84e-0003-1818-259e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' saved successfully. (Virtual machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	18510	0		4	0	0	-9223372036854775808	20	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4692	2028	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:42:20 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' e5f6bf2c-6830-4381-b2a7-369f0fe34ec8 (62a277ef-8f41-4211-b24e-3577e590348e--7f1a2691-55b6-4893-a2db-568788b003c9) Disconnected from virtual network. (Virtual Machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	12598	0		4	0	0	-9223372036854775808	19	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4692	2028	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:42:20 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000006' was turned off. (Virtual machine ID 5F12BC28-54E5-4624-87BC-DB399EE192B4)	18502	0		4	0	0	-9223372036854775808	18	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	2888	4388	hv-osbrick-7519	S-1-5-83-1-1595063336-1176786149-970701959-3029524894	12/22/2020 11:42:11 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000006' ce10c8e3-23b2-4a06-b017-31f20ea485c6 (5f12bc28-54e5-4624-87bc-db399ee192b4--959be650-aab6-44f0-a284-ade20d5028eb) Disconnected from virtual network. (Virtual Machine ID 5F12BC28-54E5-4624-87BC-DB399EE192B4)	12598	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	2888	4388	hv-osbrick-7519	S-1-5-83-1-1595063336-1176786149-970701959-3029524894	12/22/2020 11:42:11 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000006' started successfully. (Virtual machine ID 5F12BC28-54E5-4624-87BC-DB399EE192B4)	18500	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	2888	1524	hv-osbrick-7519	S-1-5-83-1-1595063336-1176786149-970701959-3029524894	12/22/2020 11:39:47 AM	9e22b819-d84e-0005-43f6-249e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000006' ce10c8e3-23b2-4a06-b017-31f20ea485c6 (959BE650-AAB6-44F0-A284-ADE20D5028EB) started successfully. (Virtual Machine ID 5F12BC28-54E5-4624-87BC-DB399EE192B4)	12582	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	2888	1524	hv-osbrick-7519	S-1-5-83-1-1595063336-1176786149-970701959-3029524894	12/22/2020 11:39:47 AM	9e22b819-d84e-0005-43f6-249e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000006' ce10c8e3-23b2-4a06-b017-31f20ea485c6 (5f12bc28-54e5-4624-87bc-db399ee192b4--959be650-aab6-44f0-a284-ade20d5028eb) Connected to virtual network. (Virtual Machine ID 5F12BC28-54E5-4624-87BC-DB399EE192B4)	12597	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	2888	1524	hv-osbrick-7519	S-1-5-83-1-1595063336-1176786149-970701959-3029524894	12/22/2020 11:39:47 AM	9e22b819-d84e-0005-43f6-249e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' was restored successfully. (Virtual machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	18596	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4692	4416	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:39:22 AM	9e22b819-d84e-0003-adf6-249e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' e5f6bf2c-6830-4381-b2a7-369f0fe34ec8 (7F1A2691-55B6-4893-A2DB-568788B003C9) started successfully. (Virtual Machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	12582	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4692	4416	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:39:21 AM	9e22b819-d84e-0003-adf6-249e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' e5f6bf2c-6830-4381-b2a7-369f0fe34ec8 (62a277ef-8f41-4211-b24e-3577e590348e--7f1a2691-55b6-4893-a2db-568788b003c9) Connected to virtual network. (Virtual Machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	12597	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4692	4416	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:39:21 AM	9e22b819-d84e-0003-adf6-249e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' saved successfully. (Virtual machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	18510	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	5112	2224	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:39:20 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' e5f6bf2c-6830-4381-b2a7-369f0fe34ec8 (62a277ef-8f41-4211-b24e-3577e590348e--7f1a2691-55b6-4893-a2db-568788b003c9) Disconnected from virtual network. (Virtual Machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	12598	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	5112	2224	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:39:20 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' started successfully. (Virtual machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	18500	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	5112	2224	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:37:11 AM	9e22b819-d84e-0001-89d7-229e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' e5f6bf2c-6830-4381-b2a7-369f0fe34ec8 (7F1A2691-55B6-4893-A2DB-568788B003C9) started successfully. (Virtual Machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	12582	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	5112	2224	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:37:11 AM	9e22b819-d84e-0001-89d7-229e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000005' e5f6bf2c-6830-4381-b2a7-369f0fe34ec8 (62a277ef-8f41-4211-b24e-3577e590348e--7f1a2691-55b6-4893-a2db-568788b003c9) Connected to virtual network. (Virtual Machine ID 62A277EF-8F41-4211-B24E-3577E590348E)	12597	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	5112	2224	hv-osbrick-7519	S-1-5-83-1-1654814703-1108447041-1999982258-2385809637	12/22/2020 11:37:11 AM	9e22b819-d84e-0001-89d7-229e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' was turned off. (Virtual machine ID 32572F8A-FD1B-4761-B876-F55C55C10B0A)	18502	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	3664	2000	hv-osbrick-7519	S-1-5-83-1-844574602-1197604123-1559590584-168542549	12/22/2020 11:36:52 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' 86bed475-3a7f-4976-abef-ac7fb905e610 (32572f8a-fd1b-4761-b876-f55c55c10b0a--880a8f01-010c-4fb8-9a01-e7a1c3e6a37e) Disconnected from virtual network. (Virtual Machine ID 32572F8A-FD1B-4761-B876-F55C55C10B0A)	12598	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	3664	2000	hv-osbrick-7519	S-1-5-83-1-844574602-1197604123-1559590584-168542549	12/22/2020 11:36:52 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' started successfully. (Virtual machine ID 32572F8A-FD1B-4761-B876-F55C55C10B0A)	18500	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	3664	4768	hv-osbrick-7519	S-1-5-83-1-844574602-1197604123-1559590584-168542549	12/22/2020 11:34:07 AM	9e22b819-d84e-0003-bbd0-229e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' 86bed475-3a7f-4976-abef-ac7fb905e610 (880A8F01-010C-4FB8-9A01-E7A1C3E6A37E) started successfully. (Virtual Machine ID 32572F8A-FD1B-4761-B876-F55C55C10B0A)	12582	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	3664	4768	hv-osbrick-7519	S-1-5-83-1-844574602-1197604123-1559590584-168542549	12/22/2020 11:34:07 AM	9e22b819-d84e-0003-bbd0-229e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000004' 86bed475-3a7f-4976-abef-ac7fb905e610 (32572f8a-fd1b-4761-b876-f55c55c10b0a--880a8f01-010c-4fb8-9a01-e7a1c3e6a37e) Connected to virtual network. (Virtual Machine ID 32572F8A-FD1B-4761-B876-F55C55C10B0A)	12597	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	3664	4768	hv-osbrick-7519	S-1-5-83-1-844574602-1197604123-1559590584-168542549	12/22/2020 11:34:07 AM	9e22b819-d84e-0003-bbd0-229e4ed8d601		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]