Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
'instance-00000001' was turned off. (Virtual machine ID 53168E43-F3A5-498E-8769-5E4E63E6A5DF) | 18502 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 5 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 1088 | 2612 | hv-osbrick-8176 | S-1-5-83-1-1393987139-1234105253-1314810247-3752191587 | 11/12/2021 6:35:48 AM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 32b4d596-425c-4c8e-994a-1c39f4cbdb50 (53168e43-f3a5-498e-8769-5e4e63e6a5df--70034f9c-2e52-4823-80d6-1d82a37b7557) Disconnected from virtual network. (Virtual Machine ID 53168E43-F3A5-498E-8769-5E4E63E6A5DF) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 4 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 1088 | 2612 | hv-osbrick-8176 | S-1-5-83-1-1393987139-1234105253-1314810247-3752191587 | 11/12/2021 6:35:48 AM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' started successfully. (Virtual machine ID 53168E43-F3A5-498E-8769-5E4E63E6A5DF) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 3 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 1088 | 5100 | hv-osbrick-8176 | S-1-5-83-1-1393987139-1234105253-1314810247-3752191587 | 11/12/2021 6:29:43 AM | 4f97c6ac-d789-0002-cbd9-974f89d7d701 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 32b4d596-425c-4c8e-994a-1c39f4cbdb50 (70034F9C-2E52-4823-80D6-1D82A37B7557) started successfully. (Virtual Machine ID 53168E43-F3A5-498E-8769-5E4E63E6A5DF) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 2 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 1088 | 5100 | hv-osbrick-8176 | S-1-5-83-1-1393987139-1234105253-1314810247-3752191587 | 11/12/2021 6:29:43 AM | 4f97c6ac-d789-0002-cbd9-974f89d7d701 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 32b4d596-425c-4c8e-994a-1c39f4cbdb50 (53168e43-f3a5-498e-8769-5e4e63e6a5df--70034f9c-2e52-4823-80d6-1d82a37b7557) Connected to virtual network. (Virtual Machine ID 53168E43-F3A5-498E-8769-5E4E63E6A5DF) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 1 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 1088 | 5100 | hv-osbrick-8176 | S-1-5-83-1-1393987139-1234105253-1314810247-3752191587 | 11/12/2021 6:29:43 AM | 4f97c6ac-d789-0002-cbd9-974f89d7d701 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |