Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
'instance-00000001' was turned off. (Virtual machine ID 9EA5DE78-5CA2-4527-AA20-C04C061A712F)	18502	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4988	4488	hv-osbrick-8171	S-1-5-83-1-2661670520-1160207522-1287659690-795941382	11/16/2021 7:36:55 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' 37950a99-e4e4-4656-9622-e940cc0ef6e6 (9ea5de78-5ca2-4527-aa20-c04c061a712f--b38bc254-26cc-4616-b34a-d83974bb258e) Disconnected from virtual network. (Virtual Machine ID 9EA5DE78-5CA2-4527-AA20-C04C061A712F)	12598	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4988	4488	hv-osbrick-8171	S-1-5-83-1-2661670520-1160207522-1287659690-795941382	11/16/2021 7:36:55 PM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' started successfully. (Virtual machine ID 9EA5DE78-5CA2-4527-AA20-C04C061A712F)	18500	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4988	1296	hv-osbrick-8171	S-1-5-83-1-2661670520-1160207522-1287659690-795941382	11/16/2021 7:30:47 PM	caa77131-db18-0000-299d-a7ca18dbd701		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' 37950a99-e4e4-4656-9622-e940cc0ef6e6 (B38BC254-26CC-4616-B34A-D83974BB258E) started successfully. (Virtual Machine ID 9EA5DE78-5CA2-4527-AA20-C04C061A712F)	12582	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4988	1296	hv-osbrick-8171	S-1-5-83-1-2661670520-1160207522-1287659690-795941382	11/16/2021 7:30:46 PM	caa77131-db18-0000-299d-a7ca18dbd701		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' 37950a99-e4e4-4656-9622-e940cc0ef6e6 (9ea5de78-5ca2-4527-aa20-c04c061a712f--b38bc254-26cc-4616-b34a-d83974bb258e) Connected to virtual network. (Virtual Machine ID 9EA5DE78-5CA2-4527-AA20-C04C061A712F)	12597	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4988	1296	hv-osbrick-8171	S-1-5-83-1-2661670520-1160207522-1287659690-795941382	11/16/2021 7:30:46 PM	caa77131-db18-0000-299d-a7ca18dbd701		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]