Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
'instance-00000001' was turned off. (Virtual machine ID 3FAEC080-FA4A-43D1-A011-36A308ACB6A2)	18502	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4872	1704	hv-osbrick-8177	S-1-5-83-1-1068417152-1137834570-2738229664-2729880584	11/12/2021 10:01:16 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' de0a30d1-283e-4569-8209-566bd008cdd6 (3faec080-fa4a-43d1-a011-36a308acb6a2--2bf16d4c-371c-45f0-867e-a37251a3704e) Disconnected from virtual network. (Virtual Machine ID 3FAEC080-FA4A-43D1-A011-36A308ACB6A2)	12598	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4872	1704	hv-osbrick-8177	S-1-5-83-1-1068417152-1137834570-2738229664-2729880584	11/12/2021 10:01:16 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' started successfully. (Virtual machine ID 3FAEC080-FA4A-43D1-A011-36A308ACB6A2)	18500	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	4872	4764	hv-osbrick-8177	S-1-5-83-1-1068417152-1137834570-2738229664-2729880584	11/12/2021 9:55:09 AM	40be48ec-d7a5-0001-3f59-be40a5d7d701		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' de0a30d1-283e-4569-8209-566bd008cdd6 (2BF16D4C-371C-45F0-867E-A37251A3704E) started successfully. (Virtual Machine ID 3FAEC080-FA4A-43D1-A011-36A308ACB6A2)	12582	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4872	4764	hv-osbrick-8177	S-1-5-83-1-1068417152-1137834570-2738229664-2729880584	11/12/2021 9:55:09 AM	40be48ec-d7a5-0001-3f59-be40a5d7d701		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' de0a30d1-283e-4569-8209-566bd008cdd6 (3faec080-fa4a-43d1-a011-36a308acb6a2--2bf16d4c-371c-45f0-867e-a37251a3704e) Connected to virtual network. (Virtual Machine ID 3FAEC080-FA4A-43D1-A011-36A308ACB6A2)	12597	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	4872	4764	hv-osbrick-8177	S-1-5-83-1-1068417152-1137834570-2738229664-2729880584	11/12/2021 9:55:09 AM	40be48ec-d7a5-0001-3f59-be40a5d7d701		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]