2022/03/23 13:47:06.909820 Starting Zabbix Agent 2 []. (5.0.21) 2022/03/23 13:47:06.943492 OpenSSL library (OpenSSL 1.1.1k 25 Mar 2021) initialized 2022/03/23 13:47:06.943492 default context ciphersuites: TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256 ECDHE-PSK-AES128-CBC-SHA256 ECDHE-PSK-AES128-CBC-SHA PSK-AES128-GCM-SHA256 PSK-AES128-CCM8 PSK-AES128-CCM PSK-AES128-CBC-SHA256 PSK-AES128-CBC-SHA 2022/03/23 13:47:06.943996 psk context ciphersuites: TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256 ECDHE-PSK-AES128-CBC-SHA256 ECDHE-PSK-AES128-CBC-SHA PSK-AES128-GCM-SHA256 PSK-AES128-CCM8 PSK-AES128-CCM PSK-AES128-CBC-SHA256 PSK-AES128-CBC-SHA 2022/03/23 13:47:06.944352 using configuration file: C:\zabbix\zabbix_agent2.conf 2022/03/23 13:47:06.944874 using plugin 'Agent' providing following interfaces: exporter 2022/03/23 13:47:06.944874 using plugin 'Ceph' providing following interfaces: exporter, runner, configurator 2022/03/23 13:47:06.944874 using plugin 'Cpu' providing following interfaces: exporter, collector, runner 2022/03/23 13:47:06.945389 using plugin 'DNS' providing following interfaces: exporter 2022/03/23 13:47:06.945389 using plugin 'File' providing following interfaces: exporter, configurator 2022/03/23 13:47:06.945389 using plugin 'Log' providing following interfaces: exporter, configurator 2022/03/23 13:47:06.945389 using plugin 'Memcached' providing following interfaces: exporter, runner, configurator 2022/03/23 13:47:06.945907 using plugin 'Memory' providing following interfaces: exporter 2022/03/23 13:47:06.945907 using plugin 'Mongo' providing following interfaces: exporter, runner, configurator 2022/03/23 13:47:06.945907 using plugin 'Mysql' providing following interfaces: exporter, runner, configurator 2022/03/23 13:47:06.945907 using plugin 'NetIf' providing following interfaces: exporter 2022/03/23 13:47:06.945907 using plugin 'Oracle' providing following interfaces: exporter, runner, configurator 2022/03/23 13:47:06.946420 using plugin 'Postgres' providing following interfaces: exporter, runner, configurator 2022/03/23 13:47:06.946420 using plugin 'Proc' providing following interfaces: exporter 2022/03/23 13:47:06.946420 using plugin 'Redis' providing following interfaces: exporter, runner, configurator 2022/03/23 13:47:06.946923 using plugin 'Smart' providing following interfaces: exporter, configurator 2022/03/23 13:47:06.947061 using plugin 'Swap' providing following interfaces: exporter 2022/03/23 13:47:06.947061 using plugin 'SystemRun' providing following interfaces: exporter, configurator 2022/03/23 13:47:06.947061 using plugin 'TCP' providing following interfaces: exporter, configurator 2022/03/23 13:47:06.947579 using plugin 'UDP' providing following interfaces: exporter, configurator 2022/03/23 13:47:06.947579 using plugin 'Uname' providing following interfaces: exporter 2022/03/23 13:47:06.947579 using plugin 'Uptime' providing following interfaces: exporter 2022/03/23 13:47:06.947579 using plugin 'UserParameter' providing following interfaces: exporter 2022/03/23 13:47:06.948092 using plugin 'Users' providing following interfaces: exporter, configurator 2022/03/23 13:47:06.948092 using plugin 'VFSDir' providing following interfaces: exporter 2022/03/23 13:47:06.948092 using plugin 'VMemory' providing following interfaces: exporter 2022/03/23 13:47:06.948092 using plugin 'VfsFs' providing following interfaces: exporter 2022/03/23 13:47:06.948610 using plugin 'WebCertificate' providing following interfaces: exporter, configurator 2022/03/23 13:47:06.948610 using plugin 'WebPage' providing following interfaces: exporter, configurator 2022/03/23 13:47:06.948610 using plugin 'WindowsEventlog' providing following interfaces: exporter, configurator 2022/03/23 13:47:06.948610 using plugin 'WindowsPerfInstance' providing following interfaces: exporter 2022/03/23 13:47:06.948610 using plugin 'WindowsPerfMon' providing following interfaces: exporter, collector, runner 2022/03/23 13:47:06.949127 using plugin 'WindowsServices' providing following interfaces: exporter 2022/03/23 13:47:06.949127 using plugin 'Wmi' providing following interfaces: exporter 2022/03/23 13:47:06.949127 using plugin 'ZabbixAsync' providing following interfaces: exporter 2022/03/23 13:47:06.949127 using plugin 'ZabbixStats' providing following interfaces: exporter, configurator 2022/03/23 13:47:07.493427 starting manager 2022/03/23 13:47:08.020523 [0] processing update request (1 requests) 2022/03/23 13:47:08.020523 [0] registering new client 2022/03/23 13:47:08.020523 [0] adding new request for key: 'system.hostname' 2022/03/23 13:47:08.020523 [0] created direct exporter task for plugin 'Uname' itemid:0 key 'system.hostname' 2022/03/23 13:47:08.020523 executing direct exporter task for key 'system.hostname' 2022/03/23 13:47:08.020523 executed direct exporter task for key 'system.hostname' 2022/03/23 13:47:08.020523 [101] starting disk cache 2022/03/23 13:47:08.020523 [101] starting server connector for 'zabbix.contoso.lan:15051' 2022/03/23 13:47:08.020523 [102] starting disk cache 2022/03/23 13:47:08.020523 [102] starting server connector for 'zabbix.contoso.lan:16051' 2022/03/23 13:47:08.020523 listening for control connections on \\.\pipe\agent.sock 2022/03/23 13:47:08.020523 [0] starting listener for '0.0.0.0:10050' 2022/03/23 13:47:09.026508 [102] In refreshActiveChecks() from [zabbix.contoso.lan:16051] 2022/03/23 13:47:09.026508 [101] In refreshActiveChecks() from [zabbix.contoso.lan:15051] 2022/03/23 13:47:09.026508 [0] processing update request (1 requests) 2022/03/23 13:47:09.026508 [0] adding new request for key: 'system.uname' 2022/03/23 13:47:09.026508 [0] created direct exporter task for plugin 'Uname' itemid:0 key 'system.uname' 2022/03/23 13:47:09.026508 [0] processing update request (1 requests) 2022/03/23 13:47:09.026508 [0] adding new request for key: 'system.uname' 2022/03/23 13:47:09.026508 [0] created direct exporter task for plugin 'Uname' itemid:0 key 'system.uname' 2022/03/23 13:47:09.026508 executing direct exporter task for key 'system.uname' 2022/03/23 13:47:09.026508 executing direct exporter task for key 'system.uname' 2022/03/23 13:47:09.079524 executed direct exporter task for key 'system.uname' 2022/03/23 13:47:09.080041 connecting to [zabbix.contoso.lan:15051] 2022/03/23 13:47:09.092059 executed direct exporter task for key 'system.uname' 2022/03/23 13:47:09.092059 connecting to [zabbix.contoso.lan:16051] 2022/03/23 13:47:09.122339 sending [{"request":"active checks","host":"ZBX-5CG5525BYB","version":"5.0","host_metadata":"Windows ZBX-5CG5525BYB 10.0.19042 Microsoft Windows 10 Business x64"}] to [zabbix.contoso.lan:15051] 2022/03/23 13:47:09.122923 receiving data from [zabbix.contoso.lan:15051] 2022/03/23 13:47:09.127725 sending [{"request":"active checks","host":"ZBX-5CG5525BYB","version":"5.0","host_metadata":"Windows ZBX-5CG5525BYB 10.0.19042 Microsoft Windows 10 Business x64"}] to [zabbix.contoso.lan:16051] 2022/03/23 13:47:09.128259 receiving data from [zabbix.contoso.lan:16051] 2022/03/23 13:47:09.186701 received [{"response":"success","data":[{"key":"eventlog[Application,,\"Warning|Error|Critical\",@ApplicationExcludeSource]","itemid":259093,"delay":"1s","lastlogsize":20740,"mtime":0}],"refresh_unsupported":86400,"regexp":[{"name":"ApplicationExcludeSource","expression":"Zabbix Agent","expression_type":4,"exp_delimiter":",","case_sensitive":0},{"name":"ApplicationExcludeSource","expression":"Microsoft\\-Windows\\-Perflib","expression_type":4,"exp_delimiter":",","case_sensitive":0}]}] from [zabbix.contoso.lan:15051] 2022/03/23 13:47:09.187229 [101] End of refreshActiveChecks() from [zabbix.contoso.lan:15051] 2022/03/23 13:47:09.187229 [101] processing update request (1 requests) 2022/03/23 13:47:09.187758 [101] registering new client 2022/03/23 13:47:09.187758 [101] adding new request for key: 'eventlog[Application,,"Warning|Error|Critical",@ApplicationExcludeSource]' 2022/03/23 13:47:09.188261 [101] created exporter task for plugin 'WindowsEventlog' itemid:259093 key 'eventlog[Application,,"Warning|Error|Critical",@ApplicationExcludeSource]' 2022/03/23 13:47:09.188261 [101] created configurator task for plugin WindowsEventlog 2022/03/23 13:47:09.188261 plugin WindowsEventlog: executing configurator task 2022/03/23 13:47:09.192737 received [{"response":"success","data":[{"key":"eventlog[Application,,\"Warning|Error|Critical\",@ApplicationExcludeSource]","itemid":44989,"delay":"1s","lastlogsize":0,"mtime":0}],"refresh_unsupported":600,"regexp":[{"name":"ApplicationExcludeSource","expression":"Zabbix Agent","expression_type":4,"exp_delimiter":"","case_sensitive":0},{"name":"ApplicationExcludeSource","expression":"Microsoft\\-Windows\\-Perflib","expression_type":4,"exp_delimiter":"","case_sensitive":0}]}] from [zabbix.contoso.lan:16051] 2022/03/23 13:47:09.193256 [102] cannot parse list of active checks from [zabbix.contoso.lan:16051]: invalid tag "exp_delimiter" value "" 2022/03/23 13:47:09.193256 [102] End of refreshActiveChecks() from [zabbix.contoso.lan:16051] 2022/03/23 13:47:10.030845 executing exporter task for itemid:259093 key 'eventlog[Application,,"Warning|Error|Critical",@ApplicationExcludeSource]' 2022/03/23 13:47:10.030845 In initialize_eventlog6() source:'Application' previous lastlogsize:20740 2022/03/23 13:47:10.030845 In zbx_open_eventlog6() lastlogsize:20740 2022/03/23 13:47:10.030845 In get_eventlog6_id() 2022/03/23 13:47:10.030845 End of get_eventlog6_id():SUCCEED id:823083923952 2022/03/23 13:47:10.030845 In get_eventlog6_id() 2022/03/23 13:47:10.030845 End of get_eventlog6_id():SUCCEED id:823083923960 2022/03/23 13:47:10.030845 End of zbx_open_eventlog6():SUCCEED FirstID:15301 LastID:44305 2022/03/23 13:47:10.030845 In zbx_get_handle_eventlog6(), previous lastlogsize:20740 2022/03/23 13:47:10.030845 End of zbx_get_handle_eventlog6():SUCCEED 2022/03/23 13:47:10.030845 End of initialize_eventlog6():SUCCEED 2022/03/23 13:47:10.030845 In process_eventslog6() source: 'Application' previous lastlogsize: 20740, FirstID: 15301, LastID: 44305 2022/03/23 13:47:10.088222 In zbx_parse_eventlog_message6() EventRecordID:20741 2022/03/23 13:47:10.088222 In expand_message6() 2022/03/23 13:47:10.089299 End of expand_message6():Windows Search Service stopped normally. 2022/03/23 13:47:10.089299 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.089299 In zbx_parse_eventlog_message6() EventRecordID:20742 2022/03/23 13:47:10.089811 In expand_message6() 2022/03/23 13:47:10.090879 End of expand_message6():Beginning a Windows Installer transaction: c:\program files (x86)\microsoft office\root\integration\c2rint.16.msi. Client Process Id: 944. 2022/03/23 13:47:10.090879 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.090879 In zbx_parse_eventlog_message6() EventRecordID:20743 2022/03/23 13:47:10.090879 In expand_message6() 2022/03/23 13:47:10.091924 End of expand_message6():Product: Office 16 Click-to-Run Extensibility Component -- Configuration completed successfully. 2022/03/23 13:47:10.092441 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.092441 In zbx_parse_eventlog_message6() EventRecordID:20744 2022/03/23 13:47:10.092441 In expand_message6() 2022/03/23 13:47:10.094035 End of expand_message6():Windows Installer reconfigured the product. Product Name: Office 16 Click-to-Run Extensibility Component. Product Version: 16.0.14326.20238. Product Language: 0. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0. 2022/03/23 13:47:10.094035 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.094035 In zbx_parse_eventlog_message6() EventRecordID:20745 2022/03/23 13:47:10.094035 In expand_message6() 2022/03/23 13:47:10.095090 End of expand_message6():Ending a Windows Installer transaction: c:\program files (x86)\microsoft office\root\integration\c2rint.16.msi. Client Process Id: 944. 2022/03/23 13:47:10.095601 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.095601 In zbx_parse_eventlog_message6() EventRecordID:20746 2022/03/23 13:47:10.095601 In expand_message6() 2022/03/23 13:47:10.096652 End of expand_message6():SearchIndexer (9016,P,98) Windows: The database engine (10.00.19042.0000) is starting a new instance (0). 2022/03/23 13:47:10.097172 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.097184 In zbx_parse_eventlog_message6() EventRecordID:20747 2022/03/23 13:47:10.097184 In expand_message6() 2022/03/23 13:47:10.098237 End of expand_message6():SearchIndexer (9016,D,0) Windows: The database engine started a new instance (0). (Time=0 seconds) Additional Data: Internal Timing Sequence: [1] 0.001190 +J(0) +M(C:0K, Fs:207, WS:808K # 808K, PF:5092K # 5092K, P:5092K) [2] 0.000475 +J(0) +M(C:0K, Fs:165, WS:660K # 660K, PF:404K # 404K, P:404K) [3] 0.000041 +J(0) +M(C:0K, Fs:11, WS:40K # 40K, PF:68K # 68K, P:68K) [4] 0.000135 +J(0) +M(C:0K, Fs:25, WS:100K # 100K, PF:356K # 356K, P:356K) [5] 0.001630 +J(0) +M(C:0K, Fs:8, WS:32K # 32K, PF:20K # 20K, P:20K) [6] 0.002642 +J(0) +M(C:0K, Fs:26, WS:100K # 100K, PF:16K # 16K, P:16K) [7] 0.002175 -0.000002 (2) WT +J(0) +M(C:0K, Fs:276, WS:1104K # 1104K, PF:1028K # 1028K, P:1028K) [8] - [9] - [10] - [11] - [12] - [13] 0.006361 -0.000002 (2) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:616/1) +M(C:0K, Fs:8, WS:-1000K # 20K, PF:-1020K # 12K, P:-1020K) [14] 0.000020 +J(0) [15] 0.000108 +J(0) +M(C:0K, Fs:65, WS:260K # 0K, PF:64K # 0K, P:64K) [16] 0.000229 +J(0) +M(C:0K, Fs:3, WS:4K # 0K, PF:0K # 0K, P:0K). 2022/03/23 13:47:10.098739 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.098757 In zbx_parse_eventlog_message6() EventRecordID:20748 2022/03/23 13:47:10.098757 In expand_message6() 2022/03/23 13:47:10.100537 End of expand_message6():SearchIndexer (9016,D,50) Windows: The database engine attached a database (1, C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb). (Time=0 seconds) Saved Cache: 0 0 Additional Data: lgposAttach = 000005A7:0004:0268, dbv = 1568.110.240 Internal Timing Sequence: [1] 0.000006 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K) [2] 0.000315 -0.000001 (1) WT +J(0) +M(C:0K, Fs:25, WS:36K # 0K, PF:32K # 0K, P:32K) [3] 0.005105 -0.001061 (5) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:3480/2) +M(C:0K, Fs:39, WS:120K # 0K, PF:144K # 0K, P:144K) [4] 0.000161 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K) [5] - [6] - [7] - [8] 0.002322 -0.001427 (2) CM +J(CM:2, PgRf:2, Rd:14/2, Dy:0/0, Lg:54/1) +M(C:0K, Fs:44, WS:176K # 0K, PF:680K # 0K, P:680K) [9] 0.010010 -0.000611 (5) CM -0.009058 (1) WT +J(CM:5, PgRf:23, Rd:0/5, Dy:0/0, Lg:0/0) +M(C:0K, Fs:69, WS:276K # 0K, PF:288K # 192K, P:288K) [10] 0.000577 -0.000366 (1) CM +J(CM:1, PgRf:40, Rd:0/1, Dy:0/0, Lg:0/0) +M(C:0K, Fs:13, WS:52K # 0K, PF:96K # 96K, P:96K) [11] 0.000019 +J(CM:0, PgRf:1, Rd:0/0, Dy:0/0, Lg:0/0) +M(C:0K, Fs:2, WS:8K # 8K, PF:0K # 0K, P:0K) [12] 0.000061 +J(CM:0, PgRf:42, Rd:0/0, Dy:0/0, Lg:0/0) +M(C:0K, Fs:3, WS:12K # 12K, PF:0K # 0K, P:0K) [13] 0.000001 +J(0) [14] 0.0 +J(0) [15] 0.000008 +J(CM:0, PgRf:1, Rd:0/0, Dy:0/0, Lg:0/0). 2022/03/23 13:47:10.100537 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.100537 In zbx_parse_eventlog_message6() EventRecordID:20749 2022/03/23 13:47:10.101057 In expand_message6() 2022/03/23 13:47:10.102137 End of expand_message6():Beginning a Windows Installer transaction: c:\program files (x86)\microsoft office\root\integration\c2rint64.16.msi. Client Process Id: 944. 2022/03/23 13:47:10.102137 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.102662 In zbx_parse_eventlog_message6() EventRecordID:20750 2022/03/23 13:47:10.102675 In expand_message6() 2022/03/23 13:47:10.103215 End of expand_message6():The Windows Search Service started. 2022/03/23 13:47:10.103215 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.103740 In zbx_parse_eventlog_message6() EventRecordID:20751 2022/03/23 13:47:10.103752 In expand_message6() 2022/03/23 13:47:10.104820 End of expand_message6():Product: Office 16 Click-to-Run Extensibility Component 64-bit Registration -- Configuration completed successfully. 2022/03/23 13:47:10.104820 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.104820 In zbx_parse_eventlog_message6() EventRecordID:20752 2022/03/23 13:47:10.105330 In expand_message6() 2022/03/23 13:47:10.106400 End of expand_message6():Windows Installer reconfigured the product. Product Name: Office 16 Click-to-Run Extensibility Component 64-bit Registration. Product Version: 16.0.14326.20238. Product Language: 0. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0. 2022/03/23 13:47:10.106400 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.106400 In zbx_parse_eventlog_message6() EventRecordID:20753 2022/03/23 13:47:10.106400 In expand_message6() 2022/03/23 13:47:10.107472 End of expand_message6():Ending a Windows Installer transaction: c:\program files (x86)\microsoft office\root\integration\c2rint64.16.msi. Client Process Id: 944. 2022/03/23 13:47:10.108004 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.108004 In zbx_parse_eventlog_message6() EventRecordID:20754 2022/03/23 13:47:10.108004 In expand_message6() 2022/03/23 13:47:10.109044 End of expand_message6():Beginning a Windows Installer transaction: c:\program files (x86)\microsoft office\root\integration\c2rint64.16.msi. Client Process Id: 944. 2022/03/23 13:47:10.109550 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.109572 In zbx_parse_eventlog_message6() EventRecordID:20755 2022/03/23 13:47:10.109572 In expand_message6() 2022/03/23 13:47:10.110638 End of expand_message6():Product: Office 16 Click-to-Run Extensibility Component 64-bit Registration -- Configuration completed successfully. 2022/03/23 13:47:10.110638 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.111148 In zbx_parse_eventlog_message6() EventRecordID:20756 2022/03/23 13:47:10.111158 In expand_message6() 2022/03/23 13:47:10.112224 End of expand_message6():Windows Installer reconfigured the product. Product Name: Office 16 Click-to-Run Extensibility Component 64-bit Registration. Product Version: 16.0.14326.20238. Product Language: 0. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0. 2022/03/23 13:47:10.112224 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.112224 In zbx_parse_eventlog_message6() EventRecordID:20757 2022/03/23 13:47:10.112756 In expand_message6() 2022/03/23 13:47:10.113821 End of expand_message6():Ending a Windows Installer transaction: c:\program files (x86)\microsoft office\root\integration\c2rint64.16.msi. Client Process Id: 944. 2022/03/23 13:47:10.113821 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.113821 In zbx_parse_eventlog_message6() EventRecordID:20758 2022/03/23 13:47:10.113821 In expand_message6() 2022/03/23 13:47:10.114942 End of expand_message6():Beginning a Windows Installer transaction: c:\program files (x86)\microsoft office\root\integration\sppredist64.msi. Client Process Id: 944. 2022/03/23 13:47:10.115460 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.115460 In zbx_parse_eventlog_message6() EventRecordID:20759 2022/03/23 13:47:10.115460 In expand_message6() 2022/03/23 13:47:10.116530 End of expand_message6():The Software Protection service has completed licensing status check. Application Id=0ff1ce15-a989-479d-af46-f275c6370663 Licensing Status= 1: 149dbce7-a48e-44db-8364-a53386cd4580, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 3 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 45 59388)(?)(?)])(1 )(2 )(3 )] 2: 24fc428e-a37e-4996-ac66-8ea0304a152d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 3: 26b6a7ce-b174-40aa-a114-316aa56ba9fc, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 4: 28f64a3f-cf84-46da-b1e8-2dfa7750e491, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 5: 35ec6e0e-2df4-4629-9ee3-d525e806b988, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 6: 3ad61e22-e4fe-497f-bdb1-3e51bd872173, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 7: 46d2c0bd-f912-4ddc-8e67-b90eadc3f83c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 8: 4c1d1588-3088-4796-b3b2-8935f3a0d886, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 9: 52287aa3-9945-44d1-9046-7a3373666821, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 10: 537ea5b5-7d50-4876-bd38-a53a77caca32, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 11: 6e5db8a5-78e6-4953-b793-7422351afe88, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 12: 77f47589-2212-4e3b-ad27-a900ce813837, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 13: 7984d9ed-81f9-4d50-913d-317ecd863065, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 14: 7ab38a1c-a803-4ca5-8ebb-f8786c4b4faa, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 15: 86af9220-9d6f-4575-bef0-619a9a6aa005, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 16: 951c0fe6-40a8-4400-8003-eec0686ffbc4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 17: 95820f84-6e8c-4d22-b2ce-54953e9911bc, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 18: 96353198-443e-479d-9e80-9a6d72fd1a99, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 19: a8119e32-b17c-4bd3-8950-7d1853f4b412, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 20: a96f8dae-da54-4fad-bdc6-108da592707a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 21: ae9d158f-9450-4a0c-8c80-dd973c58357c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 22: b27b3d00-9a95-4fcd-a0c2-118cbd5e699b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 23: b4af11be-5f94-4d8f-9844-ce0d5e0d8680, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 24: b58a5943-16ea-420f-a611-7b230acd762c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 25: b6b47040-b38e-4be2-bf6a-dabf0c41540a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 26: c85fe025-b033-4f41-936b-b121521ba1c1, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 27: cbecb6f5-da49-4029-be25-5945ac9750b3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 28: d7279dd0-e175-49fe-a623-8fc2fc00afc4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 29: dfc5a8b0-e9fd-43f7-b4ca-d63f1e749711, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 30: e3dacc06-3bc2-4e13-8e59-8e05f3232325, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 31: e538d623-c066-433d-a6b7-e0708b1fadf7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 32: fb3540bc-a824-4c79-83da-6f6bd3ac6ccb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 33: ff02e86c-fef0-4063-b39f-74275cddd7c3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 2022/03/23 13:47:10.116530 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.116530 In zbx_parse_eventlog_message6() EventRecordID:20760 2022/03/23 13:47:10.117545 In expand_message6() 2022/03/23 13:47:10.117545 End of expand_message6():Product: Office 16 Click-to-Run Licensing Component -- Configuration completed successfully. 2022/03/23 13:47:10.117545 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.117545 In zbx_parse_eventlog_message6() EventRecordID:20761 2022/03/23 13:47:10.119065 In expand_message6() 2022/03/23 13:47:10.119065 End of expand_message6():Windows Installer reconfigured the product. Product Name: Office 16 Click-to-Run Licensing Component. Product Version: 16.0.14326.20238. Product Language: 0. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0. 2022/03/23 13:47:10.119065 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.119065 In zbx_parse_eventlog_message6() EventRecordID:20762 2022/03/23 13:47:10.119065 In expand_message6() 2022/03/23 13:47:10.119065 End of expand_message6():Ending a Windows Installer transaction: c:\program files (x86)\microsoft office\root\integration\sppredist64.msi. Client Process Id: 944. 2022/03/23 13:47:10.119065 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.119065 In zbx_parse_eventlog_message6() EventRecordID:20763 2022/03/23 13:47:10.119065 In expand_message6() 2022/03/23 13:47:10.123179 End of expand_message6():Updated Windows Defender status successfully to SECURITY_PRODUCT_STATE_ON. 2022/03/23 13:47:10.123179 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.123179 In zbx_parse_eventlog_message6() EventRecordID:20764 2022/03/23 13:47:10.123179 In expand_message6() 2022/03/23 13:47:10.123712 provider 'gupdate' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.123712 End of expand_message6():(null) 2022/03/23 13:47:10.124225 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.124225 In zbx_parse_eventlog_message6() EventRecordID:20765 2022/03/23 13:47:10.124225 In expand_message6() 2022/03/23 13:47:10.125274 End of expand_message6():Successfully scheduled Software Protection service for re-start at 2121-08-06T04:51:43Z. Reason: RulesEngine. 2022/03/23 13:47:10.125274 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.125785 In zbx_parse_eventlog_message6() EventRecordID:20766 2022/03/23 13:47:10.125785 In expand_message6() 2022/03/23 13:47:10.126310 End of expand_message6():Offline downlevel migration succeeded. 2022/03/23 13:47:10.126833 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.126833 In zbx_parse_eventlog_message6() EventRecordID:20767 2022/03/23 13:47:10.126833 In expand_message6() 2022/03/23 13:47:10.127881 End of expand_message6():Successfully scheduled Software Protection service for re-start at 2121-08-06T04:55:02Z. Reason: RulesEngine. 2022/03/23 13:47:10.127881 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.127881 In zbx_parse_eventlog_message6() EventRecordID:20768 2022/03/23 13:47:10.127881 In expand_message6() 2022/03/23 13:47:10.128912 End of expand_message6():Updated Windows Defender status successfully to SECURITY_PRODUCT_STATE_ON. 2022/03/23 13:47:10.129429 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.129429 In zbx_parse_eventlog_message6() EventRecordID:20769 2022/03/23 13:47:10.129429 In expand_message6() 2022/03/23 13:47:10.130523 End of expand_message6():Updated Windows Defender status successfully to SECURITY_PRODUCT_STATE_ON. 2022/03/23 13:47:10.131050 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.131050 In zbx_parse_eventlog_message6() EventRecordID:20770 2022/03/23 13:47:10.131050 In expand_message6() 2022/03/23 13:47:10.132628 End of expand_message6():svchost (10784,P,98) DS_Token_DB: The database engine (10.00.19042.0000) is starting a new instance (0). 2022/03/23 13:47:10.132628 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.133133 In zbx_parse_eventlog_message6() EventRecordID:20771 2022/03/23 13:47:10.133165 In expand_message6() 2022/03/23 13:47:10.134244 End of expand_message6():svchost (10784,R,98) DS_Token_DB: The database engine is initiating recovery steps. 2022/03/23 13:47:10.134244 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.134782 In zbx_parse_eventlog_message6() EventRecordID:20772 2022/03/23 13:47:10.134782 In expand_message6() 2022/03/23 13:47:10.135864 End of expand_message6():svchost (10784,R,98) DS_Token_DB: The database engine has finished replaying logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.log. Processing Stats: [1] 0.013908 -0.002456 (7) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:16224/11) +M(C:0K, Fs:72, WS:212K # 164K, PF:156K # 92K, P:156K). Log record of type 'AttachDB ' was seen most frequently (1 times) 2022/03/23 13:47:10.135864 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.135864 In zbx_parse_eventlog_message6() EventRecordID:20773 2022/03/23 13:47:10.136384 In expand_message6() 2022/03/23 13:47:10.137464 End of expand_message6():svchost (10784,U,98) DS_Token_DB: The database engine has successfully completed recovery steps. 2022/03/23 13:47:10.137464 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.137464 In zbx_parse_eventlog_message6() EventRecordID:20774 2022/03/23 13:47:10.137995 In expand_message6() 2022/03/23 13:47:10.139064 End of expand_message6():svchost (10784,D,0) DS_Token_DB: The database engine started a new instance (0). (Time=0 seconds) Additional Data: lgposV2[] = 0000001B:0001:0000 - 0000001B:0004:0039 - 0000001B:0005:0000 - 0000001B:0005:0000 (00000000:0000:0000) cReInits = 1 Internal Timing Sequence: [1] 0.001597 +J(0) +M(C:0K, Fs:220, WS:868K # 868K, PF:3308K # 3308K, P:3308K) [2] 0.000383 +J(0) +M(C:8K, Fs:97, WS:380K # 380K, PF:316K # 316K, P:316K) [3] 0.000021 +J(0) +M(C:0K, Fs:3, WS:12K # 12K, PF:64K # 64K, P:64K) [4] 0.000131 +J(0) +M(C:0K, Fs:26, WS:100K # 100K, PF:164K # 164K, P:164K) [5] 0.002113 +J(0) +M(C:0K, Fs:8, WS:32K # 32K, PF:20K # 20K, P:20K) [6] 0.005318 +J(0) +M(C:0K, Fs:27, WS:108K # 108K, PF:20K # 20K, P:20K) [7] 0.002948 -0.000609 (2) WT +J(0) +M(C:0K, Fs:35, WS:140K # 140K, PF:64K # 64K, P:64K) [8] 0.023757 -0.003362 (11) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:16224/11) +M(C:0K, Fs:129, WS:364K # 368K, PF:244K # 248K, P:244K) [9] 0.000539 +J(0) +M(C:0K, Fs:8, WS:32K # 28K, PF:0K # 0K, P:0K) [10] 0.001151 -0.000471 (1) WT +J(0) +M(C:0K, Fs:0, WS:-60K # 0K, PF:-60K # 0K, P:-60K) [11] 0.000024 +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:49/1) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K) [12] 0.003250 -0.000220 (1) WT +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K) [13] 0.075335 -0.000316 (2) CM -0.011965 (23) WT +J(CM:2, PgRf:2, Rd:0/2, Dy:0/0, Lg:8759/5) +M(C:0K, Fs:56, WS:104K # 116K, PF:212K # 216K, P:212K) [14] 0.000025 +J(0) [15] 0.000015 +J(0) [16] 0.001652 -0.000890 (1) WT +J(0) +M(C:0K, Fs:2, WS:0K # 0K, PF:0K # 0K, P:0K). 2022/03/23 13:47:10.139064 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.139064 In zbx_parse_eventlog_message6() EventRecordID:20775 2022/03/23 13:47:10.139569 In expand_message6() 2022/03/23 13:47:10.140651 End of expand_message6():svchost (10784,D,50) DS_Token_DB: The database engine attached a database (1, C:\WINDOWS\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat). (Time=0 seconds) Saved Cache: 1 0 Additional Data: lgposAttach = 0000001B:0007:0268, dbv = 1568.110.240 Internal Timing Sequence: [1] 0.000005 +J(0) [2] 0.001143 -0.000379 (1) WT +J(0) +M(C:0K, Fs:17, WS:4K # 4K, PF:4K # 0K, P:4K) [3] 0.020003 -0.009625 (6) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:3480/2) +M(C:0K, Fs:9, WS:32K # 0K, PF:28K # 0K, P:28K) [4] 0.001773 +J(0) [5] - [6] - [7] - [8] 0.000842 -0.000660 (2) CM -0.000564 (2) WT +J(CM:2, PgRf:2, Rd:4/2, Dy:0/0, Lg:54/1) +M(C:8K, Fs:5, WS:20K # 0K, PF:28K # 0K, P:28K) [9] 0.001155 -0.000820 (3) CM -0.000686 (4) WT +J(CM:3, PgRf:23, Rd:0/3, Dy:0/0, Lg:0/0) +M(C:0K, Fs:26, WS:96K # 84K, PF:196K # 196K, P:196K) [10] 0.001113 -0.000808 (3) CM -0.000690 (3) WT +J(CM:3, PgRf:40, Rd:0/3, Dy:0/0, Lg:0/0) +M(C:0K, Fs:5, WS:20K # 20K, PF:64K # 56K, P:64K) [11] 0.000245 -0.000201 (1) CM -0.000161 (1) WT +J(CM:1, PgRf:1, Rd:0/1, Dy:0/0, Lg:0/0) +M(C:0K, Fs:2, WS:8K # 8K, PF:0K # 0K, P:0K) [12] 0.000295 -0.000196 (1) CM -0.000149 (1) WT +J(CM:1, PgRf:42, Rd:0/1, Dy:0/0, Lg:0/0) +M(C:0K, Fs:6, WS:24K # 24K, PF:0K # 0K, P:0K) [13] 0.000003 +J(0) [14] 0.0 +J(0) [15] 0.000136 -0.000107 (1) CM -0.000064 (1) WT +J(CM:1, PgRf:1, Rd:0/1, Dy:0/0, Lg:0/0). 2022/03/23 13:47:10.140651 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.141164 In zbx_parse_eventlog_message6() EventRecordID:20776 2022/03/23 13:47:10.141178 In expand_message6() 2022/03/23 13:47:10.142243 End of expand_message6():Updated Windows Defender status successfully to SECURITY_PRODUCT_STATE_ON. 2022/03/23 13:47:10.142243 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.142243 In zbx_parse_eventlog_message6() EventRecordID:20777 2022/03/23 13:47:10.142776 In expand_message6() 2022/03/23 13:47:10.143308 End of expand_message6():Offline downlevel migration succeeded. 2022/03/23 13:47:10.143308 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.143845 In zbx_parse_eventlog_message6() EventRecordID:20778 2022/03/23 13:47:10.143845 In expand_message6() 2022/03/23 13:47:10.144377 End of expand_message6():Successfully scheduled Software Protection service for re-start at 2121-08-06T05:01:09Z. Reason: RulesEngine. 2022/03/23 13:47:10.144910 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.144910 In zbx_parse_eventlog_message6() EventRecordID:20779 2022/03/23 13:47:10.144910 In expand_message6() 2022/03/23 13:47:10.146064 End of expand_message6():Updated Windows Defender status successfully to SECURITY_PRODUCT_STATE_ON. 2022/03/23 13:47:10.146064 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.146578 In zbx_parse_eventlog_message6() EventRecordID:20780 2022/03/23 13:47:10.146578 In expand_message6() 2022/03/23 13:47:10.147641 End of expand_message6():The VSS service is shutting down due to idle timeout. 2022/03/23 13:47:10.147641 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.147641 In zbx_parse_eventlog_message6() EventRecordID:20781 2022/03/23 13:47:10.148165 In expand_message6() 2022/03/23 13:47:10.149307 End of expand_message6():PowerEvent handled successfully by the service. 2022/03/23 13:47:10.149307 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.149307 In zbx_parse_eventlog_message6() EventRecordID:20782 2022/03/23 13:47:10.149827 In expand_message6() 2022/03/23 13:47:10.149827 provider 'HotKeyServiceUWP' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.149827 End of expand_message6():(null) 2022/03/23 13:47:10.150340 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.150340 In zbx_parse_eventlog_message6() EventRecordID:20783 2022/03/23 13:47:10.150340 In expand_message6() 2022/03/23 13:47:10.150340 provider 'Zabbix Agent' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.150857 End of expand_message6():(null) 2022/03/23 13:47:10.150857 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.150857 In zbx_parse_eventlog_message6() EventRecordID:20784 2022/03/23 13:47:10.150857 In expand_message6() 2022/03/23 13:47:10.151366 provider 'Zabbix Agent' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.151366 End of expand_message6():(null) 2022/03/23 13:47:10.151366 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.151366 In zbx_parse_eventlog_message6() EventRecordID:20785 2022/03/23 13:47:10.151875 In expand_message6() 2022/03/23 13:47:10.151875 provider 'Zabbix Agent' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.151875 End of expand_message6():(null) 2022/03/23 13:47:10.151875 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.152382 In zbx_parse_eventlog_message6() EventRecordID:20786 2022/03/23 13:47:10.152382 In expand_message6() 2022/03/23 13:47:10.152382 provider 'Zabbix Agent' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.152382 End of expand_message6():(null) 2022/03/23 13:47:10.152890 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.152890 In zbx_parse_eventlog_message6() EventRecordID:20787 2022/03/23 13:47:10.152890 In expand_message6() 2022/03/23 13:47:10.152890 provider 'Zabbix Agent' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.153398 End of expand_message6():(null) 2022/03/23 13:47:10.153398 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.153398 In zbx_parse_eventlog_message6() EventRecordID:20788 2022/03/23 13:47:10.153398 In expand_message6() 2022/03/23 13:47:10.153906 provider 'Zabbix Agent' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.153906 End of expand_message6():(null) 2022/03/23 13:47:10.153906 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.153906 In zbx_parse_eventlog_message6() EventRecordID:20789 2022/03/23 13:47:10.153906 In expand_message6() 2022/03/23 13:47:10.154414 provider 'Zabbix Agent' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.154414 End of expand_message6():(null) 2022/03/23 13:47:10.154414 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.154414 In zbx_parse_eventlog_message6() EventRecordID:20790 2022/03/23 13:47:10.154414 In expand_message6() 2022/03/23 13:47:10.154922 provider 'Zabbix Agent' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.154922 End of expand_message6():(null) 2022/03/23 13:47:10.154922 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.154922 In zbx_parse_eventlog_message6() EventRecordID:20791 2022/03/23 13:47:10.155429 In expand_message6() 2022/03/23 13:47:10.155429 provider 'Zabbix Agent' could not be opened: [0x00000002] The system cannot find the file specified. 2022/03/23 13:47:10.155429 End of expand_message6():(null) 2022/03/23 13:47:10.155429 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.155937 In zbx_parse_eventlog_message6() EventRecordID:20792 2022/03/23 13:47:10.155937 In expand_message6() 2022/03/23 13:47:10.156966 End of expand_message6():Successfully created restore point (Process = C:\Users\aigars\AppData\Local\Temp\{EE382BF9-A932-453F-BB1F-A0B76B5DBB2D}\.be\VMware-Horizon-Client-2106-8.3.0-18287501.exe -q -burn.elevated BurnPipe.{A117E35D-FB76-43D0-8E8C-7DFF6F5142CB} {7B38CC86-4246-4DB4-9963-023C0D155EC2} 7576; Description = VMware Horizon Client). 2022/03/23 13:47:10.156966 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.157478 In zbx_parse_eventlog_message6() EventRecordID:20793 2022/03/23 13:47:10.157478 In expand_message6() 2022/03/23 13:47:10.158496 End of expand_message6():Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{33B485CD-DF03-4123-B1E9-DCFF2FA57D17}v40.28.30105\dotnet-runtime-5.0.7-win-x86.msi. Client Process Id: 1720. 2022/03/23 13:47:10.158496 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.158496 In zbx_parse_eventlog_message6() EventRecordID:20794 2022/03/23 13:47:10.159005 In expand_message6() 2022/03/23 13:47:10.160022 End of expand_message6():Starting session 0 - ‎2021‎-‎08‎-‎30T07:56:17.327480000Z. 2022/03/23 13:47:10.160022 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.160022 In zbx_parse_eventlog_message6() EventRecordID:20795 2022/03/23 13:47:10.160022 In expand_message6() 2022/03/23 13:47:10.161039 End of expand_message6():Product: Microsoft .NET Runtime - 5.0.7 (x86) -- Installation completed successfully. 2022/03/23 13:47:10.161541 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.161578 In zbx_parse_eventlog_message6() EventRecordID:20796 2022/03/23 13:47:10.161578 In expand_message6() 2022/03/23 13:47:10.162964 End of expand_message6():Windows Installer installed the product. Product Name: Microsoft .NET Runtime - 5.0.7 (x86). Product Version: 40.28.30105. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. 2022/03/23 13:47:10.162964 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.162964 In zbx_parse_eventlog_message6() EventRecordID:20797 2022/03/23 13:47:10.162964 In expand_message6() 2022/03/23 13:47:10.163981 End of expand_message6():Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{33B485CD-DF03-4123-B1E9-DCFF2FA57D17}v40.28.30105\dotnet-runtime-5.0.7-win-x86.msi. Client Process Id: 1720. 2022/03/23 13:47:10.164520 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.164520 In zbx_parse_eventlog_message6() EventRecordID:20798 2022/03/23 13:47:10.164520 In expand_message6() 2022/03/23 13:47:10.165570 End of expand_message6():Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{26AAFE2E-986E-46AE-84BB-A1B08DD002BB}v40.28.30105\dotnet-hostfxr-5.0.7-win-x86.msi. Client Process Id: 1720. 2022/03/23 13:47:10.166089 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.166089 In zbx_parse_eventlog_message6() EventRecordID:20799 2022/03/23 13:47:10.166089 In expand_message6() 2022/03/23 13:47:10.167107 End of expand_message6():Product: Microsoft .NET Host FX Resolver - 5.0.7 (x86) -- Installation completed successfully. 2022/03/23 13:47:10.167107 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.167616 In zbx_parse_eventlog_message6() EventRecordID:20800 2022/03/23 13:47:10.167616 In expand_message6() 2022/03/23 13:47:10.168632 End of expand_message6():Windows Installer installed the product. Product Name: Microsoft .NET Host FX Resolver - 5.0.7 (x86). Product Version: 40.28.30105. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. 2022/03/23 13:47:10.168632 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.168632 In zbx_parse_eventlog_message6() EventRecordID:20801 2022/03/23 13:47:10.168632 In expand_message6() 2022/03/23 13:47:10.169649 End of expand_message6():Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{26AAFE2E-986E-46AE-84BB-A1B08DD002BB}v40.28.30105\dotnet-hostfxr-5.0.7-win-x86.msi. Client Process Id: 1720. 2022/03/23 13:47:10.170164 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.170164 In zbx_parse_eventlog_message6() EventRecordID:20802 2022/03/23 13:47:10.170164 In expand_message6() 2022/03/23 13:47:10.171181 End of expand_message6():Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{F3CF4DF2-A8A1-4400-B437-184FD2ADC5A0}v40.28.30105\dotnet-host-5.0.7-win-x86.msi. Client Process Id: 1720. 2022/03/23 13:47:10.171181 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.171682 In zbx_parse_eventlog_message6() EventRecordID:20803 2022/03/23 13:47:10.171699 In expand_message6() 2022/03/23 13:47:10.172208 End of expand_message6():Scoping started for shadowcopy \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3. 2022/03/23 13:47:10.172729 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.172729 In zbx_parse_eventlog_message6() EventRecordID:20804 2022/03/23 13:47:10.172729 In expand_message6() 2022/03/23 13:47:10.173754 End of expand_message6():Ending session 0 started ‎2021‎-‎08‎-‎30T07:56:17.327480000Z. 2022/03/23 13:47:10.174267 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.174267 In zbx_parse_eventlog_message6() EventRecordID:20805 2022/03/23 13:47:10.174267 In expand_message6() 2022/03/23 13:47:10.175288 End of expand_message6():Starting session 0 - ‎2021‎-‎08‎-‎30T07:56:19.432578100Z. 2022/03/23 13:47:10.175288 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.175288 In zbx_parse_eventlog_message6() EventRecordID:20806 2022/03/23 13:47:10.175799 In expand_message6() 2022/03/23 13:47:10.176814 End of expand_message6():Ending session 0 started ‎2021‎-‎08‎-‎30T07:56:19.432578100Z. 2022/03/23 13:47:10.177016 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.177016 In zbx_parse_eventlog_message6() EventRecordID:20807 2022/03/23 13:47:10.177016 In expand_message6() 2022/03/23 13:47:10.178603 End of expand_message6():Starting session 0 - ‎2021‎-‎08‎-‎30T07:56:19.798922800Z. 2022/03/23 13:47:10.178688 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.178688 In zbx_parse_eventlog_message6() EventRecordID:20808 2022/03/23 13:47:10.178688 In expand_message6() 2022/03/23 13:47:10.180268 End of expand_message6():Product: Microsoft .NET Host - 5.0.7 (x86) -- Installation completed successfully. 2022/03/23 13:47:10.180268 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.180268 In zbx_parse_eventlog_message6() EventRecordID:20809 2022/03/23 13:47:10.180268 In expand_message6() 2022/03/23 13:47:10.181846 End of expand_message6():Windows Installer installed the product. Product Name: Microsoft .NET Host - 5.0.7 (x86). Product Version: 40.28.30105. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. 2022/03/23 13:47:10.181846 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.181846 In zbx_parse_eventlog_message6() EventRecordID:20810 2022/03/23 13:47:10.182384 In expand_message6() 2022/03/23 13:47:10.183466 End of expand_message6():Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{F3CF4DF2-A8A1-4400-B437-184FD2ADC5A0}v40.28.30105\dotnet-host-5.0.7-win-x86.msi. Client Process Id: 1720. 2022/03/23 13:47:10.183466 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.183466 In zbx_parse_eventlog_message6() EventRecordID:20811 2022/03/23 13:47:10.183466 In expand_message6() 2022/03/23 13:47:10.184554 End of expand_message6():Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{A7240B8F-4FFB-4D28-9A64-A355D277D031}v40.28.30113\windowsdesktop-runtime-5.0.7-win-x86.msi. Client Process Id: 1720. 2022/03/23 13:47:10.185076 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.185076 In zbx_parse_eventlog_message6() EventRecordID:20812 2022/03/23 13:47:10.185076 In expand_message6() 2022/03/23 13:47:10.186145 End of expand_message6():Ending session 0 started ‎2021‎-‎08‎-‎30T07:56:19.798922800Z. 2022/03/23 13:47:10.186145 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.186695 In zbx_parse_eventlog_message6() EventRecordID:20813 2022/03/23 13:47:10.186695 In expand_message6() 2022/03/23 13:47:10.187760 End of expand_message6():Starting session 0 - ‎2021‎-‎08‎-‎30T07:56:20.396571000Z. 2022/03/23 13:47:10.187760 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.187760 In zbx_parse_eventlog_message6() EventRecordID:20814 2022/03/23 13:47:10.188293 In expand_message6() 2022/03/23 13:47:10.189353 End of expand_message6():Product: Microsoft Windows Desktop Runtime - 5.0.7 (x86) -- Installation completed successfully. 2022/03/23 13:47:10.189353 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.189353 In zbx_parse_eventlog_message6() EventRecordID:20815 2022/03/23 13:47:10.189859 In expand_message6() 2022/03/23 13:47:10.190948 End of expand_message6():Windows Installer installed the product. Product Name: Microsoft Windows Desktop Runtime - 5.0.7 (x86). Product Version: 40.28.30113. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. 2022/03/23 13:47:10.190948 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.190948 In zbx_parse_eventlog_message6() EventRecordID:20816 2022/03/23 13:47:10.190948 In expand_message6() 2022/03/23 13:47:10.191480 End of expand_message6():Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{A7240B8F-4FFB-4D28-9A64-A355D277D031}v40.28.30113\windowsdesktop-runtime-5.0.7-win-x86.msi. Client Process Id: 1720. 2022/03/23 13:47:10.192560 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.192560 In zbx_parse_eventlog_message6() EventRecordID:20817 2022/03/23 13:47:10.192560 In expand_message6() 2022/03/23 13:47:10.192560 End of expand_message6():Ending session 0 started ‎2021‎-‎08‎-‎30T07:56:20.396571000Z. 2022/03/23 13:47:10.192560 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.194111 In zbx_parse_eventlog_message6() EventRecordID:20818 2022/03/23 13:47:10.194111 In expand_message6() 2022/03/23 13:47:10.194111 End of expand_message6():Skipping creation of restore point (Process = C:\WINDOWS\Temp\{E6717603-FD75-4B7D-937E-C3FA974BAA3B}\.be\VC_redist.x86.exe -q -burn.elevated BurnPipe.{0DADD3CC-2121-40D8-AD03-6C9AB6D1BCE4} {51EC95C3-F7B7-40D7-AE86-F17C0A1D1F29} 2940; Description = Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29913) as there is a restore point avaliable which is recent enough for System Restore. 2022/03/23 13:47:10.194111 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.194111 In zbx_parse_eventlog_message6() EventRecordID:20819 2022/03/23 13:47:10.194111 In expand_message6() 2022/03/23 13:47:10.194111 End of expand_message6():Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{6236EBBD-F50F-40B3-B819-8DB0C608308C}v14.28.29913\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 9184. 2022/03/23 13:47:10.194111 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.197117 In zbx_parse_eventlog_message6() EventRecordID:20820 2022/03/23 13:47:10.197135 In expand_message6() 2022/03/23 13:47:10.197135 End of expand_message6():Starting session 0 - ‎2021‎-‎08‎-‎30T07:56:24.704757100Z. 2022/03/23 13:47:10.197135 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:10.197135 End of process_eventslog6():SUCCEED last eventid:10000 2022/03/23 13:47:10.197135 In finalize_eventlog6() 2022/03/23 13:47:10.197135 End of finalize_eventlog6():SUCCEED 2022/03/23 13:47:10.197135 executed exporter task for itemid:259093 key 'eventlog[Application,,"Warning|Error|Critical",@ApplicationExcludeSource]' 2022/03/23 13:47:11.038075 executing exporter task for itemid:259093 key 'eventlog[Application,,"Warning|Error|Critical",@ApplicationExcludeSource]' 2022/03/23 13:47:11.038075 In initialize_eventlog6() source:'Application' previous lastlogsize:20820 2022/03/23 13:47:11.038075 In zbx_open_eventlog6() lastlogsize:20820 2022/03/23 13:47:11.038075 In get_eventlog6_id() 2022/03/23 13:47:11.038075 End of get_eventlog6_id():SUCCEED id:823058757216 2022/03/23 13:47:11.038075 In get_eventlog6_id() 2022/03/23 13:47:11.038075 End of get_eventlog6_id():SUCCEED id:823058757224 2022/03/23 13:47:11.038075 End of zbx_open_eventlog6():SUCCEED FirstID:15301 LastID:44305 2022/03/23 13:47:11.038075 In zbx_get_handle_eventlog6(), previous lastlogsize:20820 2022/03/23 13:47:11.038075 End of zbx_get_handle_eventlog6():SUCCEED 2022/03/23 13:47:11.038075 End of initialize_eventlog6():SUCCEED 2022/03/23 13:47:11.038075 In process_eventslog6() source: 'Application' previous lastlogsize: 20820, FirstID: 15301, LastID: 44305 2022/03/23 13:47:11.101875 In zbx_parse_eventlog_message6() EventRecordID:20821 2022/03/23 13:47:11.101875 In expand_message6() 2022/03/23 13:47:11.102963 End of expand_message6():Application 'C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe' (pid 9672) cannot be restarted - Application SID does not match Conductor SID.. 2022/03/23 13:47:11.102963 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.103486 In zbx_parse_eventlog_message6() EventRecordID:20822 2022/03/23 13:47:11.103486 In expand_message6() 2022/03/23 13:47:11.104564 End of expand_message6():Application 'C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe' (pid 10344) cannot be restarted - Application SID does not match Conductor SID.. 2022/03/23 13:47:11.104564 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.104564 In zbx_parse_eventlog_message6() EventRecordID:20823 2022/03/23 13:47:11.104564 In expand_message6() 2022/03/23 13:47:11.105617 End of expand_message6():Machine restart is required. 2022/03/23 13:47:11.105617 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.105617 In zbx_parse_eventlog_message6() EventRecordID:20824 2022/03/23 13:47:11.106153 In expand_message6() 2022/03/23 13:47:11.107217 End of expand_message6():Starting session 1 - ‎2021‎-‎08‎-‎30T07:56:24.857492600Z. 2022/03/23 13:47:11.107217 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.107217 In zbx_parse_eventlog_message6() EventRecordID:20825 2022/03/23 13:47:11.107217 In expand_message6() 2022/03/23 13:47:11.108795 End of expand_message6():Starting session 0 - ‎2021‎-‎08‎-‎30T07:56:24.928920400Z. 2022/03/23 13:47:11.108795 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.108795 In zbx_parse_eventlog_message6() EventRecordID:20826 2022/03/23 13:47:11.108795 In expand_message6() 2022/03/23 13:47:11.110383 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: Ditto , Id 8392. 2022/03/23 13:47:11.110383 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.110383 In zbx_parse_eventlog_message6() EventRecordID:20827 2022/03/23 13:47:11.110383 In expand_message6() 2022/03/23 13:47:11.111435 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: OneDrive , Id 716. 2022/03/23 13:47:11.111955 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.111955 In zbx_parse_eventlog_message6() EventRecordID:20828 2022/03/23 13:47:11.111955 In expand_message6() 2022/03/23 13:47:11.113025 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: CiscoCollabHost , Id 10592. 2022/03/23 13:47:11.113530 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.113542 In zbx_parse_eventlog_message6() EventRecordID:20829 2022/03/23 13:47:11.113542 In expand_message6() 2022/03/23 13:47:11.114608 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: CiscoCollabHostCef , Id 11124. 2022/03/23 13:47:11.114608 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.114608 In zbx_parse_eventlog_message6() EventRecordID:20830 2022/03/23 13:47:11.115128 In expand_message6() 2022/03/23 13:47:11.116196 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: Teams , Id 1596. 2022/03/23 13:47:11.116196 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.116196 In zbx_parse_eventlog_message6() EventRecordID:20831 2022/03/23 13:47:11.116752 In expand_message6() 2022/03/23 13:47:11.117820 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: CiscoCollabHost , Id 11708. 2022/03/23 13:47:11.117820 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.117820 In zbx_parse_eventlog_message6() EventRecordID:20832 2022/03/23 13:47:11.118352 In expand_message6() 2022/03/23 13:47:11.119416 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: CiscoCollabHost , Id 12304. 2022/03/23 13:47:11.119416 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.119416 In zbx_parse_eventlog_message6() EventRecordID:20833 2022/03/23 13:47:11.119416 In expand_message6() 2022/03/23 13:47:11.120481 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: Teams , Id 4940. 2022/03/23 13:47:11.121001 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.121001 In zbx_parse_eventlog_message6() EventRecordID:20834 2022/03/23 13:47:11.121001 In expand_message6() 2022/03/23 13:47:11.122112 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: OfficeClickToRun , Id 13916. 2022/03/23 13:47:11.122638 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.122638 In zbx_parse_eventlog_message6() EventRecordID:20835 2022/03/23 13:47:11.122638 In expand_message6() 2022/03/23 13:47:11.123690 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: CiscoCollabHost , Id 12480. 2022/03/23 13:47:11.123690 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.124217 In zbx_parse_eventlog_message6() EventRecordID:20836 2022/03/23 13:47:11.124217 In expand_message6() 2022/03/23 13:47:11.125262 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: CiscoCollabHostCef , Id 8548. 2022/03/23 13:47:11.125790 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.125790 In zbx_parse_eventlog_message6() EventRecordID:20837 2022/03/23 13:47:11.125790 In expand_message6() 2022/03/23 13:47:11.126843 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\msvcp140.dll is being used by the following process: Name: CiscoCollabHostCef , Id 7188. 2022/03/23 13:47:11.126843 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.127357 In zbx_parse_eventlog_message6() EventRecordID:20838 2022/03/23 13:47:11.127357 In expand_message6() 2022/03/23 13:47:11.128409 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: Ditto , Id 8392. 2022/03/23 13:47:11.128409 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.128915 In zbx_parse_eventlog_message6() EventRecordID:20839 2022/03/23 13:47:11.128976 In expand_message6() 2022/03/23 13:47:11.130041 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: OneDrive , Id 716. 2022/03/23 13:47:11.130041 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.130041 In zbx_parse_eventlog_message6() EventRecordID:20840 2022/03/23 13:47:11.130573 In expand_message6() 2022/03/23 13:47:11.131636 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: CiscoCollabHost , Id 10592. 2022/03/23 13:47:11.131636 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.131636 In zbx_parse_eventlog_message6() EventRecordID:20841 2022/03/23 13:47:11.131636 In expand_message6() 2022/03/23 13:47:11.133223 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: CiscoCollabHostCef , Id 11124. 2022/03/23 13:47:11.133223 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.133223 In zbx_parse_eventlog_message6() EventRecordID:20842 2022/03/23 13:47:11.133223 In expand_message6() 2022/03/23 13:47:11.134808 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: Teams , Id 1596. 2022/03/23 13:47:11.134808 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.134808 In zbx_parse_eventlog_message6() EventRecordID:20843 2022/03/23 13:47:11.134808 In expand_message6() 2022/03/23 13:47:11.135873 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: CiscoCollabHost , Id 11708. 2022/03/23 13:47:11.136388 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.136399 In zbx_parse_eventlog_message6() EventRecordID:20844 2022/03/23 13:47:11.136399 In expand_message6() 2022/03/23 13:47:11.137469 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: CiscoCollabHost , Id 12304. 2022/03/23 13:47:11.137469 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.138002 In zbx_parse_eventlog_message6() EventRecordID:20845 2022/03/23 13:47:11.138002 In expand_message6() 2022/03/23 13:47:11.139067 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: Teams , Id 4940. 2022/03/23 13:47:11.139067 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.139067 In zbx_parse_eventlog_message6() EventRecordID:20846 2022/03/23 13:47:11.139600 In expand_message6() 2022/03/23 13:47:11.140656 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: OfficeClickToRun , Id 13916. 2022/03/23 13:47:11.140656 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.140656 In zbx_parse_eventlog_message6() EventRecordID:20847 2022/03/23 13:47:11.140656 In expand_message6() 2022/03/23 13:47:11.142238 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: CiscoCollabHost , Id 12480. 2022/03/23 13:47:11.142238 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.142238 In zbx_parse_eventlog_message6() EventRecordID:20848 2022/03/23 13:47:11.142238 In expand_message6() 2022/03/23 13:47:11.143303 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: CiscoCollabHostCef , Id 8548. 2022/03/23 13:47:11.143844 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.143844 In zbx_parse_eventlog_message6() EventRecordID:20849 2022/03/23 13:47:11.143844 In expand_message6() 2022/03/23 13:47:11.144908 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\SysWOW64\vcruntime140.dll is being used by the following process: Name: CiscoCollabHostCef , Id 7188. 2022/03/23 13:47:11.144908 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.145443 In zbx_parse_eventlog_message6() EventRecordID:20850 2022/03/23 13:47:11.145443 In expand_message6() 2022/03/23 13:47:11.146508 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913 -- Installation completed successfully. 2022/03/23 13:47:11.146508 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.146508 In zbx_parse_eventlog_message6() EventRecordID:20851 2022/03/23 13:47:11.147040 In expand_message6() 2022/03/23 13:47:11.148075 End of expand_message6():Windows Installer installed the product. Product Name: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. Product Version: 14.28.29913. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. 2022/03/23 13:47:11.148075 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.148075 In zbx_parse_eventlog_message6() EventRecordID:20852 2022/03/23 13:47:11.148075 In expand_message6() 2022/03/23 13:47:11.149690 End of expand_message6():Windows Installer requires a system restart. Product Name: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. Product Version: 14.28.29913. Product Language: 1033. Manufacturer: Microsoft Corporation. Type of System Restart: 2. Reason for Restart: 1. 2022/03/23 13:47:11.149690 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.149690 In zbx_parse_eventlog_message6() EventRecordID:20853 2022/03/23 13:47:11.149690 In expand_message6() 2022/03/23 13:47:11.151253 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913. Restart required. The installation or update for the product required a restart for all changes to take effect. The restart was deferred to a later time. 2022/03/23 13:47:11.151312 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.151312 In zbx_parse_eventlog_message6() EventRecordID:20854 2022/03/23 13:47:11.151312 In expand_message6() 2022/03/23 13:47:11.152372 End of expand_message6():Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{6236EBBD-F50F-40B3-B819-8DB0C608308C}v14.28.29913\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 9184. 2022/03/23 13:47:11.152911 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.152911 In zbx_parse_eventlog_message6() EventRecordID:20855 2022/03/23 13:47:11.152911 In expand_message6() 2022/03/23 13:47:11.153979 End of expand_message6():Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{572DCD10-CF2E-43D1-8151-8BD9AC9086D0}v14.28.29913\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 9184. 2022/03/23 13:47:11.154484 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.154494 In zbx_parse_eventlog_message6() EventRecordID:20856 2022/03/23 13:47:11.154494 In expand_message6() 2022/03/23 13:47:11.155557 End of expand_message6():Ending session 0 started ‎2021‎-‎08‎-‎30T07:56:24.704757100Z. 2022/03/23 13:47:11.155557 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.155557 In zbx_parse_eventlog_message6() EventRecordID:20857 2022/03/23 13:47:11.156072 In expand_message6() 2022/03/23 13:47:11.157122 End of expand_message6():Ending session 0 started ‎2021‎-‎08‎-‎30T07:56:24.928920400Z. 2022/03/23 13:47:11.157122 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.157122 In zbx_parse_eventlog_message6() EventRecordID:20858 2022/03/23 13:47:11.157643 In expand_message6() 2022/03/23 13:47:11.158706 End of expand_message6():Ending session 1 started ‎2021‎-‎08‎-‎30T07:56:24.857492600Z. 2022/03/23 13:47:11.158706 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.158706 In zbx_parse_eventlog_message6() EventRecordID:20859 2022/03/23 13:47:11.158706 In expand_message6() 2022/03/23 13:47:11.159771 End of expand_message6():Starting session 0 - ‎2021‎-‎08‎-‎30T07:56:35.638549400Z. 2022/03/23 13:47:11.160304 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.160304 In zbx_parse_eventlog_message6() EventRecordID:20860 2022/03/23 13:47:11.160304 In expand_message6() 2022/03/23 13:47:11.161368 End of expand_message6():Application 'C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe' (pid 9672) cannot be restarted - Application SID does not match Conductor SID.. 2022/03/23 13:47:11.161368 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.161368 In zbx_parse_eventlog_message6() EventRecordID:20861 2022/03/23 13:47:11.161368 In expand_message6() 2022/03/23 13:47:11.162402 End of expand_message6():Machine restart is required. 2022/03/23 13:47:11.162402 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.162402 In zbx_parse_eventlog_message6() EventRecordID:20862 2022/03/23 13:47:11.162402 In expand_message6() 2022/03/23 13:47:11.163435 End of expand_message6():Starting session 1 - ‎2021‎-‎08‎-‎30T07:56:35.844975500Z. 2022/03/23 13:47:11.163952 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.163952 In zbx_parse_eventlog_message6() EventRecordID:20863 2022/03/23 13:47:11.163952 In expand_message6() 2022/03/23 13:47:11.164986 End of expand_message6():Starting session 0 - ‎2021‎-‎08‎-‎30T07:56:35.902920800Z. 2022/03/23 13:47:11.164986 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.165503 In zbx_parse_eventlog_message6() EventRecordID:20864 2022/03/23 13:47:11.165503 In expand_message6() 2022/03/23 13:47:11.166544 End of expand_message6():Application 'C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe' (pid 9672) cannot be restarted - Application SID does not match Conductor SID.. 2022/03/23 13:47:11.166544 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.166544 In zbx_parse_eventlog_message6() EventRecordID:20865 2022/03/23 13:47:11.166544 In expand_message6() 2022/03/23 13:47:11.167626 End of expand_message6():Machine restart is required. 2022/03/23 13:47:11.167626 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.167626 In zbx_parse_eventlog_message6() EventRecordID:20866 2022/03/23 13:47:11.168147 In expand_message6() 2022/03/23 13:47:11.169207 End of expand_message6():Starting session 1 - ‎2021‎-‎08‎-‎30T07:56:36.040185800Z. 2022/03/23 13:47:11.169725 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.169725 In zbx_parse_eventlog_message6() EventRecordID:20867 2022/03/23 13:47:11.169725 In expand_message6() 2022/03/23 13:47:11.170793 End of expand_message6():Product: Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913 -- Installation completed successfully. 2022/03/23 13:47:11.171306 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.171306 In zbx_parse_eventlog_message6() EventRecordID:20868 2022/03/23 13:47:11.171306 In expand_message6() 2022/03/23 13:47:11.172373 End of expand_message6():Windows Installer installed the product. Product Name: Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913. Product Version: 14.28.29913. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0. 2022/03/23 13:47:11.172373 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.172900 In zbx_parse_eventlog_message6() EventRecordID:20869 2022/03/23 13:47:11.172900 In expand_message6() 2022/03/23 13:47:11.173967 End of expand_message6():Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{572DCD10-CF2E-43D1-8151-8BD9AC9086D0}v14.28.29913\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 9184. 2022/03/23 13:47:11.173967 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.174480 In zbx_parse_eventlog_message6() EventRecordID:20870 2022/03/23 13:47:11.174480 In expand_message6() 2022/03/23 13:47:11.175534 End of expand_message6():Skipping creation of restore point (Process = C:\ProgramData\Package Cache\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\VC_redist.x86.exe Cache\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\VC_redist.x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={03d1453c-7d5c-479c-afea-8482f406e036} -burn.filehandle.self=1140 -burn.embedded BurnPipe.{BFBE456F-0AAC-45E3-9994-042A86458544} {DE2A717C-6096-4EB0-A88C-F68EA1012B21} 9184; Description = Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026) as there is a restore point avaliable which is recent enough for System Restore. 2022/03/23 13:47:11.175534 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.176050 In zbx_parse_eventlog_message6() EventRecordID:20871 2022/03/23 13:47:11.176067 In expand_message6() 2022/03/23 13:47:11.177114 End of expand_message6():Ending session 0 started ‎2021‎-‎08‎-‎30T07:56:35.638549400Z. 2022/03/23 13:47:11.177114 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.177114 In zbx_parse_eventlog_message6() EventRecordID:20872 2022/03/23 13:47:11.177114 In expand_message6() 2022/03/23 13:47:11.178156 End of expand_message6():Ending session 0 started ‎2021‎-‎08‎-‎30T07:56:35.902920800Z. 2022/03/23 13:47:11.178672 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.178672 In zbx_parse_eventlog_message6() EventRecordID:20873 2022/03/23 13:47:11.178672 In expand_message6() 2022/03/23 13:47:11.179720 End of expand_message6():Ending session 1 started ‎2021‎-‎08‎-‎30T07:56:35.844975500Z. 2022/03/23 13:47:11.179720 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.180229 In zbx_parse_eventlog_message6() EventRecordID:20874 2022/03/23 13:47:11.180229 In expand_message6() 2022/03/23 13:47:11.181276 End of expand_message6():Ending session 1 started ‎2021‎-‎08‎-‎30T07:56:36.040185800Z. 2022/03/23 13:47:11.181276 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.181783 In zbx_parse_eventlog_message6() EventRecordID:20875 2022/03/23 13:47:11.181800 In expand_message6() 2022/03/23 13:47:11.182914 End of expand_message6():Skipping creation of restore point (Process = C:\WINDOWS\Temp\{C70771DE-B84D-438D-8CA1-C11BEE96B5F8}\.be\VC_redist.x64.exe -q -burn.elevated BurnPipe.{A0A3A00F-AAE8-4F66-8D8C-E4E7CA5858FC} {4DD1A69F-44CE-40EE-B376-3BD8A67FB261} 9088; Description = Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29913) as there is a restore point avaliable which is recent enough for System Restore. 2022/03/23 13:47:11.182914 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.183437 In zbx_parse_eventlog_message6() EventRecordID:20876 2022/03/23 13:47:11.183437 In expand_message6() 2022/03/23 13:47:11.184519 End of expand_message6():Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{EECDD137-13DA-46ED-ADA0-BDF7F8BE65B8}v14.28.29913\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi. Client Process Id: 13744. 2022/03/23 13:47:11.184519 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.185029 In zbx_parse_eventlog_message6() EventRecordID:20877 2022/03/23 13:47:11.185043 In expand_message6() 2022/03/23 13:47:11.186124 End of expand_message6():Starting session 0 - ‎2021‎-‎08‎-‎30T07:56:39.280261800Z. 2022/03/23 13:47:11.186124 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.186124 In zbx_parse_eventlog_message6() EventRecordID:20878 2022/03/23 13:47:11.186629 In expand_message6() 2022/03/23 13:47:11.187191 End of expand_message6():Application 'C:\Program Files\Ditto\Ditto.exe' (pid 8392) cannot be restarted - Application SID does not match Conductor SID.. 2022/03/23 13:47:11.187191 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.187732 In zbx_parse_eventlog_message6() EventRecordID:20879 2022/03/23 13:47:11.187732 In expand_message6() 2022/03/23 13:47:11.188781 End of expand_message6():Application 'C:\Users\aigars\AppData\Local\Microsoft\Teams\current\Teams.exe' (pid 1596) cannot be restarted - Application SID does not match Conductor SID.. 2022/03/23 13:47:11.188781 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.188781 In zbx_parse_eventlog_message6() EventRecordID:20880 2022/03/23 13:47:11.188781 In expand_message6() 2022/03/23 13:47:11.189838 End of expand_message6():Application 'C:\Users\aigars\AppData\Local\Microsoft\Teams\current\Teams.exe' (pid 4940) cannot be restarted - Application SID does not match Conductor SID.. 2022/03/23 13:47:11.189838 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.190370 In zbx_parse_eventlog_message6() EventRecordID:20881 2022/03/23 13:47:11.190370 In expand_message6() 2022/03/23 13:47:11.190902 End of expand_message6():Machine restart is required. 2022/03/23 13:47:11.191434 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.191434 In zbx_parse_eventlog_message6() EventRecordID:20882 2022/03/23 13:47:11.191434 In expand_message6() 2022/03/23 13:47:11.192497 End of expand_message6():Starting session 1 - ‎2021‎-‎08‎-‎30T07:56:39.476564100Z. 2022/03/23 13:47:11.192497 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.192497 In zbx_parse_eventlog_message6() EventRecordID:20883 2022/03/23 13:47:11.193014 In expand_message6() 2022/03/23 13:47:11.194077 End of expand_message6():Starting session 0 - ‎2021‎-‎08‎-‎30T07:56:39.549560300Z. 2022/03/23 13:47:11.194077 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.194077 In zbx_parse_eventlog_message6() EventRecordID:20884 2022/03/23 13:47:11.194077 In expand_message6() 2022/03/23 13:47:11.195618 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: Ditto , Id 8392. 2022/03/23 13:47:11.195630 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.195630 In zbx_parse_eventlog_message6() EventRecordID:20885 2022/03/23 13:47:11.195630 In expand_message6() 2022/03/23 13:47:11.196668 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: OneDrive , Id 716. 2022/03/23 13:47:11.197190 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.197190 In zbx_parse_eventlog_message6() EventRecordID:20886 2022/03/23 13:47:11.197190 In expand_message6() 2022/03/23 13:47:11.198270 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: CiscoCollabHost , Id 10592. 2022/03/23 13:47:11.198270 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.198786 In zbx_parse_eventlog_message6() EventRecordID:20887 2022/03/23 13:47:11.198786 In expand_message6() 2022/03/23 13:47:11.199829 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: CiscoCollabHostCef , Id 11124. 2022/03/23 13:47:11.199829 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.199829 In zbx_parse_eventlog_message6() EventRecordID:20888 2022/03/23 13:47:11.200346 In expand_message6() 2022/03/23 13:47:11.201381 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: Teams , Id 1596. 2022/03/23 13:47:11.201381 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.201381 In zbx_parse_eventlog_message6() EventRecordID:20889 2022/03/23 13:47:11.201381 In expand_message6() 2022/03/23 13:47:11.202413 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: CiscoCollabHost , Id 11708. 2022/03/23 13:47:11.202929 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.202929 In zbx_parse_eventlog_message6() EventRecordID:20890 2022/03/23 13:47:11.202929 In expand_message6() 2022/03/23 13:47:11.203960 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: CiscoCollabHost , Id 12304. 2022/03/23 13:47:11.203960 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.203960 In zbx_parse_eventlog_message6() EventRecordID:20891 2022/03/23 13:47:11.204479 In expand_message6() 2022/03/23 13:47:11.205520 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: Teams , Id 4940. 2022/03/23 13:47:11.205520 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.205520 In zbx_parse_eventlog_message6() EventRecordID:20892 2022/03/23 13:47:11.206025 In expand_message6() 2022/03/23 13:47:11.207105 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: OfficeClickToRun , Id 13916. 2022/03/23 13:47:11.207105 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.207611 In zbx_parse_eventlog_message6() EventRecordID:20893 2022/03/23 13:47:11.207623 In expand_message6() 2022/03/23 13:47:11.208644 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: CiscoCollabHost , Id 12480. 2022/03/23 13:47:11.208644 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.208644 In zbx_parse_eventlog_message6() EventRecordID:20894 2022/03/23 13:47:11.208644 In expand_message6() 2022/03/23 13:47:11.209664 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: CiscoCollabHostCef , Id 8548. 2022/03/23 13:47:11.210180 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.210180 In zbx_parse_eventlog_message6() EventRecordID:20895 2022/03/23 13:47:11.210180 In expand_message6() 2022/03/23 13:47:11.211196 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\msvcp140.dll is being used by the following process: Name: CiscoCollabHostCef , Id 7188. 2022/03/23 13:47:11.211196 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.211714 In zbx_parse_eventlog_message6() EventRecordID:20896 2022/03/23 13:47:11.211714 In expand_message6() 2022/03/23 13:47:11.212743 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\vccorlib140.dll is being used by the following process: Name: Teams , Id 1596. 2022/03/23 13:47:11.212743 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.212743 In zbx_parse_eventlog_message6() EventRecordID:20897 2022/03/23 13:47:11.213246 In expand_message6() 2022/03/23 13:47:11.214362 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\vcruntime140.dll is being used by the following process: Name: Ditto , Id 8392. 2022/03/23 13:47:11.214362 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.214865 In zbx_parse_eventlog_message6() EventRecordID:20898 2022/03/23 13:47:11.214882 In expand_message6() 2022/03/23 13:47:11.216236 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\vcruntime140.dll is being used by the following process: Name: OneDrive , Id 716. 2022/03/23 13:47:11.216756 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.216756 In zbx_parse_eventlog_message6() EventRecordID:20899 2022/03/23 13:47:11.216756 In expand_message6() 2022/03/23 13:47:11.218315 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\vcruntime140.dll is being used by the following process: Name: CiscoCollabHost , Id 10592. 2022/03/23 13:47:11.218315 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.218315 In zbx_parse_eventlog_message6() EventRecordID:20900 2022/03/23 13:47:11.218834 In expand_message6() 2022/03/23 13:47:11.221779 End of expand_message6():Product: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913. The file C:\WINDOWS\system32\vcruntime140.dll is being used by the following process: Name: CiscoCollabHostCef , Id 11124. 2022/03/23 13:47:11.222282 End of zbx_parse_eventlog_message6():SUCCEED 2022/03/23 13:47:11.222391 End of process_eventslog6():SUCCEED last eventid:1025 2022/03/23 13:47:11.222391 In finalize_eventlog6() 2022/03/23 13:47:11.222932 End of finalize_eventlog6():SUCCEED 2022/03/23 13:47:11.222932 executed exporter task for itemid:259093 key 'eventlog[Application,,"Warning|Error|Critical",@ApplicationExcludeSource]'