[
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-25T07:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 22:45:16 2020",
        "record": "17213",
        "uid": 1
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 22:44:46 2020",
        "record": "17212",
        "uid": 2
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 22:44:16 2020",
        "record": "17211",
        "uid": 3
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "gupdate",
        "eventType": "INFO",
        "eventID": "0",
        "eventCategory": "0",
        "message": "The description for Event ID ( 0 ) in Source ( 'gupdate' ) could not be found. It contains the following insertion string(s):'Service stopped'.",
        "time": "Thu Sep 24 22:08:54 2020",
        "record": "17210",
        "uid": 4
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-25T05:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 21:20:17 2020",
        "record": "17209",
        "uid": 5
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 21:19:29 2020",
        "record": "17208",
        "uid": 6
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1008",
        "eventCategory": "0",
        "message": "Started C:\\Program Files\\TacticalAgent\\tacticalrmm.exe -m checkrunner for service checkrunner in C:\\Program Files\\TacticalAgent.\r\n",
        "time": "Thu Sep 24 21:18:16 2020",
        "record": "17207",
        "uid": 7
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1040",
        "eventCategory": "0",
        "message": "Service checkrunner received START control, which will be handled.\r\n",
        "time": "Thu Sep 24 21:18:15 2020",
        "record": "17206",
        "uid": 8
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1008",
        "eventCategory": "0",
        "message": "Started C:\\Program Files\\TacticalAgent\\tacticalrmm.exe -m winagentsvc for service tacticalagent in C:\\Program Files\\TacticalAgent.\r\n",
        "time": "Thu Sep 24 21:18:15 2020",
        "record": "17205",
        "uid": 9
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1040",
        "eventCategory": "0",
        "message": "Service tacticalagent received START control, which will be handled.\r\n",
        "time": "Thu Sep 24 21:18:13 2020",
        "record": "17204",
        "uid": 10
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1008",
        "eventCategory": "0",
        "message": "Started c:\\salt\\bin\\python.exe -E -s c:\\salt\\bin\\Scripts\\salt-minion -c c:\\salt\\conf -l quiet for service salt-minion in c:\\salt\\bin.\r\n",
        "time": "Thu Sep 24 21:17:33 2020",
        "record": "17203",
        "uid": 11
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1040",
        "eventCategory": "0",
        "message": "Service salt-minion received START control, which will be handled.\r\n",
        "time": "Thu Sep 24 21:17:31 2020",
        "record": "17202",
        "uid": 12
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Windows Search Service",
        "eventType": "INFO",
        "eventID": "1003",
        "eventCategory": "1",
        "message": "The Windows Search Service started.\n\r\n",
        "time": "Thu Sep 24 21:17:20 2020",
        "record": "17201",
        "uid": 13
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "ESENT",
        "eventType": "INFO",
        "eventID": "326",
        "eventCategory": "1",
        "message": "SearchIndexer (1488,D,50) Windows: The database engine attached a database (1, C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb). (Time=0 seconds)\r\n\r\n\r\n\r\nSaved Cache: 0 0\r\n\r\nAdditional Data: lgposAttach = 0000001B:00A9:0268,\ndbv = 1568.110.240\r\n\r\n\r\n\r\nInternal Timing Sequence: \n[1] 0.000003 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K)\n[2] 0.000162 -0.000001 (1) WT +J(0) +M(C:0K, Fs:24, WS:32K # 0K, PF:32K # 0K, P:32K)\n[3] 0.004036 -0.000881 (5) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:3480/2) +M(C:0K, Fs:42, WS:124K # 0K, PF:148K # 0K, P:148K)\n[4] 0.000081 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K)\n[5] -\n[6] -\n[7] -\n[8] 0.001697 -0.001106 (2) CM +J(CM:2, PgRf:2, Rd:14/2, Dy:0/0, Lg:54/1) +M(C:0K, Fs:48, WS:188K # 0K, PF:684K # 0K, P:684K)\n[9] 0.010945 -0.000461 (5) CM -0.010221 (1) WT +J(CM:5, PgRf:23, Rd:0/5, Dy:0/0, Lg:0/0) +M(C:0K, Fs:72, WS:288K # 0K, PF:256K # 172K, P:256K)\n[10] 0.000712 -0.000613 (1) CM +J(CM:1, PgRf:40, Rd:0/1, Dy:0/0, Lg:0/0) +M(C:0K, Fs:11, WS:44K # 24K, PF:96K # 96K, P:96K)\n[11] 0.000013 +J(CM:0, PgRf:1, Rd:0/0, Dy:0/0, Lg:0/0) +M(C:0K, Fs:1, WS:4K # 4K, PF:0K # 0K, P:0K)\n[12] 0.000042 +J(CM:0, PgRf:42, Rd:0/0, Dy:0/0, Lg:0/0) +M(C:0K, Fs:3, WS:12K # 12K, PF:0K # 0K, P:0K)\n[13] 0.000001 +J(0)\n[14] 0.0 +J(0)\n[15] 0.000005 +J(CM:0, PgRf:1, Rd:0/0, Dy:0/0, Lg:0/0).\r\n",
        "time": "Thu Sep 24 21:17:20 2020",
        "record": "17200",
        "uid": 14
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "ESENT",
        "eventType": "INFO",
        "eventID": "105",
        "eventCategory": "1",
        "message": "SearchIndexer (1488,D,0) Windows: The database engine started a new instance (0). (Time=0 seconds)\r\n\r\n\r\n\r\nAdditional Data:\r\n\r\n\r\n\r\n\r\n\r\nInternal Timing Sequence: \n[1] 0.000678 +J(0) +M(C:0K, Fs:187, WS:732K # 732K, PF:5092K # 5092K, P:5092K)\n[2] 0.000298 +J(0) +M(C:0K, Fs:168, WS:668K # 668K, PF:396K # 396K, P:396K)\n[3] 0.000027 +J(0) +M(C:0K, Fs:12, WS:44K # 44K, PF:68K # 68K, P:68K)\n[4] 0.000087 +J(0) +M(C:0K, Fs:28, WS:112K # 112K, PF:364K # 364K, P:364K)\n[5] 0.000751 +J(0) +M(C:0K, Fs:12, WS:48K # 48K, PF:20K # 20K, P:20K)\n[6] 0.002843 +J(0) +M(C:0K, Fs:20, WS:80K # 80K, PF:12K # 12K, P:12K)\n[7] 0.001754 +J(0) +M(C:0K, Fs:272, WS:1084K # 1084K, PF:1032K # 1032K, P:1032K)\n[8] -\n[9] -\n[10] -\n[11] -\n[12] -\n[13] 0.004730 -0.000001 (1) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:616/1) +M(C:0K, Fs:8, WS:-1000K # 24K, PF:-1024K # 12K, P:-1024K)\n[14] 0.000020 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:4K # 0K, P:4K)\n[15] 0.000071 +J(0) +M(C:0K, Fs:64, WS:256K # 0K, PF:64K # 0K, P:64K)\n[16] 0.000110 +J(0) +M(C:0K, Fs:2, WS:0K # 0K, PF:0K # 0K, P:0K).\r\n",
        "time": "Thu Sep 24 21:17:20 2020",
        "record": "17199",
        "uid": 15
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "ESENT",
        "eventType": "INFO",
        "eventID": "102",
        "eventCategory": "1",
        "message": "SearchIndexer (1488,P,98) Windows: The database engine (10.00.19041.0000) is starting a new instance (0).\r\n",
        "time": "Thu Sep 24 21:17:20 2020",
        "record": "17198",
        "uid": 16
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Microsoft-Windows-RestartManager",
        "eventType": "INFO",
        "eventID": "10001",
        "eventCategory": "0",
        "message": "Ending session 2 started 2020-09-25T04:16:36.2427858Z.\r\n",
        "time": "Thu Sep 24 21:16:37 2020",
        "record": "17197",
        "uid": 17
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Microsoft-Windows-RestartManager",
        "eventType": "INFO",
        "eventID": "10000",
        "eventCategory": "0",
        "message": "Starting session 2 - 2020-09-25T04:16:36.2427858Z.\r\n",
        "time": "Thu Sep 24 21:16:36 2020",
        "record": "17196",
        "uid": 18
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1027",
        "eventCategory": "0",
        "message": "Killing PID 7828 in process tree of PID 7828 because service salt-minion is stopping.\r\n",
        "time": "Thu Sep 24 21:14:17 2020",
        "record": "17195",
        "uid": 19
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1023",
        "eventCategory": "0",
        "message": "Killing process tree of process 7828 for service salt-minion with exit code 0\r\n",
        "time": "Thu Sep 24 21:14:17 2020",
        "record": "17194",
        "uid": 20
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1011",
        "eventCategory": "0",
        "message": "Killing process c:\\salt\\bin\\python.exe because service salt-minion is stopping.\r\n",
        "time": "Thu Sep 24 21:14:16 2020",
        "record": "17193",
        "uid": 21
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1040",
        "eventCategory": "0",
        "message": "Service salt-minion received STOP control, which will be handled.\r\n",
        "time": "Thu Sep 24 21:14:16 2020",
        "record": "17192",
        "uid": 22
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1027",
        "eventCategory": "0",
        "message": "Killing PID 5652 in process tree of PID 5652 because service checkrunner is stopping.\r\n",
        "time": "Thu Sep 24 21:14:09 2020",
        "record": "17191",
        "uid": 23
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1023",
        "eventCategory": "0",
        "message": "Killing process tree of process 5652 for service checkrunner with exit code 4294967295\r\n",
        "time": "Thu Sep 24 21:14:09 2020",
        "record": "17190",
        "uid": 24
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1011",
        "eventCategory": "0",
        "message": "Killing process C:\\Program Files\\TacticalAgent\\tacticalrmm.exe because service checkrunner is stopping.\r\n",
        "time": "Thu Sep 24 21:14:09 2020",
        "record": "17189",
        "uid": 25
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1040",
        "eventCategory": "0",
        "message": "Service checkrunner received STOP control, which will be handled.\r\n",
        "time": "Thu Sep 24 21:14:09 2020",
        "record": "17188",
        "uid": 26
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1027",
        "eventCategory": "0",
        "message": "Killing PID 8608 in process tree of PID 8608 because service tacticalagent is stopping.\r\n",
        "time": "Thu Sep 24 21:14:09 2020",
        "record": "17187",
        "uid": 27
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1023",
        "eventCategory": "0",
        "message": "Killing process tree of process 8608 for service tacticalagent with exit code 4294967295\r\n",
        "time": "Thu Sep 24 21:14:09 2020",
        "record": "17186",
        "uid": 28
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1011",
        "eventCategory": "0",
        "message": "Killing process C:\\Program Files\\TacticalAgent\\tacticalrmm.exe because service tacticalagent is stopping.\r\n",
        "time": "Thu Sep 24 21:14:08 2020",
        "record": "17185",
        "uid": 29
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "nssm",
        "eventType": "INFO",
        "eventID": "1040",
        "eventCategory": "0",
        "message": "Service tacticalagent received STOP control, which will be handled.\r\n",
        "time": "Thu Sep 24 21:14:08 2020",
        "record": "17184",
        "uid": 30
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "VSS",
        "eventType": "INFO",
        "eventID": "8224",
        "eventCategory": "0",
        "message": "The VSS service is shutting down due to idle timeout.\r\n\r\n",
        "time": "Thu Sep 24 21:11:00 2020",
        "record": "17183",
        "uid": 31
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Microsoft-Windows-System-Restore",
        "eventType": "INFO",
        "eventID": "8302",
        "eventCategory": "0",
        "message": "Scoping successfully completed for shadowcopy \\\\?\\GLOBALROOT\\Device\\HarddiskVolumeShadowCopy4.\r\n",
        "time": "Thu Sep 24 21:08:00 2020",
        "record": "17182",
        "uid": 32
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Microsoft-Windows-System-Restore",
        "eventType": "INFO",
        "eventID": "8301",
        "eventCategory": "0",
        "message": "Scoping completed for shadowcopy \\\\?\\GLOBALROOT\\Device\\HarddiskVolumeShadowCopy4.\r\n",
        "time": "Thu Sep 24 21:08:00 2020",
        "record": "17181",
        "uid": 33
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Microsoft-Windows-System-Restore",
        "eventType": "INFO",
        "eventID": "8300",
        "eventCategory": "0",
        "message": "Scoping started for shadowcopy \\\\?\\GLOBALROOT\\Device\\HarddiskVolumeShadowCopy4.\r\n",
        "time": "Thu Sep 24 21:07:54 2020",
        "record": "17180",
        "uid": 34
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "System Restore",
        "eventType": "INFO",
        "eventID": "8212",
        "eventCategory": "0",
        "message": "Successfully created scheduled restore point.\r\n",
        "time": "Thu Sep 24 21:07:48 2020",
        "record": "17179",
        "uid": 35
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "System Restore",
        "eventType": "INFO",
        "eventID": "8194",
        "eventCategory": "0",
        "message": "Successfully created restore point (Process = C:\\WINDOWS\\system32\\srtasks.exe ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint).\r\n",
        "time": "Thu Sep 24 21:07:48 2020",
        "record": "17178",
        "uid": 36
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "ESENT",
        "eventType": "WARNING",
        "eventID": "642",
        "eventCategory": "1",
        "message": "Catalog Database (4696,D,12) Catalog Database: The database format feature version 9080 (0x2378) could not be used due to the current database format 1568.20.0, controlled by the parameter 0x410022D8 (8920 | JET_efvAllowHigherPersistedFormat).\r\n",
        "time": "Thu Sep 24 21:07:47 2020",
        "record": "17177",
        "uid": 37
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "ESENT",
        "eventType": "WARNING",
        "eventID": "642",
        "eventCategory": "1",
        "message": "Catalog Database (4696,D,12) Catalog Database: The database format feature version 9080 (0x2378) could not be used due to the current database format 1568.20.0, controlled by the parameter 0x410022D8 (8920 | JET_efvAllowHigherPersistedFormat).\r\n",
        "time": "Thu Sep 24 21:07:47 2020",
        "record": "17176",
        "uid": 38
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-25T05:44:19Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 21:03:19 2020",
        "record": "17175",
        "uid": 39
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 21:02:48 2020",
        "record": "17174",
        "uid": 40
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-25T05:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 20:45:16 2020",
        "record": "17173",
        "uid": 41
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 20:44:46 2020",
        "record": "17172",
        "uid": 42
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 20:44:16 2020",
        "record": "17171",
        "uid": 43
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-25T03:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 18:45:16 2020",
        "record": "17170",
        "uid": 44
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 18:44:46 2020",
        "record": "17169",
        "uid": 45
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 18:43:46 2020",
        "record": "17168",
        "uid": 46
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "gupdate",
        "eventType": "INFO",
        "eventID": "0",
        "eventCategory": "0",
        "message": "The description for Event ID ( 0 ) in Source ( 'gupdate' ) could not be found. It contains the following insertion string(s):'Service stopped'.",
        "time": "Thu Sep 24 17:08:37 2020",
        "record": "17167",
        "uid": 47
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-25T01:43:46Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 17:00:46 2020",
        "record": "17166",
        "uid": 48
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 17:00:01 2020",
        "record": "17165",
        "uid": 49
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-25T01:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 16:45:16 2020",
        "record": "17164",
        "uid": 50
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 16:44:46 2020",
        "record": "17163",
        "uid": 51
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 16:44:16 2020",
        "record": "17162",
        "uid": 52
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T23:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 14:45:16 2020",
        "record": "17161",
        "uid": 53
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 14:44:46 2020",
        "record": "17160",
        "uid": 54
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 14:44:03 2020",
        "record": "17159",
        "uid": 55
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T21:44:03Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 12:49:03 2020",
        "record": "17158",
        "uid": 56
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 12:47:39 2020",
        "record": "17157",
        "uid": 57
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T21:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 12:45:16 2020",
        "record": "17156",
        "uid": 58
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 12:44:46 2020",
        "record": "17155",
        "uid": 59
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 12:43:47 2020",
        "record": "17154",
        "uid": 60
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T19:43:47Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 12:22:47 2020",
        "record": "17153",
        "uid": 61
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 12:22:16 2020",
        "record": "17152",
        "uid": 62
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "gupdate",
        "eventType": "INFO",
        "eventID": "0",
        "eventCategory": "0",
        "message": "The description for Event ID ( 0 ) in Source ( 'gupdate' ) could not be found. It contains the following insertion string(s):'Service stopped'.",
        "time": "Thu Sep 24 12:08:45 2020",
        "record": "17151",
        "uid": 63
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T19:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 10:45:16 2020",
        "record": "17150",
        "uid": 64
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 10:44:46 2020",
        "record": "17149",
        "uid": 65
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 10:44:16 2020",
        "record": "17148",
        "uid": 66
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T17:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 08:45:16 2020",
        "record": "17147",
        "uid": 67
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 08:44:46 2020",
        "record": "17146",
        "uid": 68
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 08:44:16 2020",
        "record": "17145",
        "uid": 69
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T15:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 07:51:16 2020",
        "record": "17144",
        "uid": 70
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 07:50:46 2020",
        "record": "17143",
        "uid": 71
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T15:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 06:45:16 2020",
        "record": "17142",
        "uid": 72
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 06:44:46 2020",
        "record": "17141",
        "uid": 73
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 06:44:26 2020",
        "record": "17140",
        "uid": 74
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "gupdate",
        "eventType": "INFO",
        "eventID": "0",
        "eventCategory": "0",
        "message": "The description for Event ID ( 0 ) in Source ( 'gupdate' ) could not be found. It contains the following insertion string(s):'Service stopped'.",
        "time": "Thu Sep 24 06:08:17 2020",
        "record": "17139",
        "uid": 75
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1042",
        "eventCategory": "0",
        "message": "Ending a Windows Installer transaction: {AC76BA86-1033-FFFF-7760-0C0F074E4100}. Client Process Id: 5196.\r\n",
        "time": "Thu Sep 24 05:58:33 2020",
        "record": "17138",
        "uid": 76
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1035",
        "eventCategory": "0",
        "message": "Windows Installer reconfigured the product. Product Name: Adobe Acrobat DC. Product Version: 20.012.20048. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Reconfiguration success or error status: 0.\r\n",
        "time": "Thu Sep 24 05:58:33 2020",
        "record": "17137",
        "uid": 77
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "11728",
        "eventCategory": "0",
        "message": "Product: Adobe Acrobat DC -- Configuration completed successfully.\r\n",
        "time": "Thu Sep 24 05:58:33 2020",
        "record": "17136",
        "uid": 78
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1036",
        "eventCategory": "0",
        "message": "Windows Installer installed an update. Product Name: Adobe Acrobat DC. Product Version: 20.012.20048. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Update Name: Adobe Acrobat DC\n (20.012.20048). Installation success or error status: 0.\r\n",
        "time": "Thu Sep 24 05:58:33 2020",
        "record": "17135",
        "uid": 79
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1022",
        "eventCategory": "0",
        "message": "Product: Adobe Acrobat DC - Update 'Adobe Acrobat DC\n (20.012.20048)' installed successfully.\r\n",
        "time": "Thu Sep 24 05:58:33 2020",
        "record": "17134",
        "uid": 80
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "AdobeARMservice",
        "eventType": "INFO",
        "eventID": "0",
        "eventCategory": "0",
        "message": "The description for Event ID ( 0 ) in Source ( 'AdobeARMservice' ) could not be found. It contains the following insertion string(s):'Service started'.",
        "time": "Thu Sep 24 05:58:32 2020",
        "record": "17133",
        "uid": 81
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "ESENT",
        "eventType": "INFO",
        "eventID": "103",
        "eventCategory": "1",
        "message": "SearchIndexer (5036,T,97) Windows: The database engine stopped the instance (0).\r\n\r\n\r\n\r\nDirty Shutdown: 0\r\n\r\n\r\n\r\nInternal Timing Sequence: \n[1] 0.000003 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K)\n[2] 0.000011 +J(0)\n[3] 0.000551 +J(CM:0, PgRf:11, Rd:0/0, Dy:0/22, Lg:548/19) +M(C:0K, Fs:39, WS:156K # 0K, PF:84K # 0K, P:84K)\n[4] 0.000003 +J(0)\n[5] 0.032553 -0.000005 (46) CM -0.028504 (6) WT +J(CM:46, PgRf:0, Rd:0/46, Dy:0/0, Lg:0/0) +M(C:0K, Fs:290, WS:444K # 0K, PF:0K # 0K, P:0K)\n[6] 0.000710 +J(0) +M(C:0K, Fs:4, WS:-2784K # 0K, PF:-3968K # 0K, P:-3968K)\n[7] 0.000010 +J(0)\n[8] 0.004002 -0.002574 (12) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:2274/2) +M(C:0K, Fs:32, WS:-364K # 0K, PF:-432K # 0K, P:-432K)\n[9] 0.000169 -0.000131 (1) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:66/1) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K)\n[10] 0.000002 +J(0)\n[11] 0.000544 -0.000203 (2) WT +J(0)\n[12] 0.000037 +J(0) +M(C:0K, Fs:2, WS:4K # 0K, PF:-4K # 0K, P:-4K)\n[13] 0.000137 +J(0)\n[14] 0.000027 +J(0) +M(C:0K, Fs:0, WS:-156K # 0K, PF:-160K # 0K, P:-160K)\n[15] 0.000002 +J(0).\r\n",
        "time": "Thu Sep 24 05:57:59 2020",
        "record": "17132",
        "uid": 82
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Windows Search Service",
        "eventType": "INFO",
        "eventID": "1013",
        "eventCategory": "1",
        "message": "Windows Search Service stopped normally.\n\r\n",
        "time": "Thu Sep 24 05:57:59 2020",
        "record": "17131",
        "uid": 83
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1040",
        "eventCategory": "0",
        "message": "Beginning a Windows Installer transaction: {AC76BA86-1033-FFFF-7760-0C0F074E4100}. Client Process Id: 5196.\r\n",
        "time": "Thu Sep 24 05:57:41 2020",
        "record": "17130",
        "uid": 84
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1042",
        "eventCategory": "0",
        "message": "Ending a Windows Installer transaction: {AC76BA86-1033-FFFF-7760-0C0F074E4100}. Client Process Id: 1588.\r\n",
        "time": "Thu Sep 24 05:57:35 2020",
        "record": "17129",
        "uid": 85
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1035",
        "eventCategory": "0",
        "message": "Windows Installer reconfigured the product. Product Name: Adobe Acrobat DC. Product Version: 20.012.20048. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Reconfiguration success or error status: 1602.\r\n",
        "time": "Thu Sep 24 05:57:35 2020",
        "record": "17128",
        "uid": 86
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "11729",
        "eventCategory": "0",
        "message": "Product: Adobe Acrobat DC -- Configuration failed.\r\n",
        "time": "Thu Sep 24 05:57:35 2020",
        "record": "17127",
        "uid": 87
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1040",
        "eventCategory": "0",
        "message": "Beginning a Windows Installer transaction: {AC76BA86-1033-FFFF-7760-0C0F074E4100}. Client Process Id: 1588.\r\n",
        "time": "Thu Sep 24 05:57:24 2020",
        "record": "17126",
        "uid": 88
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1042",
        "eventCategory": "0",
        "message": "Ending a Windows Installer transaction: C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\Arm_001824399311_6740999541938448538661022578104942738.msi. Client Process Id: 6460.\r\n",
        "time": "Thu Sep 24 05:57:01 2020",
        "record": "17125",
        "uid": 89
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1033",
        "eventCategory": "0",
        "message": "Windows Installer installed the product. Product Name: Adobe Refresh Manager. Product Version: 1.8.0. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Installation success or error status: 0.\r\n",
        "time": "Thu Sep 24 05:57:01 2020",
        "record": "17124",
        "uid": 90
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "11707",
        "eventCategory": "0",
        "message": "Product: Adobe Refresh Manager -- Installation operation completed successfully.\r\n",
        "time": "Thu Sep 24 05:57:01 2020",
        "record": "17123",
        "uid": 91
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "AdobeARMservice",
        "eventType": "INFO",
        "eventID": "0",
        "eventCategory": "0",
        "message": "The description for Event ID ( 0 ) in Source ( 'AdobeARMservice' ) could not be found. It contains the following insertion string(s):'Service started'.",
        "time": "Thu Sep 24 05:57:01 2020",
        "record": "17122",
        "uid": 92
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "MsiInstaller",
        "eventType": "INFO",
        "eventID": "1040",
        "eventCategory": "0",
        "message": "Beginning a Windows Installer transaction: C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\Arm_001824399311_6740999541938448538661022578104942738.msi. Client Process Id: 6460.\r\n",
        "time": "Thu Sep 24 05:56:57 2020",
        "record": "17121",
        "uid": 93
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T13:44:26Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 05:05:26 2020",
        "record": "17120",
        "uid": 94
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Office 2016 Licensing Service",
        "eventType": "ERROR",
        "eventID": "0",
        "eventCategory": "0",
        "message": "The description for Event ID ( 0 ) in Source ( 'Office 2016 Licensing Service' ) could not be found. It contains the following insertion string(s):'Subscription licensing service failed: -1073418154'.",
        "time": "Thu Sep 24 05:04:56 2020",
        "record": "17119",
        "uid": 95
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "1003",
        "eventCategory": "0",
        "message": "The Software Protection service has completed licensing status check.\r\nApplication Id=0ff1ce15-a989-479d-af46-f275c6370663\r\nLicensing Status=\n1: c47456e3-265d-47b6-8ca0-c30abbd0ca36, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]\n2: d450596f-894d-49e0-966a-fd39ed4c4c64, 1, 1 [(0 [0xC004E003, 0, 0], [( 2 0xC004F056 0 0 msft:rm/algorithm/volume/1.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F056 0 0 msft:rm/algorithm/volume/1.0 0x00000000 0)(?)(?)(?)(?)])(1 )(2 )(3 [0x00000000, 0, 0], [( 6 0xC004F009 30 0)( 1 0x00000000)( 6 0xC004F009 30 0)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)( 11 0x00000000 0xC004F056)])]\n\n\r\n",
        "time": "Thu Sep 24 05:04:56 2020",
        "record": "17118",
        "uid": 96
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 05:04:56 2020",
        "record": "17117",
        "uid": 97
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T13:44:09Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 04:58:09 2020",
        "record": "17116",
        "uid": 98
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 04:57:38 2020",
        "record": "17115",
        "uid": 99
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T13:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 04:45:16 2020",
        "record": "17114",
        "uid": 100
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 04:44:46 2020",
        "record": "17113",
        "uid": 101
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 04:44:34 2020",
        "record": "17112",
        "uid": 102
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T11:44:34Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 04:12:34 2020",
        "record": "17111",
        "uid": 103
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 04:12:01 2020",
        "record": "17110",
        "uid": 104
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T11:44:10Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 03:31:10 2020",
        "record": "17109",
        "uid": 105
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 03:30:38 2020",
        "record": "17108",
        "uid": 106
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T11:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 02:45:16 2020",
        "record": "17107",
        "uid": 107
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 02:44:46 2020",
        "record": "17106",
        "uid": 108
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 02:44:22 2020",
        "record": "17105",
        "uid": 109
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T09:44:22Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 01:32:22 2020",
        "record": "17104",
        "uid": 110
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 01:31:52 2020",
        "record": "17103",
        "uid": 111
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "gupdate",
        "eventType": "INFO",
        "eventID": "0",
        "eventCategory": "0",
        "message": "The description for Event ID ( 0 ) in Source ( 'gupdate' ) could not be found. It contains the following insertion string(s):'Service stopped'.",
        "time": "Thu Sep 24 01:08:57 2020",
        "record": "17102",
        "uid": 112
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T09:44:40Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 01:00:40 2020",
        "record": "17101",
        "uid": 113
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 01:00:01 2020",
        "record": "17100",
        "uid": 114
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16384",
        "eventCategory": "0",
        "message": "Successfully scheduled Software Protection service for re-start at 2020-09-24T09:44:16Z. Reason: RulesEngine.\r\n",
        "time": "Thu Sep 24 00:45:16 2020",
        "record": "17099",
        "uid": 115
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "WARNING",
        "eventID": "8233",
        "eventCategory": "0",
        "message": "The rules engine reported a failed VL activation attempt.\r\nReason:0x8007007B\r\nAppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64\r\nTrigger=TimerEvent\r\n",
        "time": "Thu Sep 24 00:44:46 2020",
        "record": "17098",
        "uid": 116
    },
    {
        "computer": "DESKTOP-TEST123",
        "source": "Software Protection Platform Service",
        "eventType": "INFO",
        "eventID": "16394",
        "eventCategory": "0",
        "message": "Offline downlevel migration succeeded.\r\n",
        "time": "Thu Sep 24 00:44:07 2020",
        "record": "17097",
        "uid": 117
    }
]