Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
'instance-00000006' was turned off. (Virtual machine ID AFFABDC1-60BB-49F2-9B7E-7A2D30B1FF2A) | 18502 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 40 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 3864 | 2236 | hv-osbrick-8295 | S-1-5-83-1-2952445377-1240621243-763002523-721400112 | 2/16/2022 6:46:03 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000006' b5d962fc-de6b-4b71-b212-e8e206fe21c4 (affabdc1-60bb-49f2-9b7e-7a2d30b1ff2a--76226436-e266-4c3f-ac2c-d10cca075b12) Disconnected from virtual network. (Virtual Machine ID AFFABDC1-60BB-49F2-9B7E-7A2D30B1FF2A) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 39 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3864 | 2236 | hv-osbrick-8295 | S-1-5-83-1-2952445377-1240621243-763002523-721400112 | 2/16/2022 6:46:03 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000007' was turned off. (Virtual machine ID B59F4976-F49F-4972-B14B-161B6846E296) | 18502 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 38 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 4972 | 2240 | hv-osbrick-8295 | S-1-5-83-1-3047115126-1232270495-454446001-2531411560 | 2/16/2022 6:45:27 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000007' 2c7cec9a-dee6-42eb-83fd-27a4da2878dc (b59f4976-f49f-4972-b14b-161b6846e296--bc7de27e-86b8-4c32-b13a-cf4c68d2bf67) Disconnected from virtual network. (Virtual Machine ID B59F4976-F49F-4972-B14B-161B6846E296) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 37 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4972 | 2240 | hv-osbrick-8295 | S-1-5-83-1-3047115126-1232270495-454446001-2531411560 | 2/16/2022 6:45:27 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000007' started successfully. (Virtual machine ID B59F4976-F49F-4972-B14B-161B6846E296) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 36 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 4972 | 2240 | hv-osbrick-8295 | S-1-5-83-1-3047115126-1232270495-454446001-2531411560 | 2/16/2022 6:43:34 PM | 8a9ed207-235e-0005-bff7-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000007' 2c7cec9a-dee6-42eb-83fd-27a4da2878dc (BC7DE27E-86B8-4C32-B13A-CF4C68D2BF67) started successfully. (Virtual Machine ID B59F4976-F49F-4972-B14B-161B6846E296) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 35 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4972 | 2240 | hv-osbrick-8295 | S-1-5-83-1-3047115126-1232270495-454446001-2531411560 | 2/16/2022 6:43:34 PM | 8a9ed207-235e-0005-bff7-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000007' 2c7cec9a-dee6-42eb-83fd-27a4da2878dc (b59f4976-f49f-4972-b14b-161b6846e296--bc7de27e-86b8-4c32-b13a-cf4c68d2bf67) Connected to virtual network. (Virtual Machine ID B59F4976-F49F-4972-B14B-161B6846E296) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 34 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4972 | 2240 | hv-osbrick-8295 | S-1-5-83-1-3047115126-1232270495-454446001-2531411560 | 2/16/2022 6:43:34 PM | 8a9ed207-235e-0005-bff7-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000006' started successfully. (Virtual machine ID AFFABDC1-60BB-49F2-9B7E-7A2D30B1FF2A) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 33 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 3864 | 1356 | hv-osbrick-8295 | S-1-5-83-1-2952445377-1240621243-763002523-721400112 | 2/16/2022 6:41:41 PM | 8a9ed207-235e-0005-8bf6-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000006' b5d962fc-de6b-4b71-b212-e8e206fe21c4 (76226436-E266-4C3F-AC2C-D10CCA075B12) started successfully. (Virtual Machine ID AFFABDC1-60BB-49F2-9B7E-7A2D30B1FF2A) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 32 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3864 | 1356 | hv-osbrick-8295 | S-1-5-83-1-2952445377-1240621243-763002523-721400112 | 2/16/2022 6:41:41 PM | 8a9ed207-235e-0005-8bf6-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000006' b5d962fc-de6b-4b71-b212-e8e206fe21c4 (affabdc1-60bb-49f2-9b7e-7a2d30b1ff2a--76226436-e266-4c3f-ac2c-d10cca075b12) Connected to virtual network. (Virtual Machine ID AFFABDC1-60BB-49F2-9B7E-7A2D30B1FF2A) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 31 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3864 | 1356 | hv-osbrick-8295 | S-1-5-83-1-2952445377-1240621243-763002523-721400112 | 2/16/2022 6:41:41 PM | 8a9ed207-235e-0005-8bf6-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000005' was turned off. (Virtual machine ID 1B0D0C3A-226C-4FFE-89CE-2A60C3029DF1) | 18502 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 30 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 1332 | 4424 | hv-osbrick-8295 | S-1-5-83-1-453839930-1342055020-1613418121-4053598915 | 2/16/2022 6:41:28 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000005' 9a8159d1-6f91-4c70-b76f-9af98d1f9e57 (1b0d0c3a-226c-4ffe-89ce-2a60c3029df1--498e812b-9b27-4071-a4cc-f0cde766b8a0) Disconnected from virtual network. (Virtual Machine ID 1B0D0C3A-226C-4FFE-89CE-2A60C3029DF1) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 29 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 1332 | 4424 | hv-osbrick-8295 | S-1-5-83-1-453839930-1342055020-1613418121-4053598915 | 2/16/2022 6:41:28 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' was turned off. (Virtual machine ID C95346B2-6F1A-4F8D-BA98-3352A80BC016) | 18502 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 28 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 3560 | 1260 | hv-osbrick-8295 | S-1-5-83-1-3377678002-1334669082-1379113146-381684648 | 2/16/2022 6:39:50 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 07d90392-6348-4d5f-840e-c3d9d8a7b9cd (c95346b2-6f1a-4f8d-ba98-3352a80bc016--29ab44f4-7c24-47e9-8f71-69f03a1ee675) Disconnected from virtual network. (Virtual Machine ID C95346B2-6F1A-4F8D-BA98-3352A80BC016) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 27 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3560 | 1260 | hv-osbrick-8295 | S-1-5-83-1-3377678002-1334669082-1379113146-381684648 | 2/16/2022 6:39:50 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000005' started successfully. (Virtual machine ID 1B0D0C3A-226C-4FFE-89CE-2A60C3029DF1) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 26 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 1332 | 1104 | hv-osbrick-8295 | S-1-5-83-1-453839930-1342055020-1613418121-4053598915 | 2/16/2022 6:39:17 PM | 8a9ed207-235e-0000-e7c1-a08a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000005' 9a8159d1-6f91-4c70-b76f-9af98d1f9e57 (498E812B-9B27-4071-A4CC-F0CDE766B8A0) started successfully. (Virtual Machine ID 1B0D0C3A-226C-4FFE-89CE-2A60C3029DF1) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 25 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 1332 | 1104 | hv-osbrick-8295 | S-1-5-83-1-453839930-1342055020-1613418121-4053598915 | 2/16/2022 6:39:17 PM | 8a9ed207-235e-0000-e7c1-a08a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000005' 9a8159d1-6f91-4c70-b76f-9af98d1f9e57 (1b0d0c3a-226c-4ffe-89ce-2a60c3029df1--498e812b-9b27-4071-a4cc-f0cde766b8a0) Connected to virtual network. (Virtual Machine ID 1B0D0C3A-226C-4FFE-89CE-2A60C3029DF1) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 24 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 1332 | 1104 | hv-osbrick-8295 | S-1-5-83-1-453839930-1342055020-1613418121-4053598915 | 2/16/2022 6:39:17 PM | 8a9ed207-235e-0000-e7c1-a08a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000003' was turned off. (Virtual machine ID 82BC1DAB-2AB9-423C-9745-952FBA602260) | 18502 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 23 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 3028 | 4788 | hv-osbrick-8295 | S-1-5-83-1-2193366443-1111239353-798311831-1612865722 | 2/16/2022 6:38:59 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000003' f85b4e67-56b1-42fa-b9de-856883e09302 (82bc1dab-2ab9-423c-9745-952fba602260--cd4fc113-8f55-499e-84bc-7c5f12ecee79) Disconnected from virtual network. (Virtual Machine ID 82BC1DAB-2AB9-423C-9745-952FBA602260) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 22 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3028 | 4788 | hv-osbrick-8295 | S-1-5-83-1-2193366443-1111239353-798311831-1612865722 | 2/16/2022 6:38:59 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' started successfully. (Virtual machine ID C95346B2-6F1A-4F8D-BA98-3352A80BC016) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 21 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 3560 | 1260 | hv-osbrick-8295 | S-1-5-83-1-3377678002-1334669082-1379113146-381684648 | 2/16/2022 6:38:39 PM | 8a9ed207-235e-0000-35a5-a08a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 07d90392-6348-4d5f-840e-c3d9d8a7b9cd (29AB44F4-7C24-47E9-8F71-69F03A1EE675) started successfully. (Virtual Machine ID C95346B2-6F1A-4F8D-BA98-3352A80BC016) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 20 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3560 | 1260 | hv-osbrick-8295 | S-1-5-83-1-3377678002-1334669082-1379113146-381684648 | 2/16/2022 6:38:39 PM | 8a9ed207-235e-0000-35a5-a08a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 07d90392-6348-4d5f-840e-c3d9d8a7b9cd (c95346b2-6f1a-4f8d-ba98-3352a80bc016--29ab44f4-7c24-47e9-8f71-69f03a1ee675) Connected to virtual network. (Virtual Machine ID C95346B2-6F1A-4F8D-BA98-3352A80BC016) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 19 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3560 | 1260 | hv-osbrick-8295 | S-1-5-83-1-3377678002-1334669082-1379113146-381684648 | 2/16/2022 6:38:39 PM | 8a9ed207-235e-0000-35a5-a08a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' was shut down using the Shutdown Integration Component with parameters: Force = false, Reason = 'Soft shutdown requested by OpenStack Nova.' (Virtual machine ID C95346B2-6F1A-4F8D-BA98-3352A80BC016) | 18504 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 18 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 4632 | 4872 | hv-osbrick-8295 | S-1-5-83-1-3377678002-1334669082-1379113146-381684648 | 2/16/2022 6:38:37 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 07d90392-6348-4d5f-840e-c3d9d8a7b9cd (c95346b2-6f1a-4f8d-ba98-3352a80bc016--29ab44f4-7c24-47e9-8f71-69f03a1ee675) Disconnected from virtual network. (Virtual Machine ID C95346B2-6F1A-4F8D-BA98-3352A80BC016) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 17 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4632 | 4872 | hv-osbrick-8295 | S-1-5-83-1-3377678002-1334669082-1379113146-381684648 | 2/16/2022 6:38:37 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000004' was turned off. (Virtual machine ID B0381135-E205-40C8-8F09-F8EB0F8D7B9E) | 18502 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 16 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 3148 | 4768 | hv-osbrick-8295 | S-1-5-83-1-2956464437-1086906885-3958901135-2658897167 | 2/16/2022 6:38:25 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000004' a312c98d-d1f0-4fe1-88df-8c74b9f998fa (b0381135-e205-40c8-8f09-f8eb0f8d7b9e--386bdc05-8f64-47ce-a171-9a422cd3a701) Disconnected from virtual network. (Virtual Machine ID B0381135-E205-40C8-8F09-F8EB0F8D7B9E) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 15 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3148 | 4768 | hv-osbrick-8295 | S-1-5-83-1-2956464437-1086906885-3958901135-2658897167 | 2/16/2022 6:38:25 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000004' started successfully. (Virtual machine ID B0381135-E205-40C8-8F09-F8EB0F8D7B9E) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 14 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 3148 | 1196 | hv-osbrick-8295 | S-1-5-83-1-2956464437-1086906885-3958901135-2658897167 | 2/16/2022 6:38:23 PM | 8a9ed207-235e-0004-e6f6-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000004' a312c98d-d1f0-4fe1-88df-8c74b9f998fa (386BDC05-8F64-47CE-A171-9A422CD3A701) started successfully. (Virtual Machine ID B0381135-E205-40C8-8F09-F8EB0F8D7B9E) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 13 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3148 | 1196 | hv-osbrick-8295 | S-1-5-83-1-2956464437-1086906885-3958901135-2658897167 | 2/16/2022 6:38:23 PM | 8a9ed207-235e-0004-e6f6-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000004' a312c98d-d1f0-4fe1-88df-8c74b9f998fa (b0381135-e205-40c8-8f09-f8eb0f8d7b9e--386bdc05-8f64-47ce-a171-9a422cd3a701) Connected to virtual network. (Virtual Machine ID B0381135-E205-40C8-8F09-F8EB0F8D7B9E) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 12 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3148 | 1196 | hv-osbrick-8295 | S-1-5-83-1-2956464437-1086906885-3958901135-2658897167 | 2/16/2022 6:38:23 PM | 8a9ed207-235e-0004-e6f6-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000003' started successfully. (Virtual machine ID 82BC1DAB-2AB9-423C-9745-952FBA602260) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 11 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 3028 | 1608 | hv-osbrick-8295 | S-1-5-83-1-2193366443-1111239353-798311831-1612865722 | 2/16/2022 6:38:05 PM | 8a9ed207-235e-0004-02e7-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000003' f85b4e67-56b1-42fa-b9de-856883e09302 (CD4FC113-8F55-499E-84BC-7C5F12ECEE79) started successfully. (Virtual Machine ID 82BC1DAB-2AB9-423C-9745-952FBA602260) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 10 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3028 | 1608 | hv-osbrick-8295 | S-1-5-83-1-2193366443-1111239353-798311831-1612865722 | 2/16/2022 6:38:04 PM | 8a9ed207-235e-0004-02e7-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000003' f85b4e67-56b1-42fa-b9de-856883e09302 (82bc1dab-2ab9-423c-9745-952fba602260--cd4fc113-8f55-499e-84bc-7c5f12ecee79) Connected to virtual network. (Virtual Machine ID 82BC1DAB-2AB9-423C-9745-952FBA602260) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 9 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 3028 | 1608 | hv-osbrick-8295 | S-1-5-83-1-2193366443-1111239353-798311831-1612865722 | 2/16/2022 6:38:04 PM | 8a9ed207-235e-0004-02e7-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000002' was turned off. (Virtual machine ID 4CD0B838-2E1F-4F66-BD5B-D7327788B4A1) | 18502 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 8 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 4420 | 4920 | hv-osbrick-8295 | S-1-5-83-1-1288747064-1332096543-852974525-2712963191 | 2/16/2022 6:37:45 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000002' c138018b-c7f6-441c-abc5-4e9cbe06a299 (4cd0b838-2e1f-4f66-bd5b-d7327788b4a1--af13f722-b026-43fc-a099-93fd661b785c) Disconnected from virtual network. (Virtual Machine ID 4CD0B838-2E1F-4F66-BD5B-D7327788B4A1) | 12598 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 7 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4420 | 4920 | hv-osbrick-8295 | S-1-5-83-1-1288747064-1332096543-852974525-2712963191 | 2/16/2022 6:37:45 PM | | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000002' started successfully. (Virtual machine ID 4CD0B838-2E1F-4F66-BD5B-D7327788B4A1) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 6 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 4420 | 4860 | hv-osbrick-8295 | S-1-5-83-1-1288747064-1332096543-852974525-2712963191 | 2/16/2022 6:37:42 PM | 8a9ed207-235e-0001-e7f8-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000002' c138018b-c7f6-441c-abc5-4e9cbe06a299 (AF13F722-B026-43FC-A099-93FD661B785C) started successfully. (Virtual Machine ID 4CD0B838-2E1F-4F66-BD5B-D7327788B4A1) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 5 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4420 | 4860 | hv-osbrick-8295 | S-1-5-83-1-1288747064-1332096543-852974525-2712963191 | 2/16/2022 6:37:42 PM | 8a9ed207-235e-0001-e7f8-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000002' c138018b-c7f6-441c-abc5-4e9cbe06a299 (4cd0b838-2e1f-4f66-bd5b-d7327788b4a1--af13f722-b026-43fc-a099-93fd661b785c) Connected to virtual network. (Virtual Machine ID 4CD0B838-2E1F-4F66-BD5B-D7327788B4A1) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 4 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4420 | 4860 | hv-osbrick-8295 | S-1-5-83-1-1288747064-1332096543-852974525-2712963191 | 2/16/2022 6:37:42 PM | 8a9ed207-235e-0001-e7f8-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' started successfully. (Virtual machine ID C95346B2-6F1A-4F8D-BA98-3352A80BC016) | 18500 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 3 | Microsoft-Windows-Hyper-V-Worker | 51ddfa29-d5c8-4803-be4b-2ecb715570fe | Microsoft-Windows-Hyper-V-Worker-Admin | 4632 | 2492 | hv-osbrick-8295 | S-1-5-83-1-3377678002-1334669082-1379113146-381684648 | 2/16/2022 6:37:01 PM | 8a9ed207-235e-0003-d0e2-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 07d90392-6348-4d5f-840e-c3d9d8a7b9cd (29AB44F4-7C24-47E9-8F71-69F03A1EE675) started successfully. (Virtual Machine ID C95346B2-6F1A-4F8D-BA98-3352A80BC016) | 12582 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 2 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4632 | 2492 | hv-osbrick-8295 | S-1-5-83-1-3377678002-1334669082-1379113146-381684648 | 2/16/2022 6:37:01 PM | 8a9ed207-235e-0003-d0e2-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
'instance-00000001' 07d90392-6348-4d5f-840e-c3d9d8a7b9cd (c95346b2-6f1a-4f8d-ba98-3352a80bc016--29ab44f4-7c24-47e9-8f71-69f03a1ee675) Connected to virtual network. (Virtual Machine ID C95346B2-6F1A-4F8D-BA98-3352A80BC016) | 12597 | 0 | | 4 | 0 | 0 | -9223372036854775808 | 1 | Microsoft-Windows-Hyper-V-SynthNic | c29c4fb7-b60e-4fff-9af9-cf21f9b09a34 | Microsoft-Windows-Hyper-V-Worker-Admin | 4632 | 2492 | hv-osbrick-8295 | S-1-5-83-1-3377678002-1334669082-1379113146-381684648 | 2/16/2022 6:37:01 PM | 8a9ed207-235e-0003-d0e2-9e8a5e23d801 | | microsoft-windows-hyper-v-worker-admin | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |