Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
'instance-00000001' was turned off. (Virtual machine ID 1272594D-0E14-49BC-8581-1127096757C6)	18502	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	2976	5080	hv-osbrick-8177	S-1-5-83-1-309483853-1237061140-655458693-3327616777	11/12/2021 9:00:37 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' 37a708f9-90ec-469d-84c4-24b450a9c617 (1272594d-0e14-49bc-8581-1127096757c6--76a17e8a-a851-4436-860a-1a3533e7d3e7) Disconnected from virtual network. (Virtual Machine ID 1272594D-0E14-49BC-8581-1127096757C6)	12598	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	2976	5080	hv-osbrick-8177	S-1-5-83-1-309483853-1237061140-655458693-3327616777	11/12/2021 9:00:37 AM			microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' started successfully. (Virtual machine ID 1272594D-0E14-49BC-8581-1127096757C6)	18500	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Hyper-V-Worker	51ddfa29-d5c8-4803-be4b-2ecb715570fe	Microsoft-Windows-Hyper-V-Worker-Admin	2976	5080	hv-osbrick-8177	S-1-5-83-1-309483853-1237061140-655458693-3327616777	11/12/2021 8:54:30 AM	c9343678-d79b-0003-5877-34c99bd7d701		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' 37a708f9-90ec-469d-84c4-24b450a9c617 (76A17E8A-A851-4436-860A-1A3533E7D3E7) started successfully. (Virtual Machine ID 1272594D-0E14-49BC-8581-1127096757C6)	12582	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	2976	5080	hv-osbrick-8177	S-1-5-83-1-309483853-1237061140-655458693-3327616777	11/12/2021 8:54:30 AM	c9343678-d79b-0003-5877-34c99bd7d701		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
'instance-00000001' 37a708f9-90ec-469d-84c4-24b450a9c617 (1272594d-0e14-49bc-8581-1127096757c6--76a17e8a-a851-4436-860a-1a3533e7d3e7) Connected to virtual network. (Virtual Machine ID 1272594D-0E14-49BC-8581-1127096757C6)	12597	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Hyper-V-SynthNic	c29c4fb7-b60e-4fff-9af9-cf21f9b09a34	Microsoft-Windows-Hyper-V-Worker-Admin	2976	5080	hv-osbrick-8177	S-1-5-83-1-309483853-1237061140-655458693-3327616777	11/12/2021 8:54:30 AM	c9343678-d79b-0003-5877-34c99bd7d701		microsoft-windows-hyper-v-worker-admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]