38412:20160720:115708.857 Starting Zabbix Agent [bcaves-sfb.bca.int]. Zabbix 3.1.0 (revision 3342).
 38412:20160720:115708.858 **** Enabled features ****
 38412:20160720:115708.858 IPv6 support:          YES
 38412:20160720:115708.859 TLS support:            NO
 38412:20160720:115708.859 **************************
 38412:20160720:115708.859 using configuration file: C:\Zabbix\zabbix_agentd.conf
 38412:20160720:115708.867 In init_collector_data()
 38412:20160720:115708.868 End of init_collector_data()
 38412:20160720:115708.868 In init_perf_collector()
 38412:20160720:115708.869 End of init_perf_collector():SUCCEED
 38412:20160720:115708.869 agent #0 started [main process]
 52856:20160720:115708.871 agent #1 started [collector]
 53680:20160720:115708.871 agent #2 started [listener #1]
 16516:20160720:115708.872 agent #3 started [listener #2]
 28632:20160720:115708.872 agent #5 started [active checks #1]
 44524:20160720:115708.873 agent #4 started [listener #3]
 52856:20160720:115708.873 In init_cpu_collector()
 28632:20160720:115708.874 In init_active_metrics()
 52856:20160720:115708.875 In get_counter_name() pdhIndex:238
 28632:20160720:115708.876 buffer: first allocation for 100 elements
 28632:20160720:115708.876 End of init_active_metrics()
 28632:20160720:115708.877 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115708.877 End of send_buffer():SUCCEED
 28632:20160720:115708.878 In refresh_active_checks() host:'monitor.wwi.dk' port:10051
 28632:20160720:115708.894 sending [{"request":"active checks","host":"bcaves-sfb.bca.int"}]
 28632:20160720:115708.895 before read
 28632:20160720:115708.906 got [{"response":"success","data":[{"key":"agent.hostname","delay":3600,"lastlogsize":0,"mtime":0},{"key":"agent.ping","delay":60,"lastlogsize":0,"mtime":0},{"key":"agent.version","delay":3600,"lastlogsize":0,"mtime":0},{"key":"net.if.discovery","delay":30,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\1300(*)\\1302\",300]","delay":30,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\236(C:)\\1402\",300]","delay":300,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\236(C:)\\1404\",300]","delay":300,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\236(C:)\\1482\",300]","delay":300,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\236(C:)\\198\",300]","delay":300,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\238(_Total)\\4686\",60]","delay":60,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\2\\1350\",300]","delay":300,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\2\\146\",300]","delay":300,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\2\\44\",60]","delay":60,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\4\\1382\",300]","delay":60,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\4\\1406\",120]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\4\\40\",120]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\4\\56\",300]","delay":300,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\4\\58\",300]","delay":300,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\4\\678\",300]","delay":300,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\4\\818\",300]","delay":60,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\388\",300]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\506\",300]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\520\",300]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\528\",300]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\530\",300]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\540\",300]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\542\",300]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\544\",300]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\898\",300]","delay":120,"lastlogsize":0,"mtime":0},{"key":"perf_counter[\"\\700(_Total)\\702\",60]","delay":60,"lastlogsize":0,"mtime":0},{"key":"proc.num[]","delay":60,"lastlogsize":0,"mtime":0},{"key":"service.discovery","delay":60,"lastlogsize":0,"mtime":0},{"key":"service.info[AppHostSvc,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[AppHostSvc,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[BFE,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[BFE,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[BrokerInfrastructure,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[BrokerInfrastructure,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[CryptSvc,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[CryptSvc,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[DcomLaunch,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[DcomLaunch,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Dhcp,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Dhcp,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[DiagTrack,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[DiagTrack,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Dnscache,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Dnscache,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[DPS,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[DPS,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[EventLog,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[EventLog,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[EventSystem,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[EventSystem,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[FontCache,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[FontCache,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[FTA,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[FTA,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[gpsvc,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[gpsvc,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[IISADMIN,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[IISADMIN,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[IKEEXT,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[IKEEXT,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[iphlpsvc,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[iphlpsvc,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[LanmanServer,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[LanmanServer,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[LanmanWorkstation,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[LanmanWorkstation,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[lmhosts,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[lmhosts,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[LSM,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[LSM,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MASTER,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MASTER,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MpsSvc,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MpsSvc,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MSDTC,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MSDTC,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MSSQL$LYNCLOCAL,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MSSQL$LYNCLOCAL,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MSSQL$RTC,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MSSQL$RTC,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MSSQL$RTCLOCAL,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[MSSQL$RTCLOCAL,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Netlogon,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Netlogon,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[NlaSvc,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[NlaSvc,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[nsi,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[nsi,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Power,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Power,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[ProfSvc,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[ProfSvc,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[REPLICA,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[REPLICA,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RpcEptMapper,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RpcEptMapper,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RpcSs,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RpcSs,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCASMCU,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCASMCU,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCATS,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCATS,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCAVMCU,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCAVMCU,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCCAA,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCCAA,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCCAS,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCCAS,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCCLSAGT,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCCLSAGT,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCCPS,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCCPS,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCDATAMCU,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCDATAMCU,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCHA,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCHA,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCIMMCU,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCIMMCU,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCRGS,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCRGS,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RtcSrv,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RtcSrv,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCXMPPTGW,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[RTCXMPPTGW,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[SamSs,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[SamSs,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Schedule,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Schedule,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[SENS,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[SENS,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[ShellHWDetection,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[ShellHWDetection,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Spooler,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Spooler,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[SQLBrowser,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[SQLBrowser,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[SQLWriter,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[SQLWriter,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[SystemEventsBroker,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[SystemEventsBroker,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Themes,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Themes,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[TrkWks,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[TrkWks,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[UALSVC,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[UALSVC,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[VMTools,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[VMTools,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[W3SVC,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[W3SVC,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Wcmsvc,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Wcmsvc,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Winmgmt,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Winmgmt,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[WinRM,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[WinRM,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Zabbix Agent,startup]","delay":300,"lastlogsize":0,"mtime":0},{"key":"service.info[Zabbix Agent,state]","delay":300,"lastlogsize":0,"mtime":0},{"key":"system.cpu.num[online]","delay":30,"lastlogsize":0,"mtime":0},{"key":"system.cpu.util[,,avg1]","delay":60,"lastlogsize":0,"mtime":0},{"key":"system.localtime","delay":60,"lastlogsize":0,"mtime":0},{"key":"system.uname","delay":3600,"lastlogsize":0,"mtime":0},{"key":"system.uptime","delay":60,"lastlogsize":0,"mtime":0},{"key":"vfs.fs.discovery","delay":30,"lastlogsize":0,"mtime":0},{"key":"vfs.fs.size[C:,free]","delay":60,"lastlogsize":0,"mtime":0},{"key":"vfs.fs.size[C:,pfree]","delay":60,"lastlogsize":0,"mtime":0},{"key":"vfs.fs.size[C:,total]","delay":21600,"lastlogsize":0,"mtime":0},{"key":"vfs.fs.size[C:,used]","delay":1800,"lastlogsize":0,"mtime":0},{"key":"vm.memory.size[free]","delay":60,"lastlogsize":0,"mtime":0}]}]
 28632:20160720:115708.907 In parse_list_of_checks()
 28632:20160720:115708.908 In add_check() key:'agent.hostname' refresh:3600 lastlogsize:0 mtime:0
 28632:20160720:115708.909 End of add_check()
 28632:20160720:115708.909 In add_check() key:'agent.ping' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115708.910 End of add_check()
 28632:20160720:115708.910 In add_check() key:'agent.version' refresh:3600 lastlogsize:0 mtime:0
 28632:20160720:115708.911 End of add_check()
 28632:20160720:115708.911 In add_check() key:'net.if.discovery' refresh:30 lastlogsize:0 mtime:0
 28632:20160720:115708.912 End of add_check()
 28632:20160720:115708.912 In add_check() key:'perf_counter["\1300(*)\1302",300]' refresh:30 lastlogsize:0 mtime:0
 28632:20160720:115708.913 End of add_check()
 28632:20160720:115708.913 In add_check() key:'perf_counter["\236(C:)\1402",300]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.914 End of add_check()
 28632:20160720:115708.915 In add_check() key:'perf_counter["\236(C:)\1404",300]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.915 End of add_check()
 28632:20160720:115708.916 In add_check() key:'perf_counter["\236(C:)\1482",300]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.916 End of add_check()
 28632:20160720:115708.917 In add_check() key:'perf_counter["\236(C:)\198",300]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.918 End of add_check()
 28632:20160720:115708.919 In add_check() key:'perf_counter["\238(_Total)\4686",60]' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115708.919 End of add_check()
 28632:20160720:115708.920 In add_check() key:'perf_counter["\2\1350",300]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.920 End of add_check()
 28632:20160720:115708.921 In add_check() key:'perf_counter["\2\146",300]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.921 End of add_check()
 28632:20160720:115708.922 In add_check() key:'perf_counter["\2\44",60]' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115708.923 End of add_check()
 28632:20160720:115708.923 In add_check() key:'perf_counter["\4\1382",300]' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115708.924 End of add_check()
 28632:20160720:115708.925 In add_check() key:'perf_counter["\4\1406",120]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.925 End of add_check()
 28632:20160720:115708.926 In add_check() key:'perf_counter["\4\40",120]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.926 End of add_check()
 28632:20160720:115708.926 In add_check() key:'perf_counter["\4\56",300]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.927 End of add_check()
 28632:20160720:115708.928 In add_check() key:'perf_counter["\4\58",300]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.928 End of add_check()
 28632:20160720:115708.929 In add_check() key:'perf_counter["\4\678",300]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.930 End of add_check()
 28632:20160720:115708.930 In add_check() key:'perf_counter["\4\818",300]' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115708.931 End of add_check()
 28632:20160720:115708.931 In add_check() key:'perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\388",300]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.932 End of add_check()
 28632:20160720:115708.932 In add_check() key:'perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\506",300]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.933 End of add_check()
 28632:20160720:115708.934 In add_check() key:'perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\520",300]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.934 End of add_check()
 28632:20160720:115708.935 In add_check() key:'perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\528",300]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.935 End of add_check()
 28632:20160720:115708.936 In add_check() key:'perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\530",300]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.936 End of add_check()
 28632:20160720:115708.937 In add_check() key:'perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\540",300]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.937 End of add_check()
 28632:20160720:115708.937 In add_check() key:'perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\542",300]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.938 End of add_check()
 28632:20160720:115708.939 In add_check() key:'perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\544",300]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.939 End of add_check()
 28632:20160720:115708.940 In add_check() key:'perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\898",300]' refresh:120 lastlogsize:0 mtime:0
 28632:20160720:115708.940 End of add_check()
 28632:20160720:115708.941 In add_check() key:'perf_counter["\700(_Total)\702",60]' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115708.941 End of add_check()
 28632:20160720:115708.942 In add_check() key:'proc.num[]' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115708.942 End of add_check()
 28632:20160720:115708.943 In add_check() key:'service.discovery' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115708.943 End of add_check()
 28632:20160720:115708.944 In add_check() key:'service.info[AppHostSvc,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.944 End of add_check()
 28632:20160720:115708.945 In add_check() key:'service.info[AppHostSvc,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.945 End of add_check()
 28632:20160720:115708.946 In add_check() key:'service.info[BFE,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.946 End of add_check()
 28632:20160720:115708.947 In add_check() key:'service.info[BFE,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.947 End of add_check()
 28632:20160720:115708.948 In add_check() key:'service.info[BrokerInfrastructure,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.948 End of add_check()
 28632:20160720:115708.949 In add_check() key:'service.info[BrokerInfrastructure,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.949 End of add_check()
 28632:20160720:115708.950 In add_check() key:'service.info[CryptSvc,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.951 End of add_check()
 28632:20160720:115708.951 In add_check() key:'service.info[CryptSvc,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.951 End of add_check()
 28632:20160720:115708.952 In add_check() key:'service.info[DcomLaunch,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.952 End of add_check()
 28632:20160720:115708.953 In add_check() key:'service.info[DcomLaunch,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.953 End of add_check()
 28632:20160720:115708.954 In add_check() key:'service.info[Dhcp,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.954 End of add_check()
 28632:20160720:115708.955 In add_check() key:'service.info[Dhcp,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.955 End of add_check()
 28632:20160720:115708.956 In add_check() key:'service.info[DiagTrack,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.956 End of add_check()
 28632:20160720:115708.957 In add_check() key:'service.info[DiagTrack,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.957 End of add_check()
 28632:20160720:115708.957 In add_check() key:'service.info[Dnscache,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.958 End of add_check()
 28632:20160720:115708.958 In add_check() key:'service.info[Dnscache,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.959 End of add_check()
 28632:20160720:115708.960 In add_check() key:'service.info[DPS,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.960 End of add_check()
 28632:20160720:115708.961 In add_check() key:'service.info[DPS,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.961 End of add_check()
 28632:20160720:115708.962 In add_check() key:'service.info[EventLog,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.962 End of add_check()
 28632:20160720:115708.963 In add_check() key:'service.info[EventLog,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.964 End of add_check()
 28632:20160720:115708.964 In add_check() key:'service.info[EventSystem,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.965 End of add_check()
 28632:20160720:115708.965 In add_check() key:'service.info[EventSystem,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.966 End of add_check()
 28632:20160720:115708.966 In add_check() key:'service.info[FontCache,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.967 End of add_check()
 28632:20160720:115708.967 In add_check() key:'service.info[FontCache,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.968 End of add_check()
 28632:20160720:115708.968 In add_check() key:'service.info[FTA,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.969 End of add_check()
 28632:20160720:115708.969 In add_check() key:'service.info[FTA,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.970 End of add_check()
 28632:20160720:115708.970 In add_check() key:'service.info[gpsvc,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.971 End of add_check()
 28632:20160720:115708.971 In add_check() key:'service.info[gpsvc,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.972 End of add_check()
 28632:20160720:115708.972 In add_check() key:'service.info[IISADMIN,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.972 End of add_check()
 28632:20160720:115708.973 In add_check() key:'service.info[IISADMIN,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.973 End of add_check()
 28632:20160720:115708.974 In add_check() key:'service.info[IKEEXT,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.974 End of add_check()
 28632:20160720:115708.975 In add_check() key:'service.info[IKEEXT,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.976 End of add_check()
 28632:20160720:115708.977 In add_check() key:'service.info[iphlpsvc,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.977 End of add_check()
 28632:20160720:115708.977 In add_check() key:'service.info[iphlpsvc,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.978 End of add_check()
 28632:20160720:115708.979 In add_check() key:'service.info[LanmanServer,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.979 End of add_check()
 28632:20160720:115708.980 In add_check() key:'service.info[LanmanServer,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.980 End of add_check()
 28632:20160720:115708.980 In add_check() key:'service.info[LanmanWorkstation,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.981 End of add_check()
 28632:20160720:115708.982 In add_check() key:'service.info[LanmanWorkstation,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.982 End of add_check()
 28632:20160720:115708.983 In add_check() key:'service.info[lmhosts,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.983 End of add_check()
 28632:20160720:115708.983 In add_check() key:'service.info[lmhosts,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.984 End of add_check()
 28632:20160720:115708.984 In add_check() key:'service.info[LSM,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.985 End of add_check()
 28632:20160720:115708.985 In add_check() key:'service.info[LSM,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.986 End of add_check()
 28632:20160720:115708.986 In add_check() key:'service.info[MASTER,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.986 End of add_check()
 28632:20160720:115708.987 In add_check() key:'service.info[MASTER,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.987 End of add_check()
 28632:20160720:115708.987 In add_check() key:'service.info[MpsSvc,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.988 End of add_check()
 28632:20160720:115708.989 In add_check() key:'service.info[MpsSvc,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.989 End of add_check()
 28632:20160720:115708.989 In add_check() key:'service.info[MSDTC,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.990 End of add_check()
 28632:20160720:115708.990 In add_check() key:'service.info[MSDTC,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.991 End of add_check()
 28632:20160720:115708.991 In add_check() key:'service.info[MSSQL$LYNCLOCAL,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.992 End of add_check()
 28632:20160720:115708.992 In add_check() key:'service.info[MSSQL$LYNCLOCAL,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.993 End of add_check()
 28632:20160720:115708.993 In add_check() key:'service.info[MSSQL$RTC,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.993 End of add_check()
 28632:20160720:115708.994 In add_check() key:'service.info[MSSQL$RTC,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.994 End of add_check()
 28632:20160720:115708.995 In add_check() key:'service.info[MSSQL$RTCLOCAL,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.995 End of add_check()
 28632:20160720:115708.996 In add_check() key:'service.info[MSSQL$RTCLOCAL,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.996 End of add_check()
 28632:20160720:115708.997 In add_check() key:'service.info[Netlogon,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.997 End of add_check()
 28632:20160720:115708.997 In add_check() key:'service.info[Netlogon,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.998 End of add_check()
 28632:20160720:115708.998 In add_check() key:'service.info[NlaSvc,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115708.999 End of add_check()
 28632:20160720:115708.999 In add_check() key:'service.info[NlaSvc,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.000 End of add_check()
 28632:20160720:115709.000 In add_check() key:'service.info[nsi,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.000 End of add_check()
 28632:20160720:115709.001 In add_check() key:'service.info[nsi,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.001 End of add_check()
 28632:20160720:115709.002 In add_check() key:'service.info[Power,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.002 End of add_check()
 28632:20160720:115709.003 In add_check() key:'service.info[Power,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.003 End of add_check()
 28632:20160720:115709.003 In add_check() key:'service.info[ProfSvc,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.004 End of add_check()
 28632:20160720:115709.004 In add_check() key:'service.info[ProfSvc,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.005 End of add_check()
 28632:20160720:115709.005 In add_check() key:'service.info[REPLICA,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.006 End of add_check()
 28632:20160720:115709.006 In add_check() key:'service.info[REPLICA,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.006 End of add_check()
 28632:20160720:115709.007 In add_check() key:'service.info[RpcEptMapper,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.007 End of add_check()
 28632:20160720:115709.008 In add_check() key:'service.info[RpcEptMapper,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.008 End of add_check()
 28632:20160720:115709.009 In add_check() key:'service.info[RpcSs,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.009 End of add_check()
 28632:20160720:115709.009 In add_check() key:'service.info[RpcSs,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.010 End of add_check()
 28632:20160720:115709.011 In add_check() key:'service.info[RTCASMCU,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.011 End of add_check()
 28632:20160720:115709.011 In add_check() key:'service.info[RTCASMCU,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.012 End of add_check()
 28632:20160720:115709.012 In add_check() key:'service.info[RTCATS,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.013 End of add_check()
 28632:20160720:115709.013 In add_check() key:'service.info[RTCATS,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.013 End of add_check()
 28632:20160720:115709.014 In add_check() key:'service.info[RTCAVMCU,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.014 End of add_check()
 28632:20160720:115709.015 In add_check() key:'service.info[RTCAVMCU,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.015 End of add_check()
 28632:20160720:115709.016 In add_check() key:'service.info[RTCCAA,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.016 End of add_check()
 28632:20160720:115709.017 In add_check() key:'service.info[RTCCAA,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.017 End of add_check()
 28632:20160720:115709.018 In add_check() key:'service.info[RTCCAS,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.018 End of add_check()
 28632:20160720:115709.018 In add_check() key:'service.info[RTCCAS,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.019 End of add_check()
 28632:20160720:115709.020 In add_check() key:'service.info[RTCCLSAGT,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.020 End of add_check()
 28632:20160720:115709.020 In add_check() key:'service.info[RTCCLSAGT,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.021 End of add_check()
 28632:20160720:115709.022 In add_check() key:'service.info[RTCCPS,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.022 End of add_check()
 28632:20160720:115709.023 In add_check() key:'service.info[RTCCPS,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.023 End of add_check()
 28632:20160720:115709.023 In add_check() key:'service.info[RTCDATAMCU,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.024 End of add_check()
 28632:20160720:115709.024 In add_check() key:'service.info[RTCDATAMCU,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.025 End of add_check()
 28632:20160720:115709.025 In add_check() key:'service.info[RTCHA,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.026 End of add_check()
 28632:20160720:115709.026 In add_check() key:'service.info[RTCHA,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.027 End of add_check()
 28632:20160720:115709.027 In add_check() key:'service.info[RTCIMMCU,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.028 End of add_check()
 28632:20160720:115709.028 In add_check() key:'service.info[RTCIMMCU,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.028 End of add_check()
 28632:20160720:115709.029 In add_check() key:'service.info[RTCRGS,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.029 End of add_check()
 28632:20160720:115709.030 In add_check() key:'service.info[RTCRGS,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.030 End of add_check()
 28632:20160720:115709.031 In add_check() key:'service.info[RtcSrv,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.031 End of add_check()
 28632:20160720:115709.032 In add_check() key:'service.info[RtcSrv,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.032 End of add_check()
 28632:20160720:115709.033 In add_check() key:'service.info[RTCXMPPTGW,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.033 End of add_check()
 28632:20160720:115709.033 In add_check() key:'service.info[RTCXMPPTGW,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.034 End of add_check()
 28632:20160720:115709.034 In add_check() key:'service.info[SamSs,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.035 End of add_check()
 28632:20160720:115709.035 In add_check() key:'service.info[SamSs,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.035 End of add_check()
 28632:20160720:115709.036 In add_check() key:'service.info[Schedule,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.036 End of add_check()
 28632:20160720:115709.037 In add_check() key:'service.info[Schedule,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.037 End of add_check()
 28632:20160720:115709.038 In add_check() key:'service.info[SENS,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.038 End of add_check()
 28632:20160720:115709.039 In add_check() key:'service.info[SENS,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.039 End of add_check()
 28632:20160720:115709.039 In add_check() key:'service.info[ShellHWDetection,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.040 End of add_check()
 28632:20160720:115709.040 In add_check() key:'service.info[ShellHWDetection,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.041 End of add_check()
 28632:20160720:115709.041 In add_check() key:'service.info[Spooler,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.042 End of add_check()
 28632:20160720:115709.042 In add_check() key:'service.info[Spooler,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.043 End of add_check()
 28632:20160720:115709.043 In add_check() key:'service.info[SQLBrowser,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.043 End of add_check()
 28632:20160720:115709.044 In add_check() key:'service.info[SQLBrowser,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.044 End of add_check()
 28632:20160720:115709.045 In add_check() key:'service.info[SQLWriter,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.045 End of add_check()
 28632:20160720:115709.045 In add_check() key:'service.info[SQLWriter,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.046 End of add_check()
 28632:20160720:115709.046 In add_check() key:'service.info[SystemEventsBroker,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.047 End of add_check()
 28632:20160720:115709.047 In add_check() key:'service.info[SystemEventsBroker,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.048 End of add_check()
 28632:20160720:115709.048 In add_check() key:'service.info[Themes,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.048 End of add_check()
 28632:20160720:115709.049 In add_check() key:'service.info[Themes,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.049 End of add_check()
 28632:20160720:115709.050 In add_check() key:'service.info[TrkWks,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.050 End of add_check()
 28632:20160720:115709.051 In add_check() key:'service.info[TrkWks,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.051 End of add_check()
 28632:20160720:115709.051 In add_check() key:'service.info[UALSVC,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.052 End of add_check()
 28632:20160720:115709.052 In add_check() key:'service.info[UALSVC,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.053 End of add_check()
 28632:20160720:115709.053 In add_check() key:'service.info[VMTools,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.053 End of add_check()
 28632:20160720:115709.054 In add_check() key:'service.info[VMTools,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.054 End of add_check()
 28632:20160720:115709.055 In add_check() key:'service.info[W3SVC,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.055 End of add_check()
 28632:20160720:115709.055 In add_check() key:'service.info[W3SVC,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.056 End of add_check()
 28632:20160720:115709.056 In add_check() key:'service.info[Wcmsvc,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.057 End of add_check()
 28632:20160720:115709.057 In add_check() key:'service.info[Wcmsvc,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.058 End of add_check()
 28632:20160720:115709.058 In add_check() key:'service.info[Winmgmt,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.059 End of add_check()
 28632:20160720:115709.059 In add_check() key:'service.info[Winmgmt,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.060 End of add_check()
 28632:20160720:115709.060 In add_check() key:'service.info[WinRM,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.061 End of add_check()
 28632:20160720:115709.061 In add_check() key:'service.info[WinRM,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.062 End of add_check()
 28632:20160720:115709.062 In add_check() key:'service.info[Zabbix Agent,startup]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.062 End of add_check()
 28632:20160720:115709.063 In add_check() key:'service.info[Zabbix Agent,state]' refresh:300 lastlogsize:0 mtime:0
 28632:20160720:115709.063 End of add_check()
 28632:20160720:115709.064 In add_check() key:'system.cpu.num[online]' refresh:30 lastlogsize:0 mtime:0
 28632:20160720:115709.064 End of add_check()
 28632:20160720:115709.065 In add_check() key:'system.cpu.util[,,avg1]' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115709.065 End of add_check()
 28632:20160720:115709.065 In add_check() key:'system.localtime' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115709.066 End of add_check()
 28632:20160720:115709.066 In add_check() key:'system.uname' refresh:3600 lastlogsize:0 mtime:0
 28632:20160720:115709.067 End of add_check()
 28632:20160720:115709.067 In add_check() key:'system.uptime' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115709.068 End of add_check()
 28632:20160720:115709.068 In add_check() key:'vfs.fs.discovery' refresh:30 lastlogsize:0 mtime:0
 28632:20160720:115709.068 End of add_check()
 28632:20160720:115709.069 In add_check() key:'vfs.fs.size[C:,free]' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115709.070 End of add_check()
 28632:20160720:115709.070 In add_check() key:'vfs.fs.size[C:,pfree]' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115709.071 End of add_check()
 28632:20160720:115709.071 In add_check() key:'vfs.fs.size[C:,total]' refresh:21600 lastlogsize:0 mtime:0
 28632:20160720:115709.072 End of add_check()
 28632:20160720:115709.072 In add_check() key:'vfs.fs.size[C:,used]' refresh:1800 lastlogsize:0 mtime:0
 28632:20160720:115709.073 End of add_check()
 28632:20160720:115709.073 In add_check() key:'vm.memory.size[free]' refresh:60 lastlogsize:0 mtime:0
 28632:20160720:115709.074 End of add_check()
 28632:20160720:115709.075 End of parse_list_of_checks():SUCCEED
 28632:20160720:115709.075 End of refresh_active_checks():SUCCEED
 28632:20160720:115709.076 In process_active_checks() server:'monitor.wwi.dk' port:10051
 28632:20160720:115709.076 for key [agent.hostname] received value [bcaves-sfb.bca.int]
 28632:20160720:115709.077 In process_value() key:'bcaves-sfb.bca.int:agent.hostname' value:'bcaves-sfb.bca.int'
 28632:20160720:115709.077 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115709.077 End of send_buffer():SUCCEED
 28632:20160720:115709.078 buffer: new element 0
 28632:20160720:115709.078 End of process_value():SUCCEED
 28632:20160720:115709.079 In need_meta_update() key:agent.hostname
 28632:20160720:115709.080 End of need_meta_update():FAIL
 28632:20160720:115709.080 for key [agent.ping] received value [1]
 28632:20160720:115709.081 In process_value() key:'bcaves-sfb.bca.int:agent.ping' value:'1'
 28632:20160720:115709.081 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115709.082 send_buffer() now:1469008629 lastsent:1469008628 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115709.082 End of send_buffer():SUCCEED
 28632:20160720:115709.082 buffer: new element 1
 28632:20160720:115709.082 End of process_value():SUCCEED
 28632:20160720:115709.084 In need_meta_update() key:agent.ping
 28632:20160720:115709.084 End of need_meta_update():FAIL
 28632:20160720:115709.084 for key [agent.version] received value [3.1.0]
 28632:20160720:115709.085 In process_value() key:'bcaves-sfb.bca.int:agent.version' value:'3.1.0'
 28632:20160720:115709.085 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:2/100
 28632:20160720:115709.086 send_buffer() now:1469008629 lastsent:1469008628 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115709.086 End of send_buffer():SUCCEED
 28632:20160720:115709.087 buffer: new element 2
 28632:20160720:115709.087 End of process_value():SUCCEED
 28632:20160720:115709.087 In need_meta_update() key:agent.version
 28632:20160720:115709.088 End of need_meta_update():FAIL
 28632:20160720:115709.097 for key [net.if.discovery] received value [{"data":[{"{#IFNAME}":"WAN Miniport (IP)"},{"{#IFNAME}":"WAN Miniport (IPv6)"},{"{#IFNAME}":"WAN Miniport (Network Monitor)"},{"{#IFNAME}":"Microsoft Kernel Debug Network Adapter"},{"{#IFNAME}":"WAN Miniport (IP)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (IP)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"WAN Miniport (IPv6)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (IPv6)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"WAN Miniport (Network Monitor)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (Network Monitor)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (PPPOE)"},{"{#IFNAME}":"RAS Async Adapter"},{"{#IFNAME}":"Software Loopback Interface 1"},{"{#IFNAME}":"WAN Miniport (L2TP)"},{"{#IFNAME}":"WAN Miniport (SSTP)"},{"{#IFNAME}":"WAN Miniport (IKEv2)"},{"{#IFNAME}":"WAN Miniport (PPTP)"},{"{#IFNAME}":"Microsoft ISATAP Adapter"}]}]
 28632:20160720:115709.098 In process_value() key:'bcaves-sfb.bca.int:net.if.discovery' value:'{"data":[{"{#IFNAME}":"WAN Miniport (IP)"},{"{#IFNAME}":"WAN Miniport (IPv6)"},{"{#IFNAME}":"WAN Miniport (Network Monitor)"},{"{#IFNAME}":"Microsoft Kernel Debug Network Adapter"},{"{#IFNAME}":"WAN Miniport (IP)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (IP)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"WAN Miniport (IPv6)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (IPv6)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"WAN Miniport (Network Monitor)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (Network Monitor)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (PPPOE)"},{"{#IFNAME}":"RAS Async Adapter"},{"{#IFNAME}":"Software Loopback Interface 1"},{"{#IFNAME}":"WAN Miniport (L2TP)"},{"{#IFNAME}":"WAN Miniport (SSTP)"},{"{#IFNAME}":"WAN Miniport (IKEv2)"},{"{#IFNAME}":"WAN Miniport (PPTP)"},{"{#IFNAME}":"Microsoft ISATAP Adapter"}]}'
 28632:20160720:115709.098 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:3/100
 28632:20160720:115709.099 send_buffer() now:1469008629 lastsent:1469008628 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115709.100 End of send_buffer():SUCCEED
 28632:20160720:115709.100 buffer: new element 3
 28632:20160720:115709.101 End of process_value():SUCCEED
 28632:20160720:115709.102 In need_meta_update() key:net.if.discovery
 28632:20160720:115709.102 End of need_meta_update():FAIL
 28632:20160720:115709.103 In PERF_COUNTER()
 28632:20160720:115709.104 In get_counter_name() pdhIndex:1300
 52856:20160720:115709.230 End of get_counter_name():SUCCEED
 28632:20160720:115709.230 End of get_counter_name():SUCCEED
 52856:20160720:115709.231 In get_counter_name() pdhIndex:6
 28632:20160720:115709.232 In get_counter_name() pdhIndex:1302
 52856:20160720:115709.232 End of get_counter_name():SUCCEED
 28632:20160720:115709.233 End of get_counter_name():SUCCEED
 52856:20160720:115709.234 In add_perf_counter() counter:'\Processor(_Total)\% Processor Time' interval:900
 28632:20160720:115709.234 counter path converted to '\\BCAVES-SFB\Server Work Queues(*)\Queue Length'
 28632:20160720:115709.235 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Server Work Queues(*)\Queue Length interval:300
 52856:20160720:115709.236 add_perf_counter(): PerfCounter '\Processor(_Total)\% Processor Time' successfully added
 52856:20160720:115709.236 End of add_perf_counter(): SUCCEED
 28632:20160720:115709.237 In add_perf_counter() counter:'\\BCAVES-SFB\Server Work Queues(*)\Queue Length' interval:300
 52856:20160720:115709.237 In add_perf_counter() counter:'\Processor(0)\% Processor Time' interval:900
 28632:20160720:115709.242 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Server Work Queues(*)\Queue Length' successfully added
 28632:20160720:115709.242 End of add_perf_counter(): SUCCEED
 28632:20160720:115709.243 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Server Work Queues(*)\Queue Length' successfully added
 52856:20160720:115709.244 add_perf_counter(): PerfCounter '\Processor(0)\% Processor Time' successfully added
 28632:20160720:115709.244 End of get_perf_counter_value_by_path():SUCCEED
 52856:20160720:115709.245 End of add_perf_counter(): SUCCEED
 28632:20160720:115709.245 End of PERF_COUNTER():SUCCEED
 52856:20160720:115709.246 In add_perf_counter() counter:'\Processor(1)\% Processor Time' interval:900
 28632:20160720:115709.247 for key [perf_counter["\1300(*)\1302",300]] received value [0.000000]
 52856:20160720:115709.247 add_perf_counter(): PerfCounter '\Processor(1)\% Processor Time' successfully added
 28632:20160720:115709.248 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\1300(*)\1302",300]' value:'0.000000'
 52856:20160720:115709.248 End of add_perf_counter(): SUCCEED
 28632:20160720:115709.249 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:4/100
 52856:20160720:115709.249 In add_perf_counter() counter:'\Processor(2)\% Processor Time' interval:900
 28632:20160720:115709.250 send_buffer() now:1469008629 lastsent:1469008628 now-lastsent:1 BufferSend:5; will not send now
 52856:20160720:115709.250 add_perf_counter(): PerfCounter '\Processor(2)\% Processor Time' successfully added
 28632:20160720:115709.251 End of send_buffer():SUCCEED
 52856:20160720:115709.251 End of add_perf_counter(): SUCCEED
 28632:20160720:115709.251 buffer: new element 4
 52856:20160720:115709.252 In add_perf_counter() counter:'\Processor(3)\% Processor Time' interval:900
 28632:20160720:115709.252 End of process_value():SUCCEED
 52856:20160720:115709.253 add_perf_counter(): PerfCounter '\Processor(3)\% Processor Time' successfully added
 28632:20160720:115709.253 In need_meta_update() key:perf_counter["\1300(*)\1302",300]
 52856:20160720:115709.254 End of add_perf_counter(): SUCCEED
 28632:20160720:115709.254 End of need_meta_update():FAIL
 52856:20160720:115709.255 In get_counter_name() pdhIndex:2
 28632:20160720:115709.255 In PERF_COUNTER()
 52856:20160720:115709.256 End of get_counter_name():SUCCEED
 28632:20160720:115709.256 In get_counter_name() pdhIndex:236
 52856:20160720:115709.257 In get_counter_name() pdhIndex:44
 28632:20160720:115709.258 End of get_counter_name():SUCCEED
 52856:20160720:115709.258 End of get_counter_name():SUCCEED
 28632:20160720:115709.259 In get_counter_name() pdhIndex:1402
 52856:20160720:115709.259 In add_perf_counter() counter:'\System\Processor Queue Length' interval:900
 28632:20160720:115709.259 End of get_counter_name():SUCCEED
 28632:20160720:115709.260 counter path converted to '\\BCAVES-SFB\LogicalDisk(C:)\Avg. Disk Read Queue Length'
 28632:20160720:115709.261 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\LogicalDisk(C:)\Avg. Disk Read Queue Length interval:300
 52856:20160720:115709.267 add_perf_counter(): PerfCounter '\System\Processor Queue Length' successfully added
 52856:20160720:115709.267 End of add_perf_counter(): SUCCEED
 28632:20160720:115709.268 In add_perf_counter() counter:'\\BCAVES-SFB\LogicalDisk(C:)\Avg. Disk Read Queue Length' interval:300
 52856:20160720:115709.269 End of init_cpu_collector():SUCCEED
 52856:20160720:115709.269 In collect_perfstat()
 28632:20160720:115709.272 add_perf_counter(): PerfCounter '\\BCAVES-SFB\LogicalDisk(C:)\Avg. Disk Read Queue Length' successfully added
 28632:20160720:115709.272 End of add_perf_counter(): SUCCEED
 28632:20160720:115709.278 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\LogicalDisk(C:)\Avg. Disk Read Queue Length' successfully added
 52856:20160720:115709.278 End of collect_perfstat()
 28632:20160720:115710.279 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115710.280 End of PERF_COUNTER():SUCCEED
 52856:20160720:115710.281 In collect_perfstat()
 28632:20160720:115710.281 for key [perf_counter["\236(C:)\1402",300]] received value [0.000000]
 28632:20160720:115710.282 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\236(C:)\1402",300]' value:'0.000000'
 28632:20160720:115710.282 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:5/100
 28632:20160720:115710.283 send_buffer() now:1469008630 lastsent:1469008628 now-lastsent:2 BufferSend:5; will not send now
 28632:20160720:115710.284 End of send_buffer():SUCCEED
 28632:20160720:115710.284 buffer: new element 5
 28632:20160720:115710.285 End of process_value():SUCCEED
 28632:20160720:115710.285 In need_meta_update() key:perf_counter["\236(C:)\1402",300]
 52856:20160720:115710.286 End of collect_perfstat()
 28632:20160720:115710.287 End of need_meta_update():FAIL
 28632:20160720:115710.287 In PERF_COUNTER()
 28632:20160720:115710.288 In get_counter_name() pdhIndex:236
 28632:20160720:115710.288 End of get_counter_name():SUCCEED
 28632:20160720:115710.289 In get_counter_name() pdhIndex:1404
 28632:20160720:115710.289 End of get_counter_name():SUCCEED
 28632:20160720:115710.289 counter path converted to '\\BCAVES-SFB\LogicalDisk(C:)\Avg. Disk Write Queue Length'
 28632:20160720:115710.290 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\LogicalDisk(C:)\Avg. Disk Write Queue Length interval:300
 28632:20160720:115710.290 In add_perf_counter() counter:'\\BCAVES-SFB\LogicalDisk(C:)\Avg. Disk Write Queue Length' interval:300
 28632:20160720:115710.291 add_perf_counter(): PerfCounter '\\BCAVES-SFB\LogicalDisk(C:)\Avg. Disk Write Queue Length' successfully added
 28632:20160720:115710.292 End of add_perf_counter(): SUCCEED
 28632:20160720:115710.292 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\LogicalDisk(C:)\Avg. Disk Write Queue Length' successfully added
 52856:20160720:115711.287 In collect_perfstat()
 52856:20160720:115711.292 End of collect_perfstat()
 28632:20160720:115711.294 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115711.295 End of PERF_COUNTER():SUCCEED
 28632:20160720:115711.295 for key [perf_counter["\236(C:)\1404",300]] received value [0.003496]
 28632:20160720:115711.296 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\236(C:)\1404",300]' value:'0.003496'
 28632:20160720:115711.296 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:6/100
 28632:20160720:115711.297 send_buffer() now:1469008631 lastsent:1469008628 now-lastsent:3 BufferSend:5; will not send now
 28632:20160720:115711.297 End of send_buffer():SUCCEED
 28632:20160720:115711.298 buffer: new element 6
 28632:20160720:115711.299 End of process_value():SUCCEED
 28632:20160720:115711.299 In need_meta_update() key:perf_counter["\236(C:)\1404",300]
 28632:20160720:115711.299 End of need_meta_update():FAIL
 28632:20160720:115711.300 In PERF_COUNTER()
 28632:20160720:115711.300 In get_counter_name() pdhIndex:236
 28632:20160720:115711.301 End of get_counter_name():SUCCEED
 28632:20160720:115711.301 In get_counter_name() pdhIndex:1482
 28632:20160720:115711.302 End of get_counter_name():SUCCEED
 28632:20160720:115711.302 counter path converted to '\\BCAVES-SFB\LogicalDisk(C:)\% Idle Time'
 28632:20160720:115711.302 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\LogicalDisk(C:)\% Idle Time interval:300
 28632:20160720:115711.303 In add_perf_counter() counter:'\\BCAVES-SFB\LogicalDisk(C:)\% Idle Time' interval:300
 28632:20160720:115711.304 add_perf_counter(): PerfCounter '\\BCAVES-SFB\LogicalDisk(C:)\% Idle Time' successfully added
 28632:20160720:115711.304 End of add_perf_counter(): SUCCEED
 28632:20160720:115711.305 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\LogicalDisk(C:)\% Idle Time' successfully added
 52856:20160720:115712.294 In collect_perfstat()
 52856:20160720:115712.299 End of collect_perfstat()
 28632:20160720:115712.306 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115712.307 End of PERF_COUNTER():SUCCEED
 28632:20160720:115712.308 for key [perf_counter["\236(C:)\1482",300]] received value [100.096510]
 28632:20160720:115712.308 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\236(C:)\1482",300]' value:'100.096510'
 28632:20160720:115712.309 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:7/100
 28632:20160720:115712.309 send_buffer() now:1469008632 lastsent:1469008628 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115712.310 End of send_buffer():SUCCEED
 28632:20160720:115712.310 buffer: new element 7
 28632:20160720:115712.311 End of process_value():SUCCEED
 28632:20160720:115712.311 In need_meta_update() key:perf_counter["\236(C:)\1482",300]
 28632:20160720:115712.311 End of need_meta_update():FAIL
 28632:20160720:115712.312 In PERF_COUNTER()
 28632:20160720:115712.312 In get_counter_name() pdhIndex:236
 28632:20160720:115712.313 End of get_counter_name():SUCCEED
 28632:20160720:115712.313 In get_counter_name() pdhIndex:198
 28632:20160720:115712.314 End of get_counter_name():SUCCEED
 28632:20160720:115712.314 counter path converted to '\\BCAVES-SFB\LogicalDisk(C:)\Current Disk Queue Length'
 28632:20160720:115712.315 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\LogicalDisk(C:)\Current Disk Queue Length interval:300
 28632:20160720:115712.315 In add_perf_counter() counter:'\\BCAVES-SFB\LogicalDisk(C:)\Current Disk Queue Length' interval:300
 28632:20160720:115712.316 add_perf_counter(): PerfCounter '\\BCAVES-SFB\LogicalDisk(C:)\Current Disk Queue Length' successfully added
 28632:20160720:115712.316 End of add_perf_counter(): SUCCEED
 28632:20160720:115712.316 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\LogicalDisk(C:)\Current Disk Queue Length' successfully added
 28632:20160720:115712.317 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115712.318 End of PERF_COUNTER():SUCCEED
 28632:20160720:115712.318 for key [perf_counter["\236(C:)\198",300]] received value [0.000000]
 28632:20160720:115712.318 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\236(C:)\198",300]' value:'0.000000'
 28632:20160720:115712.319 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:8/100
 28632:20160720:115712.319 send_buffer() now:1469008632 lastsent:1469008628 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115712.320 End of send_buffer():SUCCEED
 28632:20160720:115712.320 buffer: new element 8
 28632:20160720:115712.320 End of process_value():SUCCEED
 28632:20160720:115712.321 In need_meta_update() key:perf_counter["\236(C:)\198",300]
 28632:20160720:115712.321 End of need_meta_update():FAIL
 28632:20160720:115712.321 In PERF_COUNTER()
 28632:20160720:115712.322 In get_counter_name() pdhIndex:238
 28632:20160720:115712.323 End of get_counter_name():SUCCEED
 28632:20160720:115712.324 In get_counter_name() pdhIndex:4686
 28632:20160720:115712.324 End of get_counter_name():SUCCEED
 28632:20160720:115712.325 counter path converted to '\\BCAVES-SFB\Processor(_Total)\% Interrupt Time'
 28632:20160720:115712.325 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Processor(_Total)\% Interrupt Time interval:60
 28632:20160720:115712.325 In add_perf_counter() counter:'\\BCAVES-SFB\Processor(_Total)\% Interrupt Time' interval:60
 28632:20160720:115712.326 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Processor(_Total)\% Interrupt Time' successfully added
 28632:20160720:115712.327 End of add_perf_counter(): SUCCEED
 28632:20160720:115712.327 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Processor(_Total)\% Interrupt Time' successfully added
 52856:20160720:115713.300 In collect_perfstat()
 52856:20160720:115713.305 End of collect_perfstat()
 28632:20160720:115713.329 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115713.330 End of PERF_COUNTER():SUCCEED
 28632:20160720:115713.330 for key [perf_counter["\238(_Total)\4686",60]] received value [0.000000]
 28632:20160720:115713.331 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\238(_Total)\4686",60]' value:'0.000000'
 28632:20160720:115713.331 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:9/100
 28632:20160720:115713.342 JSON before sending [{"request":"agent data","data":[{"host":"bcaves-sfb.bca.int","key":"agent.hostname","value":"bcaves-sfb.bca.int","clock":1469008629,"ns":177940159},{"host":"bcaves-sfb.bca.int","key":"agent.ping","value":"1","clock":1469008629,"ns":182622281},{"host":"bcaves-sfb.bca.int","key":"agent.version","value":"3.1.0","clock":1469008629,"ns":186586783},{"host":"bcaves-sfb.bca.int","key":"net.if.discovery","value":"{\"data\":[{\"{#IFNAME}\":\"WAN Miniport (IP)\"},{\"{#IFNAME}\":\"WAN Miniport (IPv6)\"},{\"{#IFNAME}\":\"WAN Miniport (Network Monitor)\"},{\"{#IFNAME}\":\"Microsoft Kernel Debug Network Adapter\"},{\"{#IFNAME}\":\"WAN Miniport (IP)-WFP Native MAC Layer LightWeight Filter-0000\"},{\"{#IFNAME}\":\"WAN Miniport (IP)-QoS Packet Scheduler-0000\"},{\"{#IFNAME}\":\"WAN Miniport (IPv6)-WFP Native MAC Layer LightWeight Filter-0000\"},{\"{#IFNAME}\":\"WAN Miniport (IPv6)-QoS Packet Scheduler-0000\"},{\"{#IFNAME}\":\"WAN Miniport (Network Monitor)-WFP Native MAC Layer LightWeight Filter-0000\"},{\"{#IFNAME}\":\"WAN Miniport (Network Monitor)-QoS Packet Scheduler-0000\"},{\"{#IFNAME}\":\"Intel(R) 82574L Gigabit Network Connection\"},{\"{#IFNAME}\":\"Intel(R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000\"},{\"{#IFNAME}\":\"Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000\"},{\"{#IFNAME}\":\"Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000\"},{\"{#IFNAME}\":\"WAN Miniport (PPPOE)\"},{\"{#IFNAME}\":\"RAS Async Adapter\"},{\"{#IFNAME}\":\"Software Loopback Interface 1\"},{\"{#IFNAME}\":\"WAN Miniport (L2TP)\"},{\"{#IFNAME}\":\"WAN Miniport (SSTP)\"},{\"{#IFNAME}\":\"WAN Miniport (IKEv2)\"},{\"{#IFNAME}\":\"WAN Miniport (PPTP)\"},{\"{#IFNAME}\":\"Microsoft ISATAP Adapter\"}]}","clock":1469008629,"ns":200546133},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\1300(*)\\1302\",300]","value":"0.000000","clock":1469008629,"ns":351478304},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\236(C:)\\1402\",300]","value":"0.000000","clock":1469008630,"ns":384267329},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\236(C:)\\1404\",300]","value":"0.003496","clock":1469008631,"ns":398230590},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\236(C:)\\1482\",300]","value":"100.096510","clock":1469008632,"ns":410344564},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\236(C:)\\198\",300]","value":"0.000000","clock":1469008632,"ns":420072993}],"clock":1469008633,"ns":441873356}]
 28632:20160720:115713.361 JSON back [{"response":"success","info":"processed: 9; failed: 0; total: 9; seconds spent: 0.007910"}]
 28632:20160720:115713.361 In check_response() response:'{"response":"success","info":"processed: 9; failed: 0; total: 9; seconds spent: 0.007910"}'
 28632:20160720:115713.362 info from server: 'processed: 9; failed: 0; total: 9; seconds spent: 0.007910'
 28632:20160720:115713.362 End of check_response():SUCCEED
 28632:20160720:115713.363 OK
 28632:20160720:115713.363 End of send_buffer():SUCCEED
 28632:20160720:115713.364 buffer: new element 0
 28632:20160720:115713.364 End of process_value():SUCCEED
 28632:20160720:115713.364 In need_meta_update() key:perf_counter["\238(_Total)\4686",60]
 28632:20160720:115713.365 End of need_meta_update():FAIL
 28632:20160720:115713.365 In PERF_COUNTER()
 28632:20160720:115713.366 In get_counter_name() pdhIndex:2
 28632:20160720:115713.366 End of get_counter_name():SUCCEED
 28632:20160720:115713.367 In get_counter_name() pdhIndex:1350
 28632:20160720:115713.367 End of get_counter_name():SUCCEED
 28632:20160720:115713.367 counter path converted to '\\BCAVES-SFB\System\% Registry Quota In Use'
 28632:20160720:115713.368 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\System\% Registry Quota In Use interval:300
 28632:20160720:115713.369 In add_perf_counter() counter:'\\BCAVES-SFB\System\% Registry Quota In Use' interval:300
 28632:20160720:115713.375 add_perf_counter(): PerfCounter '\\BCAVES-SFB\System\% Registry Quota In Use' successfully added
 28632:20160720:115713.375 End of add_perf_counter(): SUCCEED
 28632:20160720:115713.376 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\System\% Registry Quota In Use' successfully added
 28632:20160720:115713.380 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115713.380 End of PERF_COUNTER():SUCCEED
 28632:20160720:115713.381 for key [perf_counter["\2\1350",300]] received value [2.521423]
 28632:20160720:115713.381 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\2\1350",300]' value:'2.521423'
 28632:20160720:115713.381 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115713.382 send_buffer() now:1469008633 lastsent:1469008633 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115713.382 End of send_buffer():SUCCEED
 28632:20160720:115713.383 buffer: new element 1
 28632:20160720:115713.383 End of process_value():SUCCEED
 28632:20160720:115713.383 In need_meta_update() key:perf_counter["\2\1350",300]
 28632:20160720:115713.384 End of need_meta_update():FAIL
 28632:20160720:115713.384 In PERF_COUNTER()
 28632:20160720:115713.385 In get_counter_name() pdhIndex:2
 28632:20160720:115713.386 End of get_counter_name():SUCCEED
 28632:20160720:115713.386 In get_counter_name() pdhIndex:146
 28632:20160720:115713.386 End of get_counter_name():SUCCEED
 28632:20160720:115713.387 counter path converted to '\\BCAVES-SFB\System\Context Switches/sec'
 28632:20160720:115713.387 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\System\Context Switches/sec interval:300
 28632:20160720:115713.388 In add_perf_counter() counter:'\\BCAVES-SFB\System\Context Switches/sec' interval:300
 28632:20160720:115713.388 add_perf_counter(): PerfCounter '\\BCAVES-SFB\System\Context Switches/sec' successfully added
 28632:20160720:115713.389 End of add_perf_counter(): SUCCEED
 28632:20160720:115713.389 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\System\Context Switches/sec' successfully added
 52856:20160720:115714.307 In collect_perfstat()
 52856:20160720:115714.314 End of collect_perfstat()
 28632:20160720:115714.398 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115714.399 End of PERF_COUNTER():SUCCEED
 28632:20160720:115714.400 for key [perf_counter["\2\146",300]] received value [9903.638028]
 28632:20160720:115714.400 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\2\146",300]' value:'9903.638028'
 28632:20160720:115714.401 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:2/100
 28632:20160720:115714.401 send_buffer() now:1469008634 lastsent:1469008633 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115714.402 End of send_buffer():SUCCEED
 28632:20160720:115714.403 buffer: new element 2
 28632:20160720:115714.404 End of process_value():SUCCEED
 28632:20160720:115714.404 In need_meta_update() key:perf_counter["\2\146",300]
 28632:20160720:115714.405 End of need_meta_update():FAIL
 28632:20160720:115714.406 In PERF_COUNTER()
 28632:20160720:115714.406 In get_counter_name() pdhIndex:2
 28632:20160720:115714.407 End of get_counter_name():SUCCEED
 28632:20160720:115714.408 In get_counter_name() pdhIndex:44
 28632:20160720:115714.408 End of get_counter_name():SUCCEED
 28632:20160720:115714.409 counter path converted to '\\BCAVES-SFB\System\Processor Queue Length'
 28632:20160720:115714.409 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\System\Processor Queue Length interval:60
 28632:20160720:115714.410 In add_perf_counter() counter:'\\BCAVES-SFB\System\Processor Queue Length' interval:60
 28632:20160720:115714.411 add_perf_counter(): PerfCounter '\\BCAVES-SFB\System\Processor Queue Length' successfully added
 28632:20160720:115714.411 End of add_perf_counter(): SUCCEED
 28632:20160720:115714.412 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\System\Processor Queue Length' successfully added
 28632:20160720:115714.417 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115714.417 End of PERF_COUNTER():SUCCEED
 28632:20160720:115714.418 for key [perf_counter["\2\44",60]] received value [3.000000]
 28632:20160720:115714.418 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\2\44",60]' value:'3.000000'
 28632:20160720:115714.419 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:3/100
 28632:20160720:115714.419 send_buffer() now:1469008634 lastsent:1469008633 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115714.419 End of send_buffer():SUCCEED
 28632:20160720:115714.420 buffer: new element 3
 28632:20160720:115714.420 End of process_value():SUCCEED
 28632:20160720:115714.421 In need_meta_update() key:perf_counter["\2\44",60]
 28632:20160720:115714.421 End of need_meta_update():FAIL
 28632:20160720:115714.422 In PERF_COUNTER()
 28632:20160720:115714.422 In get_counter_name() pdhIndex:4
 28632:20160720:115714.422 End of get_counter_name():SUCCEED
 28632:20160720:115714.423 In get_counter_name() pdhIndex:1382
 28632:20160720:115714.423 End of get_counter_name():SUCCEED
 28632:20160720:115714.424 counter path converted to '\\BCAVES-SFB\Memory\Available MBytes'
 28632:20160720:115714.424 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Memory\Available MBytes interval:300
 28632:20160720:115714.425 In add_perf_counter() counter:'\\BCAVES-SFB\Memory\Available MBytes' interval:300
 28632:20160720:115714.425 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Memory\Available MBytes' successfully added
 28632:20160720:115714.426 End of add_perf_counter(): SUCCEED
 28632:20160720:115714.426 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Memory\Available MBytes' successfully added
 28632:20160720:115714.427 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115714.427 End of PERF_COUNTER():SUCCEED
 28632:20160720:115714.428 for key [perf_counter["\4\1382",300]] received value [3335.000000]
 28632:20160720:115714.428 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\4\1382",300]' value:'3335.000000'
 28632:20160720:115714.429 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:4/100
 28632:20160720:115714.430 send_buffer() now:1469008634 lastsent:1469008633 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115714.430 End of send_buffer():SUCCEED
 28632:20160720:115714.430 buffer: new element 4
 28632:20160720:115714.431 End of process_value():SUCCEED
 28632:20160720:115714.431 In need_meta_update() key:perf_counter["\4\1382",300]
 28632:20160720:115714.432 End of need_meta_update():FAIL
 28632:20160720:115714.432 In PERF_COUNTER()
 28632:20160720:115714.433 In get_counter_name() pdhIndex:4
 28632:20160720:115714.433 End of get_counter_name():SUCCEED
 28632:20160720:115714.434 In get_counter_name() pdhIndex:1406
 28632:20160720:115714.434 End of get_counter_name():SUCCEED
 28632:20160720:115714.434 counter path converted to '\\BCAVES-SFB\Memory\% Committed Bytes In Use'
 28632:20160720:115714.435 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Memory\% Committed Bytes In Use interval:120
 28632:20160720:115714.435 In add_perf_counter() counter:'\\BCAVES-SFB\Memory\% Committed Bytes In Use' interval:120
 28632:20160720:115714.436 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Memory\% Committed Bytes In Use' successfully added
 28632:20160720:115714.437 End of add_perf_counter(): SUCCEED
 28632:20160720:115714.438 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Memory\% Committed Bytes In Use' successfully added
 28632:20160720:115714.438 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115714.439 End of PERF_COUNTER():SUCCEED
 28632:20160720:115714.439 for key [perf_counter["\4\1406",120]] received value [38.241180]
 28632:20160720:115714.440 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\4\1406",120]' value:'38.241180'
 28632:20160720:115714.440 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:5/100
 28632:20160720:115714.441 send_buffer() now:1469008634 lastsent:1469008633 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115714.441 End of send_buffer():SUCCEED
 28632:20160720:115714.441 buffer: new element 5
 28632:20160720:115714.442 End of process_value():SUCCEED
 28632:20160720:115714.442 In need_meta_update() key:perf_counter["\4\1406",120]
 28632:20160720:115714.443 End of need_meta_update():FAIL
 28632:20160720:115714.443 In PERF_COUNTER()
 28632:20160720:115714.444 In get_counter_name() pdhIndex:4
 28632:20160720:115714.444 End of get_counter_name():SUCCEED
 28632:20160720:115714.444 In get_counter_name() pdhIndex:40
 28632:20160720:115714.445 End of get_counter_name():SUCCEED
 28632:20160720:115714.445 counter path converted to '\\BCAVES-SFB\Memory\Pages/sec'
 28632:20160720:115714.446 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Memory\Pages/sec interval:120
 28632:20160720:115714.446 In add_perf_counter() counter:'\\BCAVES-SFB\Memory\Pages/sec' interval:120
 28632:20160720:115714.447 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Memory\Pages/sec' successfully added
 28632:20160720:115714.447 End of add_perf_counter(): SUCCEED
 28632:20160720:115714.448 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Memory\Pages/sec' successfully added
 52856:20160720:115715.315 In collect_perfstat()
 52856:20160720:115715.322 End of collect_perfstat()
 28632:20160720:115715.449 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115715.450 End of PERF_COUNTER():SUCCEED
 28632:20160720:115715.451 for key [perf_counter["\4\40",120]] received value [0.999655]
 28632:20160720:115715.451 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\4\40",120]' value:'0.999655'
 28632:20160720:115715.452 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:6/100
 28632:20160720:115715.452 send_buffer() now:1469008635 lastsent:1469008633 now-lastsent:2 BufferSend:5; will not send now
 28632:20160720:115715.453 End of send_buffer():SUCCEED
 28632:20160720:115715.454 buffer: new element 6
 28632:20160720:115715.454 End of process_value():SUCCEED
 28632:20160720:115715.455 In need_meta_update() key:perf_counter["\4\40",120]
 28632:20160720:115715.456 End of need_meta_update():FAIL
 28632:20160720:115715.456 In PERF_COUNTER()
 28632:20160720:115715.457 In get_counter_name() pdhIndex:4
 28632:20160720:115715.457 End of get_counter_name():SUCCEED
 28632:20160720:115715.458 In get_counter_name() pdhIndex:56
 28632:20160720:115715.458 End of get_counter_name():SUCCEED
 28632:20160720:115715.459 counter path converted to '\\BCAVES-SFB\Memory\Pool Paged Bytes'
 28632:20160720:115715.459 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Memory\Pool Paged Bytes interval:300
 28632:20160720:115715.460 In add_perf_counter() counter:'\\BCAVES-SFB\Memory\Pool Paged Bytes' interval:300
 28632:20160720:115715.461 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Memory\Pool Paged Bytes' successfully added
 28632:20160720:115715.461 End of add_perf_counter(): SUCCEED
 28632:20160720:115715.462 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Memory\Pool Paged Bytes' successfully added
 28632:20160720:115715.462 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115715.462 End of PERF_COUNTER():SUCCEED
 28632:20160720:115715.463 for key [perf_counter["\4\56",300]] received value [206884864.000000]
 28632:20160720:115715.464 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\4\56",300]' value:'206884864.000000'
 28632:20160720:115715.464 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:7/100
 28632:20160720:115715.465 send_buffer() now:1469008635 lastsent:1469008633 now-lastsent:2 BufferSend:5; will not send now
 28632:20160720:115715.466 End of send_buffer():SUCCEED
 28632:20160720:115715.466 buffer: new element 7
 28632:20160720:115715.467 End of process_value():SUCCEED
 28632:20160720:115715.467 In need_meta_update() key:perf_counter["\4\56",300]
 28632:20160720:115715.467 End of need_meta_update():FAIL
 28632:20160720:115715.468 In PERF_COUNTER()
 28632:20160720:115715.468 In get_counter_name() pdhIndex:4
 28632:20160720:115715.469 End of get_counter_name():SUCCEED
 28632:20160720:115715.469 In get_counter_name() pdhIndex:58
 28632:20160720:115715.470 End of get_counter_name():SUCCEED
 28632:20160720:115715.470 counter path converted to '\\BCAVES-SFB\Memory\Pool Nonpaged Bytes'
 28632:20160720:115715.471 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Memory\Pool Nonpaged Bytes interval:300
 28632:20160720:115715.471 In add_perf_counter() counter:'\\BCAVES-SFB\Memory\Pool Nonpaged Bytes' interval:300
 28632:20160720:115715.472 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Memory\Pool Nonpaged Bytes' successfully added
 28632:20160720:115715.472 End of add_perf_counter(): SUCCEED
 28632:20160720:115715.473 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Memory\Pool Nonpaged Bytes' successfully added
 28632:20160720:115715.473 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115715.474 End of PERF_COUNTER():SUCCEED
 28632:20160720:115715.474 for key [perf_counter["\4\58",300]] received value [106184704.000000]
 28632:20160720:115715.475 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\4\58",300]' value:'106184704.000000'
 28632:20160720:115715.475 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:8/100
 28632:20160720:115715.476 send_buffer() now:1469008635 lastsent:1469008633 now-lastsent:2 BufferSend:5; will not send now
 28632:20160720:115715.476 End of send_buffer():SUCCEED
 28632:20160720:115715.476 buffer: new element 8
 28632:20160720:115715.477 End of process_value():SUCCEED
 28632:20160720:115715.477 In need_meta_update() key:perf_counter["\4\58",300]
 28632:20160720:115715.478 End of need_meta_update():FAIL
 28632:20160720:115715.478 In PERF_COUNTER()
 28632:20160720:115715.479 In get_counter_name() pdhIndex:4
 28632:20160720:115715.479 End of get_counter_name():SUCCEED
 28632:20160720:115715.480 In get_counter_name() pdhIndex:678
 28632:20160720:115715.480 End of get_counter_name():SUCCEED
 28632:20160720:115715.481 counter path converted to '\\BCAVES-SFB\Memory\Free System Page Table Entries'
 28632:20160720:115715.482 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Memory\Free System Page Table Entries interval:300
 28632:20160720:115715.482 In add_perf_counter() counter:'\\BCAVES-SFB\Memory\Free System Page Table Entries' interval:300
 28632:20160720:115715.483 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Memory\Free System Page Table Entries' successfully added
 28632:20160720:115715.483 End of add_perf_counter(): SUCCEED
 28632:20160720:115715.484 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Memory\Free System Page Table Entries' successfully added
 28632:20160720:115715.485 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115715.485 End of PERF_COUNTER():SUCCEED
 28632:20160720:115715.486 for key [perf_counter["\4\678",300]] received value [16493855.000000]
 28632:20160720:115715.486 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\4\678",300]' value:'16493855.000000'
 28632:20160720:115715.486 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:9/100
 28632:20160720:115715.487 send_buffer() now:1469008635 lastsent:1469008633 now-lastsent:2 BufferSend:5; will not send now
 28632:20160720:115715.487 End of send_buffer():SUCCEED
 28632:20160720:115715.488 buffer: new element 9
 28632:20160720:115715.488 End of process_value():SUCCEED
 28632:20160720:115715.489 In need_meta_update() key:perf_counter["\4\678",300]
 28632:20160720:115715.489 End of need_meta_update():FAIL
 28632:20160720:115715.489 In PERF_COUNTER()
 28632:20160720:115715.489 In get_counter_name() pdhIndex:4
 28632:20160720:115715.491 End of get_counter_name():SUCCEED
 28632:20160720:115715.492 In get_counter_name() pdhIndex:818
 28632:20160720:115715.493 End of get_counter_name():SUCCEED
 28632:20160720:115715.493 counter path converted to '\\BCAVES-SFB\Memory\Cache Bytes'
 28632:20160720:115715.494 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Memory\Cache Bytes interval:300
 28632:20160720:115715.495 In add_perf_counter() counter:'\\BCAVES-SFB\Memory\Cache Bytes' interval:300
 28632:20160720:115715.496 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Memory\Cache Bytes' successfully added
 28632:20160720:115715.496 End of add_perf_counter(): SUCCEED
 28632:20160720:115715.497 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Memory\Cache Bytes' successfully added
 28632:20160720:115715.497 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115715.498 End of PERF_COUNTER():SUCCEED
 28632:20160720:115715.499 for key [perf_counter["\4\818",300]] received value [83492864.000000]
 28632:20160720:115715.500 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\4\818",300]' value:'83492864.000000'
 28632:20160720:115715.500 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:10/100
 28632:20160720:115715.501 send_buffer() now:1469008635 lastsent:1469008633 now-lastsent:2 BufferSend:5; will not send now
 28632:20160720:115715.502 End of send_buffer():SUCCEED
 28632:20160720:115715.502 buffer: new element 10
 28632:20160720:115715.503 End of process_value():SUCCEED
 28632:20160720:115715.503 In need_meta_update() key:perf_counter["\4\818",300]
 28632:20160720:115715.504 End of need_meta_update():FAIL
 28632:20160720:115715.505 In PERF_COUNTER()
 28632:20160720:115715.506 In get_counter_name() pdhIndex:510
 28632:20160720:115715.506 End of get_counter_name():SUCCEED
 28632:20160720:115715.507 In get_counter_name() pdhIndex:388
 28632:20160720:115715.507 End of get_counter_name():SUCCEED
 28632:20160720:115715.508 counter path converted to '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Total/sec'
 28632:20160720:115715.508 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Total/sec interval:300
 28632:20160720:115715.509 In add_perf_counter() counter:'\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Total/sec' interval:300
 28632:20160720:115715.515 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Total/sec' successfully added
 28632:20160720:115715.516 End of add_perf_counter(): SUCCEED
 28632:20160720:115715.516 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Total/sec' successfully added
 52856:20160720:115716.323 In collect_perfstat()
 52856:20160720:115716.339 End of collect_perfstat()
 28632:20160720:115716.524 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115716.525 End of PERF_COUNTER():SUCCEED
 28632:20160720:115716.525 for key [perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\388",300]] received value [1372.911449]
 28632:20160720:115716.526 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\388",300]' value:'1372.911449'
 28632:20160720:115716.526 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:11/100
 28632:20160720:115716.527 send_buffer() now:1469008636 lastsent:1469008633 now-lastsent:3 BufferSend:5; will not send now
 28632:20160720:115716.527 End of send_buffer():SUCCEED
 28632:20160720:115716.527 buffer: new element 11
 28632:20160720:115716.528 End of process_value():SUCCEED
 28632:20160720:115716.528 In need_meta_update() key:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\388",300]
 28632:20160720:115716.529 End of need_meta_update():FAIL
 28632:20160720:115716.529 In PERF_COUNTER()
 28632:20160720:115716.530 In get_counter_name() pdhIndex:510
 28632:20160720:115716.530 End of get_counter_name():SUCCEED
 28632:20160720:115716.530 In get_counter_name() pdhIndex:506
 28632:20160720:115716.531 End of get_counter_name():SUCCEED
 28632:20160720:115716.531 counter path converted to '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Sent/sec'
 28632:20160720:115716.532 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Sent/sec interval:300
 28632:20160720:115716.532 In add_perf_counter() counter:'\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Sent/sec' interval:300
 28632:20160720:115716.533 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Sent/sec' successfully added
 28632:20160720:115716.533 End of add_perf_counter(): SUCCEED
 28632:20160720:115716.534 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Sent/sec' successfully added
 52856:20160720:115717.340 In collect_perfstat()
 52856:20160720:115717.348 End of collect_perfstat()
 28632:20160720:115717.541 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115717.541 End of PERF_COUNTER():SUCCEED
 28632:20160720:115717.542 for key [perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\506",300]] received value [3719.166216]
 28632:20160720:115717.542 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\506",300]' value:'3719.166216'
 28632:20160720:115717.543 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:12/100
 28632:20160720:115717.543 send_buffer() now:1469008637 lastsent:1469008633 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115717.544 End of send_buffer():SUCCEED
 28632:20160720:115717.544 buffer: new element 12
 28632:20160720:115717.545 End of process_value():SUCCEED
 28632:20160720:115717.545 In need_meta_update() key:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\506",300]
 28632:20160720:115717.546 End of need_meta_update():FAIL
 28632:20160720:115717.546 In PERF_COUNTER()
 28632:20160720:115717.546 In get_counter_name() pdhIndex:510
 28632:20160720:115717.547 End of get_counter_name():SUCCEED
 28632:20160720:115717.547 In get_counter_name() pdhIndex:520
 28632:20160720:115717.548 End of get_counter_name():SUCCEED
 28632:20160720:115717.548 counter path converted to '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Current Bandwidth'
 28632:20160720:115717.549 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Current Bandwidth interval:300
 28632:20160720:115717.549 In add_perf_counter() counter:'\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Current Bandwidth' interval:300
 28632:20160720:115717.550 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Current Bandwidth' successfully added
 28632:20160720:115717.550 End of add_perf_counter(): SUCCEED
 28632:20160720:115717.551 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Current Bandwidth' successfully added
 28632:20160720:115717.554 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115717.554 End of PERF_COUNTER():SUCCEED
 28632:20160720:115717.555 for key [perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\520",300]] received value [1000000000.000000]
 28632:20160720:115717.555 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\520",300]' value:'1000000000.000000'
 28632:20160720:115717.556 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:13/100
 28632:20160720:115717.557 send_buffer() now:1469008637 lastsent:1469008633 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115717.557 End of send_buffer():SUCCEED
 28632:20160720:115717.558 buffer: new element 13
 28632:20160720:115717.558 End of process_value():SUCCEED
 28632:20160720:115717.559 In need_meta_update() key:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\520",300]
 28632:20160720:115717.559 End of need_meta_update():FAIL
 28632:20160720:115717.560 In PERF_COUNTER()
 28632:20160720:115717.560 In get_counter_name() pdhIndex:510
 28632:20160720:115717.561 End of get_counter_name():SUCCEED
 28632:20160720:115717.561 In get_counter_name() pdhIndex:528
 28632:20160720:115717.562 End of get_counter_name():SUCCEED
 28632:20160720:115717.562 counter path converted to '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Received Discarded'
 28632:20160720:115717.562 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Received Discarded interval:300
 28632:20160720:115717.563 In add_perf_counter() counter:'\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Received Discarded' interval:300
 28632:20160720:115717.564 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Received Discarded' successfully added
 28632:20160720:115717.564 End of add_perf_counter(): SUCCEED
 28632:20160720:115717.565 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Received Discarded' successfully added
 28632:20160720:115717.568 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115717.568 End of PERF_COUNTER():SUCCEED
 28632:20160720:115717.569 for key [perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\528",300]] received value [0.000000]
 28632:20160720:115717.569 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\528",300]' value:'0.000000'
 28632:20160720:115717.570 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:14/100
 28632:20160720:115717.570 send_buffer() now:1469008637 lastsent:1469008633 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115717.570 End of send_buffer():SUCCEED
 28632:20160720:115717.571 buffer: new element 14
 28632:20160720:115717.571 End of process_value():SUCCEED
 28632:20160720:115717.572 In need_meta_update() key:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\528",300]
 28632:20160720:115717.572 End of need_meta_update():FAIL
 28632:20160720:115717.573 In PERF_COUNTER()
 28632:20160720:115717.573 In get_counter_name() pdhIndex:510
 28632:20160720:115717.573 End of get_counter_name():SUCCEED
 28632:20160720:115717.574 In get_counter_name() pdhIndex:530
 28632:20160720:115717.574 End of get_counter_name():SUCCEED
 28632:20160720:115717.575 counter path converted to '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Received Errors'
 28632:20160720:115717.575 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Received Errors interval:300
 28632:20160720:115717.575 In add_perf_counter() counter:'\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Received Errors' interval:300
 28632:20160720:115717.576 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Received Errors' successfully added
 28632:20160720:115717.576 End of add_perf_counter(): SUCCEED
 28632:20160720:115717.577 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Received Errors' successfully added
 28632:20160720:115717.580 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115717.580 End of PERF_COUNTER():SUCCEED
 28632:20160720:115717.581 for key [perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\530",300]] received value [0.000000]
 28632:20160720:115717.581 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\530",300]' value:'0.000000'
 28632:20160720:115717.581 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:15/100
 28632:20160720:115717.582 send_buffer() now:1469008637 lastsent:1469008633 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115717.582 End of send_buffer():SUCCEED
 28632:20160720:115717.583 buffer: new element 15
 28632:20160720:115717.583 End of process_value():SUCCEED
 28632:20160720:115717.583 In need_meta_update() key:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\530",300]
 28632:20160720:115717.584 End of need_meta_update():FAIL
 28632:20160720:115717.584 In PERF_COUNTER()
 28632:20160720:115717.584 In get_counter_name() pdhIndex:510
 28632:20160720:115717.585 End of get_counter_name():SUCCEED
 28632:20160720:115717.585 In get_counter_name() pdhIndex:540
 28632:20160720:115717.586 End of get_counter_name():SUCCEED
 28632:20160720:115717.586 counter path converted to '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Outbound Discarded'
 28632:20160720:115717.586 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Outbound Discarded interval:300
 28632:20160720:115717.587 In add_perf_counter() counter:'\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Outbound Discarded' interval:300
 28632:20160720:115717.587 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Outbound Discarded' successfully added
 28632:20160720:115717.588 End of add_perf_counter(): SUCCEED
 28632:20160720:115717.588 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Outbound Discarded' successfully added
 28632:20160720:115717.591 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115717.592 End of PERF_COUNTER():SUCCEED
 28632:20160720:115717.592 for key [perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\540",300]] received value [0.000000]
 28632:20160720:115717.593 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\540",300]' value:'0.000000'
 28632:20160720:115717.593 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:16/100
 28632:20160720:115717.593 send_buffer() now:1469008637 lastsent:1469008633 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115717.594 End of send_buffer():SUCCEED
 28632:20160720:115717.594 buffer: new element 16
 28632:20160720:115717.595 End of process_value():SUCCEED
 28632:20160720:115717.595 In need_meta_update() key:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\540",300]
 28632:20160720:115717.595 End of need_meta_update():FAIL
 28632:20160720:115717.596 In PERF_COUNTER()
 28632:20160720:115717.596 In get_counter_name() pdhIndex:510
 28632:20160720:115717.596 End of get_counter_name():SUCCEED
 28632:20160720:115717.597 In get_counter_name() pdhIndex:542
 28632:20160720:115717.597 End of get_counter_name():SUCCEED
 28632:20160720:115717.598 counter path converted to '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Outbound Errors'
 28632:20160720:115717.598 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Outbound Errors interval:300
 28632:20160720:115717.598 In add_perf_counter() counter:'\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Outbound Errors' interval:300
 28632:20160720:115717.599 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Outbound Errors' successfully added
 28632:20160720:115717.599 End of add_perf_counter(): SUCCEED
 28632:20160720:115717.600 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Packets Outbound Errors' successfully added
 28632:20160720:115717.603 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115717.603 End of PERF_COUNTER():SUCCEED
 28632:20160720:115717.604 for key [perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\542",300]] received value [0.000000]
 28632:20160720:115717.604 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\542",300]' value:'0.000000'
 28632:20160720:115717.605 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:17/100
 28632:20160720:115717.605 send_buffer() now:1469008637 lastsent:1469008633 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115717.605 End of send_buffer():SUCCEED
 28632:20160720:115717.606 buffer: new element 17
 28632:20160720:115717.607 End of process_value():SUCCEED
 28632:20160720:115717.607 In need_meta_update() key:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\542",300]
 28632:20160720:115717.607 End of need_meta_update():FAIL
 28632:20160720:115717.608 In PERF_COUNTER()
 28632:20160720:115717.608 In get_counter_name() pdhIndex:510
 28632:20160720:115717.609 End of get_counter_name():SUCCEED
 28632:20160720:115717.609 In get_counter_name() pdhIndex:544
 28632:20160720:115717.609 End of get_counter_name():SUCCEED
 28632:20160720:115717.610 counter path converted to '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Output Queue Length'
 28632:20160720:115717.610 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Output Queue Length interval:300
 28632:20160720:115717.611 In add_perf_counter() counter:'\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Output Queue Length' interval:300
 28632:20160720:115717.611 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Output Queue Length' successfully added
 28632:20160720:115717.612 End of add_perf_counter(): SUCCEED
 28632:20160720:115717.612 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Output Queue Length' successfully added
 28632:20160720:115717.615 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115717.616 End of PERF_COUNTER():SUCCEED
 28632:20160720:115717.616 for key [perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\544",300]] received value [0.000000]
 28632:20160720:115717.617 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\544",300]' value:'0.000000'
 28632:20160720:115717.617 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:18/100
 28632:20160720:115717.618 send_buffer() now:1469008637 lastsent:1469008633 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115717.618 End of send_buffer():SUCCEED
 28632:20160720:115717.619 buffer: new element 18
 28632:20160720:115717.619 End of process_value():SUCCEED
 28632:20160720:115717.620 In need_meta_update() key:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\544",300]
 28632:20160720:115717.620 End of need_meta_update():FAIL
 28632:20160720:115717.621 In PERF_COUNTER()
 28632:20160720:115717.621 In get_counter_name() pdhIndex:510
 28632:20160720:115717.621 End of get_counter_name():SUCCEED
 28632:20160720:115717.622 In get_counter_name() pdhIndex:898
 28632:20160720:115717.622 End of get_counter_name():SUCCEED
 28632:20160720:115717.623 counter path converted to '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Received/Sec'
 28632:20160720:115717.623 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Received/Sec interval:300
 28632:20160720:115717.624 In add_perf_counter() counter:'\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Received/Sec' interval:300
 28632:20160720:115717.624 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Received/Sec' successfully added
 28632:20160720:115717.625 End of add_perf_counter(): SUCCEED
 28632:20160720:115717.625 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Network Interface(Intel[R] 82574L Gigabit Network Connection)\Bytes Received/Sec' successfully added
 52856:20160720:115718.349 In collect_perfstat()
 52856:20160720:115718.358 End of collect_perfstat()
 28632:20160720:115718.632 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115718.632 End of PERF_COUNTER():SUCCEED
 28632:20160720:115718.633 for key [perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\898",300]] received value [4103.517884]
 28632:20160720:115718.633 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\898",300]' value:'4103.517884'
 28632:20160720:115718.634 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:19/100
 28632:20160720:115718.645 JSON before sending [{"request":"agent data","data":[{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\238(_Total)\\4686\",60]","value":"0.000000","clock":1469008633,"ns":463789086},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\2\\1350\",300]","value":"2.521423","clock":1469008633,"ns":482785945},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\2\\146\",300]","value":"9903.638028","clock":1469008634,"ns":503265948},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\2\\44\",60]","value":"3.000000","clock":1469008634,"ns":520163233},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\4\\1382\",300]","value":"3335.000000","clock":1469008634,"ns":530683585},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\4\\1406\",120]","value":"38.241180","clock":1469008634,"ns":541786636},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\4\\40\",120]","value":"0.999655","clock":1469008635,"ns":554124011},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\4\\56\",300]","value":"206884864.000000","clock":1469008635,"ns":566587506},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\4\\58\",300]","value":"106184704.000000","clock":1469008635,"ns":576705053},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\4\\678\",300]","value":"16493855.000000","clock":1469008635,"ns":588376137},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\4\\818\",300]","value":"83492864.000000","clock":1469008635,"ns":602667411},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\388\",300]","value":"1372.911449","clock":1469008636,"ns":627876952},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\506\",300]","value":"3719.166216","clock":1469008637,"ns":644697979},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\520\",300]","value":"1000000000.000000","clock":1469008637,"ns":658320028},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\528\",300]","value":"0.000000","clock":1469008637,"ns":671261611},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\530\",300]","value":"0.000000","clock":1469008637,"ns":683073481},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\540\",300]","value":"0.000000","clock":1469008637,"ns":694615022},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\542\",300]","value":"0.000000","clock":1469008637,"ns":706619007},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\544\",300]","value":"0.000000","clock":1469008637,"ns":719449623}],"clock":1469008638,"ns":745360652}]
 28632:20160720:115718.656 JSON back [{"response":"success","info":"processed: 19; failed: 0; total: 19; seconds spent: 0.000212"}]
 28632:20160720:115718.657 In check_response() response:'{"response":"success","info":"processed: 19; failed: 0; total: 19; seconds spent: 0.000212"}'
 28632:20160720:115718.657 info from server: 'processed: 19; failed: 0; total: 19; seconds spent: 0.000212'
 28632:20160720:115718.658 End of check_response():SUCCEED
 28632:20160720:115718.658 OK
 28632:20160720:115718.659 End of send_buffer():SUCCEED
 28632:20160720:115718.659 buffer: new element 0
 28632:20160720:115718.660 End of process_value():SUCCEED
 28632:20160720:115718.660 In need_meta_update() key:perf_counter["\510(Intel(R) 82574L Gigabit Network Connection)\898",300]
 28632:20160720:115718.660 End of need_meta_update():FAIL
 28632:20160720:115718.661 In PERF_COUNTER()
 28632:20160720:115718.661 In get_counter_name() pdhIndex:700
 28632:20160720:115718.662 End of get_counter_name():SUCCEED
 28632:20160720:115718.662 In get_counter_name() pdhIndex:702
 28632:20160720:115718.663 End of get_counter_name():SUCCEED
 28632:20160720:115718.663 counter path converted to '\\BCAVES-SFB\Paging File(_Total)\% Usage'
 28632:20160720:115718.663 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Paging File(_Total)\% Usage interval:60
 28632:20160720:115718.664 In add_perf_counter() counter:'\\BCAVES-SFB\Paging File(_Total)\% Usage' interval:60
 28632:20160720:115718.664 add_perf_counter(): PerfCounter '\\BCAVES-SFB\Paging File(_Total)\% Usage' successfully added
 28632:20160720:115718.665 End of add_perf_counter(): SUCCEED
 28632:20160720:115718.666 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\Paging File(_Total)\% Usage' successfully added
 28632:20160720:115718.666 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115718.667 End of PERF_COUNTER():SUCCEED
 28632:20160720:115718.667 for key [perf_counter["\700(_Total)\702",60]] received value [0.308621]
 28632:20160720:115718.668 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\700(_Total)\702",60]' value:'0.308621'
 28632:20160720:115718.668 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115718.669 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.669 End of send_buffer():SUCCEED
 28632:20160720:115718.669 buffer: new element 1
 28632:20160720:115718.670 End of process_value():SUCCEED
 28632:20160720:115718.670 In need_meta_update() key:perf_counter["\700(_Total)\702",60]
 28632:20160720:115718.671 End of need_meta_update():FAIL
 28632:20160720:115718.680 for key [proc.num[]] received value [85]
 28632:20160720:115718.680 In process_value() key:'bcaves-sfb.bca.int:proc.num[]' value:'85'
 28632:20160720:115718.681 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:2/100
 28632:20160720:115718.681 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.682 End of send_buffer():SUCCEED
 28632:20160720:115718.682 buffer: new element 2
 28632:20160720:115718.683 End of process_value():SUCCEED
 28632:20160720:115718.683 In need_meta_update() key:proc.num[]
 28632:20160720:115718.683 End of need_meta_update():FAIL
 28632:20160720:115718.870 for key [service.discovery] received value [{"data":[{"{#SERVICE.NAME}":"AeLookupSvc","{#SERVICE.DISPLAYNAME}":"Application Experience","{#SERVICE.DESCRIPTION}":"Processes application compatibility cache requests for applications as they are launched","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"ALG","{#SERVICE.DISPLAYNAME}":"Application Layer Gateway Service","{#SERVICE.DESCRIPTION}":"Provides support for 3rd party protocol plug-ins for Internet Connection Sharing","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\alg.exe","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AppHostSvc","{#SERVICE.DISPLAYNAME}":"Application Host Helper Service","{#SERVICE.DESCRIPTION}":"Provides administrative services for IIS, for example configuration history and Application Pool account mapping. If this service is stopped, configuration history and locking down files or directories with Application Pool specific Access Control Entries will not work.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k apphost","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"AppIDSvc","{#SERVICE.DISPLAYNAME}":"Application Identity","{#SERVICE.DESCRIPTION}":"Determines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Appinfo","{#SERVICE.DISPLAYNAME}":"Application Information","{#SERVICE.DESCRIPTION}":"Facilitates the running of interactive applications with additional administrative privileges.  If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AppMgmt","{#SERVICE.DISPLAYNAME}":"Application Management","{#SERVICE.DESCRIPTION}":"Processes installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AppReadiness","{#SERVICE.DISPLAYNAME}":"App Readiness","{#SERVICE.DESCRIPTION}":"Gets apps ready for use the first time a user signs in to this PC and when adding new apps.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k AppReadiness","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AppXSvc","{#SERVICE.DISPLAYNAME}":"AppX Deployment Service (AppXSVC)","{#SERVICE.DESCRIPTION}":"Provides infrastructure support for deploying Store applications. This service is started on demand and if disabled Store applications will not be deployed to the system, and may not function properly.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k wsappx","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"aspnet_state","{#SERVICE.DISPLAYNAME}":"ASP.NET State Service","{#SERVICE.DESCRIPTION}":"Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AudioEndpointBuilder","{#SERVICE.DISPLAYNAME}":"Windows Audio Endpoint Builder","{#SERVICE.DESCRIPTION}":"Manages audio devices for the Windows Audio service.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Audiosrv","{#SERVICE.DISPLAYNAME}":"Windows Audio","{#SERVICE.DESCRIPTION}":"Manages audio for Windows-based programs.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AxInstSV","{#SERVICE.DISPLAYNAME}":"ActiveX Installer (AxInstSV)","{#SERVICE.DESCRIPTION}":"Provides User Account Control validation for the installation of ActiveX controls from the Internet and enables management of ActiveX control installation based on Group Policy settings. This service is started on demand and if disabled the installation of ActiveX controls will behave according to default browser settings.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k AxInstSVGroup","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"BFE","{#SERVICE.DISPLAYNAME}":"Base Filtering Engine","{#SERVICE.DESCRIPTION}":"The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"BITS","{#SERVICE.DISPLAYNAME}":"Background Intelligent Transfer Service","{#SERVICE.DESCRIPTION}":"Transfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"BrokerInfrastructure","{#SERVICE.DISPLAYNAME}":"Background Tasks Infrastructure Service","{#SERVICE.DESCRIPTION}":"Windows infrastructure service that controls which background tasks can run on the system.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"Browser","{#SERVICE.DISPLAYNAME}":"Computer Browser","{#SERVICE.DESCRIPTION}":"Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"c2wts","{#SERVICE.DISPLAYNAME}":"Claims to Windows Token Service","{#SERVICE.DESCRIPTION}":"Service to convert claims based identities to windows identities","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Program Files\\Windows Identity Foundation\\v3.5\\c2wtshost.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"CertPropSvc","{#SERVICE.DISPLAYNAME}":"Certificate Propagation","{#SERVICE.DESCRIPTION}":"Copies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"COMSysApp","{#SERVICE.DISPLAYNAME}":"COM+ System Application","{#SERVICE.DESCRIPTION}":"Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"CryptSvc","{#SERVICE.DISPLAYNAME}":"Cryptographic Services","{#SERVICE.DESCRIPTION}":"Provides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT Authority\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"CscService","{#SERVICE.DISPLAYNAME}":"Offline Files","{#SERVICE.DESCRIPTION}":"The Offline Files service performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of the public API, and dispatches interesting events to those interested in Offline Files activities and changes in cache state.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"DcomLaunch","{#SERVICE.DISPLAYNAME}":"DCOM Server Process Launcher","{#SERVICE.DESCRIPTION}":"The DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"defragsvc","{#SERVICE.DISPLAYNAME}":"Optimize drives","{#SERVICE.DESCRIPTION}":"Helps the computer run more efficiently by optimizing files on storage drives.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k defragsvc","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"DeviceAssociationService","{#SERVICE.DISPLAYNAME}":"Device Association Service","{#SERVICE.DESCRIPTION}":"Enables pairing between the system and wired or wireless devices.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"DeviceInstall","{#SERVICE.DISPLAYNAME}":"Device Install Service","{#SERVICE.DESCRIPTION}":"Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Dhcp","{#SERVICE.DISPLAYNAME}":"DHCP Client","{#SERVICE.DESCRIPTION}":"Registers and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"DiagTrack","{#SERVICE.DISPLAYNAME}":"Diagnostics Tracking Service","{#SERVICE.DESCRIPTION}":"The Diagnostics Tracking Service enables data collection about functional issues in Windows components.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k utcsvc","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"Dnscache","{#SERVICE.DISPLAYNAME}":"DNS Client","{#SERVICE.DESCRIPTION}":"The DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computer's name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"dot3svc","{#SERVICE.DISPLAYNAME}":"Wired AutoConfig","{#SERVICE.DESCRIPTION}":"The Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"DPS","{#SERVICE.DISPLAYNAME}":"Diagnostic Policy Service","{#SERVICE.DESCRIPTION}":"The Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components.  If this service is stopped, diagnostics will no longer function.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalServiceNoNetwork","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"DsmSvc","{#SERVICE.DISPLAYNAME}":"Device Setup Manager","{#SERVICE.DESCRIPTION}":"Enables the detection, download and installation of device-related software. If this service is disabled, devices may be configured with outdated software, and may not work correctly.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Eaphost","{#SERVICE.DISPLAYNAME}":"Extensible Authentication Protocol","{#SERVICE.DESCRIPTION}":"The Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP).  EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process.  If you disable this service, this computer is prevented from accessing networks that require EAP authentication.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"EFS","{#SERVICE.DISPLAYNAME}":"Encrypting File System (EFS)","{#SERVICE.DESCRIPTION}":"Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\lsass.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"EventLog","{#SERVICE.DISPLAYNAME}":"Windows Event Log","{#SERVICE.DESCRIPTION}":"This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"EventSystem","{#SERVICE.DISPLAYNAME}":"COM+ Event System","{#SERVICE.DESCRIPTION}":"Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"FabricHostSvc","{#SERVICE.DISPLAYNAME}":"Windows Fabric Host Service","{#SERVICE.DESCRIPTION}":"This service controls Windows Fabric process on this machine.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Windows Fabric\\bin\\FabricHost.exe\"","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"fdPHost","{#SERVICE.DISPLAYNAME}":"Function Discovery Provider Host","{#SERVICE.DESCRIPTION}":"The FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services – Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"FDResPub","{#SERVICE.DISPLAYNAME}":"Function Discovery Resource Publication","{#SERVICE.DESCRIPTION}":"Publishes this computer and resources attached to this computer so they can be discovered over the network.  If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"FontCache","{#SERVICE.DISPLAYNAME}":"Windows Font Cache Service","{#SERVICE.DESCRIPTION}":"Optimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"FontCache3.0.0.0","{#SERVICE.DISPLAYNAME}":"Windows Presentation Foundation Font Cache 3.0.0.0","{#SERVICE.DESCRIPTION}":"Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"FTA","{#SERVICE.DISPLAYNAME}":"Skype for Business Server File Transfer Agent","{#SERVICE.DESCRIPTION}":"Skype for Business Server File Transfer Agent","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\File Transfer Agent\\FileTransferAgent.exe\" -s ","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"gpsvc","{#SERVICE.DISPLAYNAME}":"Group Policy Client","{#SERVICE.DESCRIPTION}":"The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is disabled.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"hidserv","{#SERVICE.DISPLAYNAME}":"Human Interface Device Service","{#SERVICE.DESCRIPTION}":"Activates and maintains the use of hot buttons on keyboards, remote controls, and other multimedia devices. It is recommended that you keep this service running.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"hkmsvc","{#SERVICE.DISPLAYNAME}":"Health Key and Certificate Management","{#SERVICE.DESCRIPTION}":"Provides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this service","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"IEEtwCollectorService","{#SERVICE.DISPLAYNAME}":"Internet Explorer ETW Collector Service","{#SERVICE.DESCRIPTION}":"ETW Collector Service for Internet Explorer. When running, this service collects real time ETW events and processes them.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\IEEtwCollector.exe /V","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"IISADMIN","{#SERVICE.DISPLAYNAME}":"IIS Admin Service","{#SERVICE.DESCRIPTION}":"Enables this server to administer the IIS metabase. The IIS metabase stores configuration for the SMTP and FTP services. If this service is stopped, the server will be unable to configure SMTP or FTP. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\inetsrv\\inetinfo.exe","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"IKEEXT","{#SERVICE.DISPLAYNAME}":"IKE and AuthIP IPsec Keying Modules","{#SERVICE.DESCRIPTION}":"The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"iphlpsvc","{#SERVICE.DISPLAYNAME}":"IP Helper","{#SERVICE.DESCRIPTION}":"Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetSvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"KeyIso","{#SERVICE.DISPLAYNAME}":"CNG Key Isolation","{#SERVICE.DESCRIPTION}":"The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\lsass.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"KPSSVC","{#SERVICE.DISPLAYNAME}":"KDC Proxy Server service (KPS)","{#SERVICE.DESCRIPTION}":"KDC Proxy Server service runs on edge servers to proxy Kerberos protocol messages to domain controllers on the corporate network.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k KpsSvcGroup","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"KtmRm","{#SERVICE.DISPLAYNAME}":"KtmRm for Distributed Transaction Coordinator","{#SERVICE.DESCRIPTION}":"Coordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetworkServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"LanmanServer","{#SERVICE.DISPLAYNAME}":"Server","{#SERVICE.DESCRIPTION}":"Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"LanmanWorkstation","{#SERVICE.DISPLAYNAME}":"Workstation","{#SERVICE.DESCRIPTION}":"Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"lltdsvc","{#SERVICE.DISPLAYNAME}":"Link-Layer Topology Discovery Mapper","{#SERVICE.DESCRIPTION}":"Creates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device.  If this service is disabled, the Network Map will not function properly.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"lmhosts","{#SERVICE.DISPLAYNAME}":"TCP/IP NetBIOS Helper","{#SERVICE.DESCRIPTION}":"Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"LSM","{#SERVICE.DISPLAYNAME}":"Local Session Manager","{#SERVICE.DESCRIPTION}":"Core Windows Service that manages local user sessions. Stopping or disabling this service will result in system instability.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"MASTER","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Master Replicator Agent","{#SERVICE.DESCRIPTION}":"Skype for Business Server Master Replicator Agent","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Master Replicator Agent\\MasterReplicatorAgent.exe\" -s","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"MMCSS","{#SERVICE.DISPLAYNAME}":"Multimedia Class Scheduler","{#SERVICE.DESCRIPTION}":"Enables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications.  If this service is stopped, individual tasks resort to their default priority.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"MpsSvc","{#SERVICE.DISPLAYNAME}":"Windows Firewall","{#SERVICE.DESCRIPTION}":"Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"MSDTC","{#SERVICE.DISPLAYNAME}":"Distributed Transaction Coordinator","{#SERVICE.DESCRIPTION}":"Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\msdtc.exe","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"MSiSCSI","{#SERVICE.DISPLAYNAME}":"Microsoft iSCSI Initiator Service","{#SERVICE.DESCRIPTION}":"Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"msiserver","{#SERVICE.DISPLAYNAME}":"Windows Installer","{#SERVICE.DESCRIPTION}":"Adds, modifies, and removes applications provided as a Windows Installer (*.msi, *.msp) package. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\msiexec.exe /V","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"MSSQL$LYNCLOCAL","{#SERVICE.DISPLAYNAME}":"SQL Server (LYNCLOCAL)","{#SERVICE.DESCRIPTION}":"Provides storage, processing and controlled access of data, and rapid transaction processing.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.LYNCLOCAL\\MSSQL\\Binn\\sqlservr.exe\" -sLYNCLOCAL","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"MSSQL$RTC","{#SERVICE.DISPLAYNAME}":"SQL Server (RTC)","{#SERVICE.DESCRIPTION}":"Provides storage, processing and controlled access of data, and rapid transaction processing.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.RTC\\MSSQL\\Binn\\sqlservr.exe\" -sRTC","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"MSSQL$RTCLOCAL","{#SERVICE.DISPLAYNAME}":"SQL Server (RTCLOCAL)","{#SERVICE.DESCRIPTION}":"Provides storage, processing and controlled access of data, and rapid transaction processing.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.RTCLOCAL\\MSSQL\\Binn\\sqlservr.exe\" -sRTCLOCAL","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"napagent","{#SERVICE.DISPLAYNAME}":"Network Access Protection Agent","{#SERVICE.DESCRIPTION}":"The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"NcaSvc","{#SERVICE.DISPLAYNAME}":"Network Connectivity Assistant","{#SERVICE.DESCRIPTION}":"Provides DirectAccess status notification for UI components","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetSvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"NcbService","{#SERVICE.DISPLAYNAME}":"Network Connection Broker","{#SERVICE.DESCRIPTION}":"Brokers connections that allow Windows Store Apps to receive notifications from the internet.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Netlogon","{#SERVICE.DISPLAYNAME}":"Netlogon","{#SERVICE.DESCRIPTION}":"Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\lsass.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"Netman","{#SERVICE.DISPLAYNAME}":"Network Connections","{#SERVICE.DESCRIPTION}":"Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"netprofm","{#SERVICE.DISPLAYNAME}":"Network List Service","{#SERVICE.DESCRIPTION}":"Identifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"NetTcpPortSharing","{#SERVICE.DISPLAYNAME}":"Net.Tcp Port Sharing Service","{#SERVICE.DESCRIPTION}":"Provides ability to share TCP ports over the net.tcp protocol.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"NlaSvc","{#SERVICE.DISPLAYNAME}":"Network Location Awareness","{#SERVICE.DESCRIPTION}":"Collects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"nsi","{#SERVICE.DISPLAYNAME}":"Network Store Interface Service","{#SERVICE.DESCRIPTION}":"This service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"PerfHost","{#SERVICE.DISPLAYNAME}":"Performance Counter DLL Host","{#SERVICE.DESCRIPTION}":"Enables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\SysWow64\\perfhost.exe","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"pla","{#SERVICE.DISPLAYNAME}":"Performance Logs & Alerts","{#SERVICE.DESCRIPTION}":"Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalServiceNoNetwork","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"PlugPlay","{#SERVICE.DISPLAYNAME}":"Plug and Play","{#SERVICE.DESCRIPTION}":"Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"PolicyAgent","{#SERVICE.DISPLAYNAME}":"IPsec Policy Agent","{#SERVICE.DESCRIPTION}":"Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection.  This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool \"netsh ipsec\".  If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec.  Also,remote management of Windows Firewall is not available when this service is stopped.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k NetworkServiceNetworkRestricted","{#SERVICE.USER}":"NT Authority\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Power","{#SERVICE.DISPLAYNAME}":"Power","{#SERVICE.DESCRIPTION}":"Manages power policy and power policy notification delivery.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"PrintNotify","{#SERVICE.DISPLAYNAME}":"Printer Extensions and Notifications","{#SERVICE.DESCRIPTION}":"This service opens custom printer dialog boxes and handles notifications from a remote print server or a printer. If you turn off this service, you won’t be able to see printer extensions or notifications.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k print","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"ProfSvc","{#SERVICE.DISPLAYNAME}":"User Profile Service","{#SERVICE.DESCRIPTION}":"This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully sign in or sign out, apps might have problems getting to users' data, and components registered to receive profile event notifications won't receive them.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"RasAuto","{#SERVICE.DISPLAYNAME}":"Remote Access Auto Connection Manager","{#SERVICE.DESCRIPTION}":"Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"RasMan","{#SERVICE.DISPLAYNAME}":"Remote Access Connection Manager","{#SERVICE.DESCRIPTION}":"Manages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"RemoteAccess","{#SERVICE.DISPLAYNAME}":"Routing and Remote Access","{#SERVICE.DESCRIPTION}":"Offers routing services to businesses in local area and wide area network environments.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"RemoteRegistry","{#SERVICE.DISPLAYNAME}":"Remote Registry","{#SERVICE.DESCRIPTION}":"Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k localService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"REPLICA","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Replica Replicator Agent","{#SERVICE.DESCRIPTION}":"Skype for Business Server Replica Replicator Agent","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Server\\Replica Replicator Agent\\ReplicaReplicatorAgent.exe\" -s /replicaRootDir:C:\\RtcReplicaRoot\\ /sqlInstance:(local)\\rtclocal /sqlDatabase:xds","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"rpcapd","{#SERVICE.DISPLAYNAME}":"Remote Packet Capture Protocol v.0 (experimental)","{#SERVICE.DESCRIPTION}":"Allows to capture traffic on this machine from a remote machine.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"\"C:\\Program Files (x86)\\WinPcap\\rpcapd.exe\" -d -f \"C:\\Program Files (x86)\\WinPcap\\rpcapd.ini\"","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"RpcEptMapper","{#SERVICE.DISPLAYNAME}":"RPC Endpoint Mapper","{#SERVICE.DESCRIPTION}":"Resolves RPC interfaces identifiers to transport endpoints. If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k RPCSS","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"RpcLocator","{#SERVICE.DISPLAYNAME}":"Remote Procedure Call (RPC) Locator","{#SERVICE.DESCRIPTION}":"In Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\locator.exe","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"RpcSs","{#SERVICE.DISPLAYNAME}":"Remote Procedure Call (RPC)","{#SERVICE.DESCRIPTION}":"The RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k rpcss","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"RSoPProv","{#SERVICE.DISPLAYNAME}":"Resultant Set of Policy Provider","{#SERVICE.DESCRIPTION}":"Provides a network service that processes requests to simulate application of Group Policy settings for a target user or computer in various situations and computes the Resultant Set of Policy settings.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\RSoPProv.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"RTCASMCU","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Application Sharing","{#SERVICE.DESCRIPTION}":"Skype for Business Server Application Sharing","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\OCSMCU\\Application Sharing\\ASMCUSvc.exe\" ","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCATS","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Audio Test Service","{#SERVICE.DESCRIPTION}":"Skype for Business Server Audio Test Service","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Application Host\\OcsAppServerHost.exe\" RTCATS","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCAVMCU","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Audio/Video Conferencing","{#SERVICE.DESCRIPTION}":"Skype for Business Server Audio/Video Conferencing","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\OCSMCU\\AV Conferencing\\AVMCUSvc.exe\" ","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCCAA","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Conferencing Attendant","{#SERVICE.DESCRIPTION}":"Skype for Business Server Conferencing Attendant","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Application Host\\OcsAppServerHost.exe\" RTCCAA","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCCAS","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Conferencing Announcement","{#SERVICE.DESCRIPTION}":"Skype for Business Server Conferencing Announcement","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Application Host\\OcsAppServerHost.exe\" RTCCAS","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCCLSAGT","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Centralized Logging Service Agent","{#SERVICE.DESCRIPTION}":"Skype for Business Server Centralized Logging Service Agent","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Common Files\\Skype for Business Server 2015\\ClsAgent\\ClsAgent.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCCPS","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Call Park","{#SERVICE.DESCRIPTION}":"Skype for Business Server Call Park","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Application Host\\OcsAppServerHost.exe\" RTCCPS","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCDATAMCU","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Web Conferencing","{#SERVICE.DESCRIPTION}":"Skype for Business Server Web Conferencing","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Web Conferencing\\DataMCUSvc.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCHA","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Health Agent","{#SERVICE.DESCRIPTION}":"Skype for Business Server Health Agent","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Server\\Health Agent\\HealthAgent.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCIMMCU","{#SERVICE.DISPLAYNAME}":"Skype for Business Server IM Conferencing","{#SERVICE.DESCRIPTION}":"Skype for Business Server IM Conferencing","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\OCSMCU\\IM Conferencing\\IMMCUSvc.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCRGS","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Response Group","{#SERVICE.DESCRIPTION}":"Skype for Business Server Response Group","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Application Host\\OcsAppServerHost.exe\" RTCRGS","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RtcSrv","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Front-End","{#SERVICE.DESCRIPTION}":"Skype for Business Server Front-End","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Server\\Core\\RTCSrv.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCXMPPTGW","{#SERVICE.DISPLAYNAME}":"Skype for Business Server XMPP Translating Gateway","{#SERVICE.DESCRIPTION}":"Skype for Business Server XMPP Translating Gateway","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Xmpp\\XmppTGW.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"sacsvr","{#SERVICE.DISPLAYNAME}":"Special Administration Console Helper","{#SERVICE.DESCRIPTION}":"Allows administrators to remotely access a command prompt using Emergency Management Services.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SamSs","{#SERVICE.DISPLAYNAME}":"Security Accounts Manager","{#SERVICE.DESCRIPTION}":"The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests.  Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\lsass.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"SCardSvr","{#SERVICE.DISPLAYNAME}":"Smart Card","{#SERVICE.DESCRIPTION}":"Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"ScDeviceEnum","{#SERVICE.DISPLAYNAME}":"Smart Card Device Enumeration Service","{#SERVICE.DESCRIPTION}":"Creates software device nodes for all smart card readers accessible to a given session. If this service is disabled, WinRT APIs will not be able to enumerate smart card readers.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Schedule","{#SERVICE.DISPLAYNAME}":"Task Scheduler","{#SERVICE.DESCRIPTION}":"Enables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"SCPolicySvc","{#SERVICE.DISPLAYNAME}":"Smart Card Removal Policy","{#SERVICE.DESCRIPTION}":"Allows the system to be configured to lock the user desktop upon smart card removal.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"seclogon","{#SERVICE.DISPLAYNAME}":"Secondary Logon","{#SERVICE.DESCRIPTION}":"Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SENS","{#SERVICE.DISPLAYNAME}":"System Event Notification Service","{#SERVICE.DESCRIPTION}":"Monitors system events and notifies subscribers to COM+ Event System of these events.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"SessionEnv","{#SERVICE.DISPLAYNAME}":"Remote Desktop Configuration","{#SERVICE.DESCRIPTION}":"Remote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SharedAccess","{#SERVICE.DISPLAYNAME}":"Internet Connection Sharing (ICS)","{#SERVICE.DESCRIPTION}":"Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"ShellHWDetection","{#SERVICE.DISPLAYNAME}":"Shell Hardware Detection","{#SERVICE.DESCRIPTION}":"Provides notifications for AutoPlay hardware events.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"smphost","{#SERVICE.DISPLAYNAME}":"Microsoft Storage Spaces SMP","{#SERVICE.DESCRIPTION}":"Host service for the Microsoft Storage Spaces management provider. If this service is stopped or disabled, Storage Spaces cannot be managed.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k smphost","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SNMPTRAP","{#SERVICE.DISPLAYNAME}":"SNMP Trap","{#SERVICE.DESCRIPTION}":"Receives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\snmptrap.exe","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Spooler","{#SERVICE.DISPLAYNAME}":"Print Spooler","{#SERVICE.DESCRIPTION}":"This service spools print jobs and handles interaction with the printer.  If you turn off this service, you won’t be able to print or see your printers.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\spoolsv.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"sppsvc","{#SERVICE.DISPLAYNAME}":"Software Protection","{#SERVICE.DESCRIPTION}":"Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\sppsvc.exe","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"SQLAgent$LYNCLOCAL","{#SERVICE.DISPLAYNAME}":"SQL Server Agent (LYNCLOCAL)","{#SERVICE.DESCRIPTION}":"Executes jobs, monitors SQL Server, fires alerts, and allows automation of some administrative tasks.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.LYNCLOCAL\\MSSQL\\Binn\\SQLAGENT.EXE\" -i LYNCLOCAL","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"SQLAgent$RTC","{#SERVICE.DISPLAYNAME}":"SQL Server Agent (RTC)","{#SERVICE.DESCRIPTION}":"Executes jobs, monitors SQL Server, fires alerts, and allows automation of some administrative tasks.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.RTC\\MSSQL\\Binn\\SQLAGENT.EXE\" -i RTC","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"SQLAgent$RTCLOCAL","{#SERVICE.DISPLAYNAME}":"SQL Server Agent (RTCLOCAL)","{#SERVICE.DESCRIPTION}":"Executes jobs, monitors SQL Server, fires alerts, and allows automation of some administrative tasks.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.RTCLOCAL\\MSSQL\\Binn\\SQLAGENT.EXE\" -i RTCLOCAL","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"SQLBrowser","{#SERVICE.DISPLAYNAME}":"SQL Server Browser","{#SERVICE.DESCRIPTION}":"Provides SQL Server connection information to client computers.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files (x86)\\Microsoft SQL Server\\90\\Shared\\sqlbrowser.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\LOCALSERVICE","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"SQLWriter","{#SERVICE.DISPLAYNAME}":"SQL Server VSS Writer","{#SERVICE.DESCRIPTION}":"Provides the interface to backup/restore Microsoft SQL server through the Windows VSS infrastructure.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\90\\Shared\\sqlwriter.exe\"","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"SSDPSRV","{#SERVICE.DISPLAYNAME}":"SSDP Discovery","{#SERVICE.DESCRIPTION}":"Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"SstpSvc","{#SERVICE.DISPLAYNAME}":"Secure Socket Tunneling Protocol Service","{#SERVICE.DESCRIPTION}":"Provides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"stisvc","{#SERVICE.DISPLAYNAME}":"Windows Image Acquisition (WIA)","{#SERVICE.DESCRIPTION}":"Provides image acquisition services for scanners and cameras","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k imgsvc","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"svsvc","{#SERVICE.DISPLAYNAME}":"Spot Verifier","{#SERVICE.DESCRIPTION}":"Verifies potential file system corruptions.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"swprv","{#SERVICE.DISPLAYNAME}":"Microsoft Software Shadow Copy Provider","{#SERVICE.DESCRIPTION}":"Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k swprv","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SysMain","{#SERVICE.DISPLAYNAME}":"Superfetch","{#SERVICE.DESCRIPTION}":"Maintains and improves system performance over time.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SystemEventsBroker","{#SERVICE.DISPLAYNAME}":"System Events Broker","{#SERVICE.DESCRIPTION}":"Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"TabletInputService","{#SERVICE.DISPLAYNAME}":"Touch Keyboard and Handwriting Panel Service","{#SERVICE.DESCRIPTION}":"Enables Touch Keyboard and Handwriting Panel pen and ink functionality","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k TabletInputServiceGroup","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"TapiSrv","{#SERVICE.DISPLAYNAME}":"Telephony","{#SERVICE.DESCRIPTION}":"Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k tapisrv","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"TermService","{#SERVICE.DISPLAYNAME}":"Remote Desktop Services","{#SERVICE.DESCRIPTION}":"Allows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service.  To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k termsvcs","{#SERVICE.USER}":"NT Authority\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Themes","{#SERVICE.DISPLAYNAME}":"Themes","{#SERVICE.DESCRIPTION}":"Provides user experience theme management.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"THREADORDER","{#SERVICE.DISPLAYNAME}":"Thread Ordering Server","{#SERVICE.DESCRIPTION}":"Provides ordered execution for a group of threads within a specific period of time.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"TieringEngineService","{#SERVICE.DISPLAYNAME}":"Storage Tiers Management","{#SERVICE.DESCRIPTION}":"Optimizes the placement of data in storage tiers on all tiered storage spaces in the system.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\TieringEngineService.exe","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"TimeBroker","{#SERVICE.DISPLAYNAME}":"Time Broker","{#SERVICE.DESCRIPTION}":"Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"TrkWks","{#SERVICE.DISPLAYNAME}":"Distributed Link Tracking Client","{#SERVICE.DESCRIPTION}":"Maintains links between NTFS files within a computer or across computers in a network.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"TrustedInstaller","{#SERVICE.DISPLAYNAME}":"Windows Modules Installer","{#SERVICE.DESCRIPTION}":"Enables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\servicing\\TrustedInstaller.exe","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"UALSVC","{#SERVICE.DISPLAYNAME}":"User Access Logging Service","{#SERVICE.DESCRIPTION}":"This service logs unique client access requests, in the form of IP addresses and user names, of installed products and roles on the local server. This information can be queried, via Powershell, by administrators needing to quantify client demand of server software for offline Client Access License (CAL) management. If the service is disabled, client requests will not be logged and will not be retrievable via Powershell queries. Stopping the service will not affect query of historical data (see supporting documentation for steps to delete historical data). The local system administrator must consult his, or her, Windows Server license terms to determine the number of CALs that are required for the server software to be appropriately licensed; use of the UAL service and data does not alter this obligation.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"UI0Detect","{#SERVICE.DISPLAYNAME}":"Interactive Services Detection","{#SERVICE.DESCRIPTION}":"Enables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new interactive service dialogs will no longer function and there might not be access to interactive service dialogs. If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\UI0Detect.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"UmRdpService","{#SERVICE.DISPLAYNAME}":"Remote Desktop Services UserMode Port Redirector","{#SERVICE.DESCRIPTION}":"Allows the redirection of Printers/Drives/Ports for RDP connections","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"upnphost","{#SERVICE.DISPLAYNAME}":"UPnP Device Host","{#SERVICE.DESCRIPTION}":"Allows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"VaultSvc","{#SERVICE.DISPLAYNAME}":"Credential Manager","{#SERVICE.DESCRIPTION}":"Provides secure storage and retrieval of credentials to users, applications and security service packages.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\lsass.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vds","{#SERVICE.DISPLAYNAME}":"Virtual Disk","{#SERVICE.DESCRIPTION}":"Provides management services for disks, volumes, file systems, and storage arrays.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\vds.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmicguestinterface","{#SERVICE.DISPLAYNAME}":"Hyper-V Guest Service Interface","{#SERVICE.DESCRIPTION}":"Provides an interface for the Hyper-V host to interact with specific services running inside the virtual machine.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmicheartbeat","{#SERVICE.DISPLAYNAME}":"Hyper-V Heartbeat Service","{#SERVICE.DESCRIPTION}":"Monitors the state of this virtual machine by reporting a heartbeat at regular intervals. This service helps you identify running virtual machines that have stopped responding.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k ICService","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmickvpexchange","{#SERVICE.DISPLAYNAME}":"Hyper-V Data Exchange Service","{#SERVICE.DESCRIPTION}":"Provides a mechanism to exchange data between the virtual machine and the operating system running on the physical computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmicrdv","{#SERVICE.DISPLAYNAME}":"Hyper-V Remote Desktop Virtualization Service","{#SERVICE.DESCRIPTION}":"Provides a platform for communication between the virtual machine and the operating system running on the physical computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k ICService","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmicshutdown","{#SERVICE.DISPLAYNAME}":"Hyper-V Guest Shutdown Service","{#SERVICE.DESCRIPTION}":"Provides a mechanism to shut down the operating system of this virtual machine from the management interfaces on the physical computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmictimesync","{#SERVICE.DISPLAYNAME}":"Hyper-V Time Synchronization Service","{#SERVICE.DESCRIPTION}":"Synchronizes the system time of this virtual machine with the system time of the physical computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmicvss","{#SERVICE.DISPLAYNAME}":"Hyper-V Volume Shadow Copy Requestor","{#SERVICE.DESCRIPTION}":"Coordinates the communications that are required to use Volume Shadow Copy Service to back up applications and data on this virtual machine from the operating system on the physical computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"VMTools","{#SERVICE.DISPLAYNAME}":"VMware Tools","{#SERVICE.DESCRIPTION}":"Provides support for synchronizing objects between the host and guest operating systems.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\VMware\\VMware Tools\\vmtoolsd.exe\"","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"vmvss","{#SERVICE.DISPLAYNAME}":"VMware Snapshot Provider","{#SERVICE.DESCRIPTION}":"VMware Snapshot Provider","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\dllhost.exe /Processid:{B100399F-6456-4067-A7DE-FE3B8F7F8797}","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"VSS","{#SERVICE.DISPLAYNAME}":"Volume Shadow Copy","{#SERVICE.DESCRIPTION}":"Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\vssvc.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"W32Time","{#SERVICE.DISPLAYNAME}":"Windows Time","{#SERVICE.DESCRIPTION}":"Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"w3logsvc","{#SERVICE.DISPLAYNAME}":"W3C Logging Service","{#SERVICE.DESCRIPTION}":"Provides W3C logging for Internet Information Services (IIS). If this service is stopped, W3C logging configured by IIS will not work.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k apphost","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"W3SVC","{#SERVICE.DISPLAYNAME}":"World Wide Web Publishing Service","{#SERVICE.DESCRIPTION}":"Provides Web connectivity and administration through the Internet Information Services Manager","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k iissvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"WAS","{#SERVICE.DISPLAYNAME}":"Windows Process Activation Service","{#SERVICE.DESCRIPTION}":"The Windows Process Activation Service (WAS) provides process activation, resource management and health management services for message-activated applications.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k iissvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Wcmsvc","{#SERVICE.DISPLAYNAME}":"Windows Connection Manager","{#SERVICE.DESCRIPTION}":"Makes automatic connect/disconnect decisions based on the network connectivity options currently available to the PC and enables management of network connectivity based on Group Policy settings.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"WcsPlugInService","{#SERVICE.DISPLAYNAME}":"Windows Color System","{#SERVICE.DESCRIPTION}":"The WcsPlugInService service hosts third-party Windows Color System color device model and gamut map model plug-in modules. These plug-in modules are vendor-specific extensions to the Windows Color System baseline color device and gamut map models. Stopping or disabling the WcsPlugInService service will disable this extensibility feature, and the Windows Color System will use its baseline model processing rather than the vendor's desired processing. This might result in inaccurate color rendering.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k wcssvc","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WdiServiceHost","{#SERVICE.DISPLAYNAME}":"Diagnostic Service Host","{#SERVICE.DESCRIPTION}":"The Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context.  If this service is stopped, any diagnostics that depend on it will no longer function.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WdiSystemHost","{#SERVICE.DISPLAYNAME}":"Diagnostic System Host","{#SERVICE.DESCRIPTION}":"The Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context.  If this service is stopped, any diagnostics that depend on it will no longer function.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WebClient","{#SERVICE.DISPLAYNAME}":"WebClient","{#SERVICE.DESCRIPTION}":"Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k WebClientGroup","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Wecsvc","{#SERVICE.DISPLAYNAME}":"Windows Event Collector","{#SERVICE.DESCRIPTION}":"This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WEPHOSTSVC","{#SERVICE.DISPLAYNAME}":"Windows Encryption Provider Host Service","{#SERVICE.DESCRIPTION}":"Windows Encryption Provider Host Service brokers encryption related functionalities from 3rd Party Encryption Providers to processes that need to evaluate and apply EAS policies. Stopping this will compromise EAS compliancy checks that have been established by the connected Mail Accounts","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k WepHostSvcGroup","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"wercplsupport","{#SERVICE.DISPLAYNAME}":"Problem Reports and Solutions Control Panel Support","{#SERVICE.DESCRIPTION}":"This service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WerSvc","{#SERVICE.DISPLAYNAME}":"Windows Error Reporting Service","{#SERVICE.DESCRIPTION}":"Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k WerSvcGroup","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WiaRpc","{#SERVICE.DISPLAYNAME}":"Still Image Acquisition Events","{#SERVICE.DESCRIPTION}":"Launches applications associated with still image acquisition events.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WinHttpAutoProxySvc","{#SERVICE.DISPLAYNAME}":"WinHTTP Web Proxy Auto-Discovery Service","{#SERVICE.DESCRIPTION}":"WinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Winmgmt","{#SERVICE.DISPLAYNAME}":"Windows Management Instrumentation","{#SERVICE.DESCRIPTION}":"Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"WinRM","{#SERVICE.DISPLAYNAME}":"Windows Remote Management (WS-Management)","{#SERVICE.DESCRIPTION}":"Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine.  The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"wlidsvc","{#SERVICE.DISPLAYNAME}":"Microsoft Account Sign-in Assistant","{#SERVICE.DESCRIPTION}":"Enables user sign-in through Microsoft account identity services. If this service is stopped, users will not be able to logon to the computer with their Microsoft account.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"wmiApSrv","{#SERVICE.DISPLAYNAME}":"WMI Performance Adapter","{#SERVICE.DESCRIPTION}":"Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\wbem\\WmiApSrv.exe","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WPDBusEnum","{#SERVICE.DISPLAYNAME}":"Portable Device Enumerator Service","{#SERVICE.DESCRIPTION}":"Enforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WSService","{#SERVICE.DISPLAYNAME}":"Windows Store Service (WSService)","{#SERVICE.DESCRIPTION}":"Provides infrastructure support for Windows Store.This service is started on demand and if disabled applications bought using Windows Store will not behave correctly.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k wsappx","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"wuauserv","{#SERVICE.DISPLAYNAME}":"Windows Update","{#SERVICE.DESCRIPTION}":"Enables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"wudfsvc","{#SERVICE.DISPLAYNAME}":"Windows Driver Foundation - User-mode Driver Framework","{#SERVICE.DESCRIPTION}":"Creates and manages user-mode driver processes. This service cannot be stopped.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Zabbix Agent","{#SERVICE.DISPLAYNAME}":"Zabbix Agent","{#SERVICE.DESCRIPTION}":"Provides system monitoring","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Zabbix\\zabbix_agentd.exe\" --config \"C:\\Zabbix\\zabbix_agentd.conf\"","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"}]}]
 28632:20160720:115718.873 In process_value() key:'bcaves-sfb.bca.int:service.discovery' value:'{"data":[{"{#SERVICE.NAME}":"AeLookupSvc","{#SERVICE.DISPLAYNAME}":"Application Experience","{#SERVICE.DESCRIPTION}":"Processes application compatibility cache requests for applications as they are launched","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"ALG","{#SERVICE.DISPLAYNAME}":"Application Layer Gateway Service","{#SERVICE.DESCRIPTION}":"Provides support for 3rd party protocol plug-ins for Internet Connection Sharing","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\alg.exe","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AppHostSvc","{#SERVICE.DISPLAYNAME}":"Application Host Helper Service","{#SERVICE.DESCRIPTION}":"Provides administrative services for IIS, for example configuration history and Application Pool account mapping. If this service is stopped, configuration history and locking down files or directories with Application Pool specific Access Control Entries will not work.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k apphost","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"AppIDSvc","{#SERVICE.DISPLAYNAME}":"Application Identity","{#SERVICE.DESCRIPTION}":"Determines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Appinfo","{#SERVICE.DISPLAYNAME}":"Application Information","{#SERVICE.DESCRIPTION}":"Facilitates the running of interactive applications with additional administrative privileges.  If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AppMgmt","{#SERVICE.DISPLAYNAME}":"Application Management","{#SERVICE.DESCRIPTION}":"Processes installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AppReadiness","{#SERVICE.DISPLAYNAME}":"App Readiness","{#SERVICE.DESCRIPTION}":"Gets apps ready for use the first time a user signs in to this PC and when adding new apps.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k AppReadiness","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AppXSvc","{#SERVICE.DISPLAYNAME}":"AppX Deployment Service (AppXSVC)","{#SERVICE.DESCRIPTION}":"Provides infrastructure support for deploying Store applications. This service is started on demand and if disabled Store applications will not be deployed to the system, and may not function properly.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k wsappx","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"aspnet_state","{#SERVICE.DISPLAYNAME}":"ASP.NET State Service","{#SERVICE.DESCRIPTION}":"Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state.exe","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AudioEndpointBuilder","{#SERVICE.DISPLAYNAME}":"Windows Audio Endpoint Builder","{#SERVICE.DESCRIPTION}":"Manages audio devices for the Windows Audio service.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Audiosrv","{#SERVICE.DISPLAYNAME}":"Windows Audio","{#SERVICE.DESCRIPTION}":"Manages audio for Windows-based programs.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"AxInstSV","{#SERVICE.DISPLAYNAME}":"ActiveX Installer (AxInstSV)","{#SERVICE.DESCRIPTION}":"Provides User Account Control validation for the installation of ActiveX controls from the Internet and enables management of ActiveX control installation based on Group Policy settings. This service is started on demand and if disabled the installation of ActiveX controls will behave according to default browser settings.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k AxInstSVGroup","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"BFE","{#SERVICE.DISPLAYNAME}":"Base Filtering Engine","{#SERVICE.DESCRIPTION}":"The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"BITS","{#SERVICE.DISPLAYNAME}":"Background Intelligent Transfer Service","{#SERVICE.DESCRIPTION}":"Transfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"BrokerInfrastructure","{#SERVICE.DISPLAYNAME}":"Background Tasks Infrastructure Service","{#SERVICE.DESCRIPTION}":"Windows infrastructure service that controls which background tasks can run on the system.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"Browser","{#SERVICE.DISPLAYNAME}":"Computer Browser","{#SERVICE.DESCRIPTION}":"Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"c2wts","{#SERVICE.DISPLAYNAME}":"Claims to Windows Token Service","{#SERVICE.DESCRIPTION}":"Service to convert claims based identities to windows identities","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Program Files\\Windows Identity Foundation\\v3.5\\c2wtshost.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"CertPropSvc","{#SERVICE.DISPLAYNAME}":"Certificate Propagation","{#SERVICE.DESCRIPTION}":"Copies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"COMSysApp","{#SERVICE.DISPLAYNAME}":"COM+ System Application","{#SERVICE.DESCRIPTION}":"Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"CryptSvc","{#SERVICE.DISPLAYNAME}":"Cryptographic Services","{#SERVICE.DESCRIPTION}":"Provides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT Authority\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"CscService","{#SERVICE.DISPLAYNAME}":"Offline Files","{#SERVICE.DESCRIPTION}":"The Offline Files service performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of the public API, and dispatches interesting events to those interested in Offline Files activities and changes in cache state.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"DcomLaunch","{#SERVICE.DISPLAYNAME}":"DCOM Server Process Launcher","{#SERVICE.DESCRIPTION}":"The DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"defragsvc","{#SERVICE.DISPLAYNAME}":"Optimize drives","{#SERVICE.DESCRIPTION}":"Helps the computer run more efficiently by optimizing files on storage drives.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k defragsvc","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"DeviceAssociationService","{#SERVICE.DISPLAYNAME}":"Device Association Service","{#SERVICE.DESCRIPTION}":"Enables pairing between the system and wired or wireless devices.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"DeviceInstall","{#SERVICE.DISPLAYNAME}":"Device Install Service","{#SERVICE.DESCRIPTION}":"Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Dhcp","{#SERVICE.DISPLAYNAME}":"DHCP Client","{#SERVICE.DESCRIPTION}":"Registers and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"DiagTrack","{#SERVICE.DISPLAYNAME}":"Diagnostics Tracking Service","{#SERVICE.DESCRIPTION}":"The Diagnostics Tracking Service enables data collection about functional issues in Windows components.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k utcsvc","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"Dnscache","{#SERVICE.DISPLAYNAME}":"DNS Client","{#SERVICE.DESCRIPTION}":"The DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computer's name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"dot3svc","{#SERVICE.DISPLAYNAME}":"Wired AutoConfig","{#SERVICE.DESCRIPTION}":"The Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"DPS","{#SERVICE.DISPLAYNAME}":"Diagnostic Policy Service","{#SERVICE.DESCRIPTION}":"The Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components.  If this service is stopped, diagnostics will no longer function.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalServiceNoNetwork","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"DsmSvc","{#SERVICE.DISPLAYNAME}":"Device Setup Manager","{#SERVICE.DESCRIPTION}":"Enables the detection, download and installation of device-related software. If this service is disabled, devices may be configured with outdated software, and may not work correctly.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Eaphost","{#SERVICE.DISPLAYNAME}":"Extensible Authentication Protocol","{#SERVICE.DESCRIPTION}":"The Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP).  EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process.  If you disable this service, this computer is prevented from accessing networks that require EAP authentication.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"EFS","{#SERVICE.DISPLAYNAME}":"Encrypting File System (EFS)","{#SERVICE.DESCRIPTION}":"Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\lsass.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"EventLog","{#SERVICE.DISPLAYNAME}":"Windows Event Log","{#SERVICE.DESCRIPTION}":"This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"EventSystem","{#SERVICE.DISPLAYNAME}":"COM+ Event System","{#SERVICE.DESCRIPTION}":"Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"FabricHostSvc","{#SERVICE.DISPLAYNAME}":"Windows Fabric Host Service","{#SERVICE.DESCRIPTION}":"This service controls Windows Fabric process on this machine.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Windows Fabric\\bin\\FabricHost.exe\"","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"fdPHost","{#SERVICE.DISPLAYNAME}":"Function Discovery Provider Host","{#SERVICE.DESCRIPTION}":"The FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services – Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"FDResPub","{#SERVICE.DISPLAYNAME}":"Function Discovery Resource Publication","{#SERVICE.DESCRIPTION}":"Publishes this computer and resources attached to this computer so they can be discovered over the network.  If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"FontCache","{#SERVICE.DISPLAYNAME}":"Windows Font Cache Service","{#SERVICE.DESCRIPTION}":"Optimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"FontCache3.0.0.0","{#SERVICE.DISPLAYNAME}":"Windows Presentation Foundation Font Cache 3.0.0.0","{#SERVICE.DESCRIPTION}":"Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"FTA","{#SERVICE.DISPLAYNAME}":"Skype for Business Server File Transfer Agent","{#SERVICE.DESCRIPTION}":"Skype for Business Server File Transfer Agent","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\File Transfer Agent\\FileTransferAgent.exe\" -s ","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"gpsvc","{#SERVICE.DISPLAYNAME}":"Group Policy Client","{#SERVICE.DESCRIPTION}":"The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is disabled.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"hidserv","{#SERVICE.DISPLAYNAME}":"Human Interface Device Service","{#SERVICE.DESCRIPTION}":"Activates and maintains the use of hot buttons on keyboards, remote controls, and other multimedia devices. It is recommended that you keep this service running.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"hkmsvc","{#SERVICE.DISPLAYNAME}":"Health Key and Certificate Management","{#SERVICE.DESCRIPTION}":"Provides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this service","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"IEEtwCollectorService","{#SERVICE.DISPLAYNAME}":"Internet Explorer ETW Collector Service","{#SERVICE.DESCRIPTION}":"ETW Collector Service for Internet Explorer. When running, this service collects real time ETW events and processes them.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\IEEtwCollector.exe /V","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"IISADMIN","{#SERVICE.DISPLAYNAME}":"IIS Admin Service","{#SERVICE.DESCRIPTION}":"Enables this server to administer the IIS metabase. The IIS metabase stores configuration for the SMTP and FTP services. If this service is stopped, the server will be unable to configure SMTP or FTP. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\inetsrv\\inetinfo.exe","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"IKEEXT","{#SERVICE.DISPLAYNAME}":"IKE and AuthIP IPsec Keying Modules","{#SERVICE.DESCRIPTION}":"The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"iphlpsvc","{#SERVICE.DISPLAYNAME}":"IP Helper","{#SERVICE.DESCRIPTION}":"Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetSvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"KeyIso","{#SERVICE.DISPLAYNAME}":"CNG Key Isolation","{#SERVICE.DESCRIPTION}":"The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\lsass.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"KPSSVC","{#SERVICE.DISPLAYNAME}":"KDC Proxy Server service (KPS)","{#SERVICE.DESCRIPTION}":"KDC Proxy Server service runs on edge servers to proxy Kerberos protocol messages to domain controllers on the corporate network.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k KpsSvcGroup","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"KtmRm","{#SERVICE.DISPLAYNAME}":"KtmRm for Distributed Transaction Coordinator","{#SERVICE.DESCRIPTION}":"Coordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetworkServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"LanmanServer","{#SERVICE.DISPLAYNAME}":"Server","{#SERVICE.DESCRIPTION}":"Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"LanmanWorkstation","{#SERVICE.DISPLAYNAME}":"Workstation","{#SERVICE.DESCRIPTION}":"Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"lltdsvc","{#SERVICE.DISPLAYNAME}":"Link-Layer Topology Discovery Mapper","{#SERVICE.DESCRIPTION}":"Creates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device.  If this service is disabled, the Network Map will not function properly.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"lmhosts","{#SERVICE.DISPLAYNAME}":"TCP/IP NetBIOS Helper","{#SERVICE.DESCRIPTION}":"Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"LSM","{#SERVICE.DISPLAYNAME}":"Local Session Manager","{#SERVICE.DESCRIPTION}":"Core Windows Service that manages local user sessions. Stopping or disabling this service will result in system instability.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"MASTER","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Master Replicator Agent","{#SERVICE.DESCRIPTION}":"Skype for Business Server Master Replicator Agent","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Master Replicator Agent\\MasterReplicatorAgent.exe\" -s","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"MMCSS","{#SERVICE.DISPLAYNAME}":"Multimedia Class Scheduler","{#SERVICE.DESCRIPTION}":"Enables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications.  If this service is stopped, individual tasks resort to their default priority.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"MpsSvc","{#SERVICE.DISPLAYNAME}":"Windows Firewall","{#SERVICE.DESCRIPTION}":"Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"MSDTC","{#SERVICE.DISPLAYNAME}":"Distributed Transaction Coordinator","{#SERVICE.DESCRIPTION}":"Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\msdtc.exe","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"MSiSCSI","{#SERVICE.DISPLAYNAME}":"Microsoft iSCSI Initiator Service","{#SERVICE.DESCRIPTION}":"Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"msiserver","{#SERVICE.DISPLAYNAME}":"Windows Installer","{#SERVICE.DESCRIPTION}":"Adds, modifies, and removes applications provided as a Windows Installer (*.msi, *.msp) package. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\msiexec.exe /V","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"MSSQL$LYNCLOCAL","{#SERVICE.DISPLAYNAME}":"SQL Server (LYNCLOCAL)","{#SERVICE.DESCRIPTION}":"Provides storage, processing and controlled access of data, and rapid transaction processing.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.LYNCLOCAL\\MSSQL\\Binn\\sqlservr.exe\" -sLYNCLOCAL","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"MSSQL$RTC","{#SERVICE.DISPLAYNAME}":"SQL Server (RTC)","{#SERVICE.DESCRIPTION}":"Provides storage, processing and controlled access of data, and rapid transaction processing.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.RTC\\MSSQL\\Binn\\sqlservr.exe\" -sRTC","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"MSSQL$RTCLOCAL","{#SERVICE.DISPLAYNAME}":"SQL Server (RTCLOCAL)","{#SERVICE.DESCRIPTION}":"Provides storage, processing and controlled access of data, and rapid transaction processing.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.RTCLOCAL\\MSSQL\\Binn\\sqlservr.exe\" -sRTCLOCAL","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"napagent","{#SERVICE.DISPLAYNAME}":"Network Access Protection Agent","{#SERVICE.DESCRIPTION}":"The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"NcaSvc","{#SERVICE.DISPLAYNAME}":"Network Connectivity Assistant","{#SERVICE.DESCRIPTION}":"Provides DirectAccess status notification for UI components","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetSvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"NcbService","{#SERVICE.DISPLAYNAME}":"Network Connection Broker","{#SERVICE.DESCRIPTION}":"Brokers connections that allow Windows Store Apps to receive notifications from the internet.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Netlogon","{#SERVICE.DISPLAYNAME}":"Netlogon","{#SERVICE.DESCRIPTION}":"Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\lsass.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"Netman","{#SERVICE.DISPLAYNAME}":"Network Connections","{#SERVICE.DESCRIPTION}":"Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"netprofm","{#SERVICE.DISPLAYNAME}":"Network List Service","{#SERVICE.DESCRIPTION}":"Identifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"NetTcpPortSharing","{#SERVICE.DISPLAYNAME}":"Net.Tcp Port Sharing Service","{#SERVICE.DESCRIPTION}":"Provides ability to share TCP ports over the net.tcp protocol.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"NlaSvc","{#SERVICE.DISPLAYNAME}":"Network Location Awareness","{#SERVICE.DESCRIPTION}":"Collects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"nsi","{#SERVICE.DISPLAYNAME}":"Network Store Interface Service","{#SERVICE.DESCRIPTION}":"This service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"PerfHost","{#SERVICE.DISPLAYNAME}":"Performance Counter DLL Host","{#SERVICE.DESCRIPTION}":"Enables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\SysWow64\\perfhost.exe","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"pla","{#SERVICE.DISPLAYNAME}":"Performance Logs & Alerts","{#SERVICE.DESCRIPTION}":"Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalServiceNoNetwork","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"PlugPlay","{#SERVICE.DISPLAYNAME}":"Plug and Play","{#SERVICE.DESCRIPTION}":"Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"PolicyAgent","{#SERVICE.DISPLAYNAME}":"IPsec Policy Agent","{#SERVICE.DESCRIPTION}":"Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection.  This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool \"netsh ipsec\".  If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec.  Also,remote management of Windows Firewall is not available when this service is stopped.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k NetworkServiceNetworkRestricted","{#SERVICE.USER}":"NT Authority\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Power","{#SERVICE.DISPLAYNAME}":"Power","{#SERVICE.DESCRIPTION}":"Manages power policy and power policy notification delivery.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"PrintNotify","{#SERVICE.DISPLAYNAME}":"Printer Extensions and Notifications","{#SERVICE.DESCRIPTION}":"This service opens custom printer dialog boxes and handles notifications from a remote print server or a printer. If you turn off this service, you won’t be able to see printer extensions or notifications.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k print","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"ProfSvc","{#SERVICE.DISPLAYNAME}":"User Profile Service","{#SERVICE.DESCRIPTION}":"This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully sign in or sign out, apps might have problems getting to users' data, and components registered to receive profile event notifications won't receive them.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"RasAuto","{#SERVICE.DISPLAYNAME}":"Remote Access Auto Connection Manager","{#SERVICE.DESCRIPTION}":"Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"RasMan","{#SERVICE.DISPLAYNAME}":"Remote Access Connection Manager","{#SERVICE.DESCRIPTION}":"Manages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"RemoteAccess","{#SERVICE.DISPLAYNAME}":"Routing and Remote Access","{#SERVICE.DESCRIPTION}":"Offers routing services to businesses in local area and wide area network environments.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"RemoteRegistry","{#SERVICE.DISPLAYNAME}":"Remote Registry","{#SERVICE.DESCRIPTION}":"Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k localService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"REPLICA","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Replica Replicator Agent","{#SERVICE.DESCRIPTION}":"Skype for Business Server Replica Replicator Agent","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Server\\Replica Replicator Agent\\ReplicaReplicatorAgent.exe\" -s /replicaRootDir:C:\\RtcReplicaRoot\\ /sqlInstance:(local)\\rtclocal /sqlDatabase:xds","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"rpcapd","{#SERVICE.DISPLAYNAME}":"Remote Packet Capture Protocol v.0 (experimental)","{#SERVICE.DESCRIPTION}":"Allows to capture traffic on this machine from a remote machine.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"\"C:\\Program Files (x86)\\WinPcap\\rpcapd.exe\" -d -f \"C:\\Program Files (x86)\\WinPcap\\rpcapd.ini\"","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"RpcEptMapper","{#SERVICE.DISPLAYNAME}":"RPC Endpoint Mapper","{#SERVICE.DESCRIPTION}":"Resolves RPC interfaces identifiers to transport endpoints. If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k RPCSS","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"RpcLocator","{#SERVICE.DISPLAYNAME}":"Remote Procedure Call (RPC) Locator","{#SERVICE.DESCRIPTION}":"In Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\locator.exe","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"RpcSs","{#SERVICE.DISPLAYNAME}":"Remote Procedure Call (RPC)","{#SERVICE.DESCRIPTION}":"The RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k rpcss","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"RSoPProv","{#SERVICE.DISPLAYNAME}":"Resultant Set of Policy Provider","{#SERVICE.DESCRIPTION}":"Provides a network service that processes requests to simulate application of Group Policy settings for a target user or computer in various situations and computes the Resultant Set of Policy settings.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\RSoPProv.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"RTCASMCU","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Application Sharing","{#SERVICE.DESCRIPTION}":"Skype for Business Server Application Sharing","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\OCSMCU\\Application Sharing\\ASMCUSvc.exe\" ","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCATS","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Audio Test Service","{#SERVICE.DESCRIPTION}":"Skype for Business Server Audio Test Service","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Application Host\\OcsAppServerHost.exe\" RTCATS","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCAVMCU","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Audio/Video Conferencing","{#SERVICE.DESCRIPTION}":"Skype for Business Server Audio/Video Conferencing","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\OCSMCU\\AV Conferencing\\AVMCUSvc.exe\" ","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCCAA","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Conferencing Attendant","{#SERVICE.DESCRIPTION}":"Skype for Business Server Conferencing Attendant","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Application Host\\OcsAppServerHost.exe\" RTCCAA","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCCAS","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Conferencing Announcement","{#SERVICE.DESCRIPTION}":"Skype for Business Server Conferencing Announcement","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Application Host\\OcsAppServerHost.exe\" RTCCAS","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCCLSAGT","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Centralized Logging Service Agent","{#SERVICE.DESCRIPTION}":"Skype for Business Server Centralized Logging Service Agent","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Common Files\\Skype for Business Server 2015\\ClsAgent\\ClsAgent.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCCPS","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Call Park","{#SERVICE.DESCRIPTION}":"Skype for Business Server Call Park","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Application Host\\OcsAppServerHost.exe\" RTCCPS","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCDATAMCU","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Web Conferencing","{#SERVICE.DESCRIPTION}":"Skype for Business Server Web Conferencing","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Web Conferencing\\DataMCUSvc.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCHA","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Health Agent","{#SERVICE.DESCRIPTION}":"Skype for Business Server Health Agent","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Server\\Health Agent\\HealthAgent.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCIMMCU","{#SERVICE.DISPLAYNAME}":"Skype for Business Server IM Conferencing","{#SERVICE.DESCRIPTION}":"Skype for Business Server IM Conferencing","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\OCSMCU\\IM Conferencing\\IMMCUSvc.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCRGS","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Response Group","{#SERVICE.DESCRIPTION}":"Skype for Business Server Response Group","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Application Host\\OcsAppServerHost.exe\" RTCRGS","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RtcSrv","{#SERVICE.DISPLAYNAME}":"Skype for Business Server Front-End","{#SERVICE.DESCRIPTION}":"Skype for Business Server Front-End","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Server\\Core\\RTCSrv.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"RTCXMPPTGW","{#SERVICE.DISPLAYNAME}":"Skype for Business Server XMPP Translating Gateway","{#SERVICE.DESCRIPTION}":"Skype for Business Server XMPP Translating Gateway","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Skype for Business Server 2015\\Xmpp\\XmppTGW.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"sacsvr","{#SERVICE.DISPLAYNAME}":"Special Administration Console Helper","{#SERVICE.DESCRIPTION}":"Allows administrators to remotely access a command prompt using Emergency Management Services.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SamSs","{#SERVICE.DISPLAYNAME}":"Security Accounts Manager","{#SERVICE.DESCRIPTION}":"The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests.  Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\lsass.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"SCardSvr","{#SERVICE.DISPLAYNAME}":"Smart Card","{#SERVICE.DESCRIPTION}":"Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"ScDeviceEnum","{#SERVICE.DISPLAYNAME}":"Smart Card Device Enumeration Service","{#SERVICE.DESCRIPTION}":"Creates software device nodes for all smart card readers accessible to a given session. If this service is disabled, WinRT APIs will not be able to enumerate smart card readers.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Schedule","{#SERVICE.DISPLAYNAME}":"Task Scheduler","{#SERVICE.DESCRIPTION}":"Enables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"SCPolicySvc","{#SERVICE.DISPLAYNAME}":"Smart Card Removal Policy","{#SERVICE.DESCRIPTION}":"Allows the system to be configured to lock the user desktop upon smart card removal.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"seclogon","{#SERVICE.DISPLAYNAME}":"Secondary Logon","{#SERVICE.DESCRIPTION}":"Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SENS","{#SERVICE.DISPLAYNAME}":"System Event Notification Service","{#SERVICE.DESCRIPTION}":"Monitors system events and notifies subscribers to COM+ Event System of these events.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"SessionEnv","{#SERVICE.DISPLAYNAME}":"Remote Desktop Configuration","{#SERVICE.DESCRIPTION}":"Remote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SharedAccess","{#SERVICE.DISPLAYNAME}":"Internet Connection Sharing (ICS)","{#SERVICE.DESCRIPTION}":"Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"ShellHWDetection","{#SERVICE.DISPLAYNAME}":"Shell Hardware Detection","{#SERVICE.DESCRIPTION}":"Provides notifications for AutoPlay hardware events.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"smphost","{#SERVICE.DISPLAYNAME}":"Microsoft Storage Spaces SMP","{#SERVICE.DESCRIPTION}":"Host service for the Microsoft Storage Spaces management provider. If this service is stopped or disabled, Storage Spaces cannot be managed.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k smphost","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SNMPTRAP","{#SERVICE.DISPLAYNAME}":"SNMP Trap","{#SERVICE.DESCRIPTION}":"Receives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\snmptrap.exe","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Spooler","{#SERVICE.DISPLAYNAME}":"Print Spooler","{#SERVICE.DESCRIPTION}":"This service spools print jobs and handles interaction with the printer.  If you turn off this service, you won’t be able to print or see your printers.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\spoolsv.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"sppsvc","{#SERVICE.DISPLAYNAME}":"Software Protection","{#SERVICE.DESCRIPTION}":"Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\sppsvc.exe","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"SQLAgent$LYNCLOCAL","{#SERVICE.DISPLAYNAME}":"SQL Server Agent (LYNCLOCAL)","{#SERVICE.DESCRIPTION}":"Executes jobs, monitors SQL Server, fires alerts, and allows automation of some administrative tasks.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.LYNCLOCAL\\MSSQL\\Binn\\SQLAGENT.EXE\" -i LYNCLOCAL","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"SQLAgent$RTC","{#SERVICE.DISPLAYNAME}":"SQL Server Agent (RTC)","{#SERVICE.DESCRIPTION}":"Executes jobs, monitors SQL Server, fires alerts, and allows automation of some administrative tasks.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.RTC\\MSSQL\\Binn\\SQLAGENT.EXE\" -i RTC","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"SQLAgent$RTCLOCAL","{#SERVICE.DISPLAYNAME}":"SQL Server Agent (RTCLOCAL)","{#SERVICE.DESCRIPTION}":"Executes jobs, monitors SQL Server, fires alerts, and allows automation of some administrative tasks.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\MSSQL12.RTCLOCAL\\MSSQL\\Binn\\SQLAGENT.EXE\" -i RTCLOCAL","{#SERVICE.USER}":"NT AUTHORITY\\NETWORKSERVICE","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"SQLBrowser","{#SERVICE.DISPLAYNAME}":"SQL Server Browser","{#SERVICE.DESCRIPTION}":"Provides SQL Server connection information to client computers.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files (x86)\\Microsoft SQL Server\\90\\Shared\\sqlbrowser.exe\"","{#SERVICE.USER}":"NT AUTHORITY\\LOCALSERVICE","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"SQLWriter","{#SERVICE.DISPLAYNAME}":"SQL Server VSS Writer","{#SERVICE.DESCRIPTION}":"Provides the interface to backup/restore Microsoft SQL server through the Windows VSS infrastructure.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\Microsoft SQL Server\\90\\Shared\\sqlwriter.exe\"","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"SSDPSRV","{#SERVICE.DISPLAYNAME}":"SSDP Discovery","{#SERVICE.DESCRIPTION}":"Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"SstpSvc","{#SERVICE.DISPLAYNAME}":"Secure Socket Tunneling Protocol Service","{#SERVICE.DESCRIPTION}":"Provides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"stisvc","{#SERVICE.DISPLAYNAME}":"Windows Image Acquisition (WIA)","{#SERVICE.DESCRIPTION}":"Provides image acquisition services for scanners and cameras","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k imgsvc","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"svsvc","{#SERVICE.DISPLAYNAME}":"Spot Verifier","{#SERVICE.DESCRIPTION}":"Verifies potential file system corruptions.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"swprv","{#SERVICE.DISPLAYNAME}":"Microsoft Software Shadow Copy Provider","{#SERVICE.DESCRIPTION}":"Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k swprv","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SysMain","{#SERVICE.DISPLAYNAME}":"Superfetch","{#SERVICE.DESCRIPTION}":"Maintains and improves system performance over time.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"SystemEventsBroker","{#SERVICE.DISPLAYNAME}":"System Events Broker","{#SERVICE.DESCRIPTION}":"Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k DcomLaunch","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"TabletInputService","{#SERVICE.DISPLAYNAME}":"Touch Keyboard and Handwriting Panel Service","{#SERVICE.DESCRIPTION}":"Enables Touch Keyboard and Handwriting Panel pen and ink functionality","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k TabletInputServiceGroup","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"TapiSrv","{#SERVICE.DISPLAYNAME}":"Telephony","{#SERVICE.DESCRIPTION}":"Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k tapisrv","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"TermService","{#SERVICE.DISPLAYNAME}":"Remote Desktop Services","{#SERVICE.DESCRIPTION}":"Allows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service.  To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k termsvcs","{#SERVICE.USER}":"NT Authority\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Themes","{#SERVICE.DISPLAYNAME}":"Themes","{#SERVICE.DESCRIPTION}":"Provides user experience theme management.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"THREADORDER","{#SERVICE.DISPLAYNAME}":"Thread Ordering Server","{#SERVICE.DESCRIPTION}":"Provides ordered execution for a group of threads within a specific period of time.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"TieringEngineService","{#SERVICE.DISPLAYNAME}":"Storage Tiers Management","{#SERVICE.DESCRIPTION}":"Optimizes the placement of data in storage tiers on all tiered storage spaces in the system.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\TieringEngineService.exe","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"TimeBroker","{#SERVICE.DISPLAYNAME}":"Time Broker","{#SERVICE.DESCRIPTION}":"Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"TrkWks","{#SERVICE.DISPLAYNAME}":"Distributed Link Tracking Client","{#SERVICE.DESCRIPTION}":"Maintains links between NTFS files within a computer or across computers in a network.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"TrustedInstaller","{#SERVICE.DISPLAYNAME}":"Windows Modules Installer","{#SERVICE.DESCRIPTION}":"Enables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\servicing\\TrustedInstaller.exe","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"UALSVC","{#SERVICE.DISPLAYNAME}":"User Access Logging Service","{#SERVICE.DESCRIPTION}":"This service logs unique client access requests, in the form of IP addresses and user names, of installed products and roles on the local server. This information can be queried, via Powershell, by administrators needing to quantify client demand of server software for offline Client Access License (CAL) management. If the service is disabled, client requests will not be logged and will not be retrievable via Powershell queries. Stopping the service will not affect query of historical data (see supporting documentation for steps to delete historical data). The local system administrator must consult his, or her, Windows Server license terms to determine the number of CALs that are required for the server software to be appropriately licensed; use of the UAL service and data does not alter this obligation.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":1,"{#SERVICE.STARTUPNAME}":"automatic delayed"},{"{#SERVICE.NAME}":"UI0Detect","{#SERVICE.DISPLAYNAME}":"Interactive Services Detection","{#SERVICE.DESCRIPTION}":"Enables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new interactive service dialogs will no longer function and there might not be access to interactive service dialogs. If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\UI0Detect.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"UmRdpService","{#SERVICE.DISPLAYNAME}":"Remote Desktop Services UserMode Port Redirector","{#SERVICE.DESCRIPTION}":"Allows the redirection of Printers/Drives/Ports for RDP connections","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"upnphost","{#SERVICE.DISPLAYNAME}":"UPnP Device Host","{#SERVICE.DESCRIPTION}":"Allows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":3,"{#SERVICE.STARTUPNAME}":"disabled"},{"{#SERVICE.NAME}":"VaultSvc","{#SERVICE.DISPLAYNAME}":"Credential Manager","{#SERVICE.DESCRIPTION}":"Provides secure storage and retrieval of credentials to users, applications and security service packages.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\lsass.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vds","{#SERVICE.DISPLAYNAME}":"Virtual Disk","{#SERVICE.DESCRIPTION}":"Provides management services for disks, volumes, file systems, and storage arrays.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\vds.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmicguestinterface","{#SERVICE.DISPLAYNAME}":"Hyper-V Guest Service Interface","{#SERVICE.DESCRIPTION}":"Provides an interface for the Hyper-V host to interact with specific services running inside the virtual machine.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmicheartbeat","{#SERVICE.DISPLAYNAME}":"Hyper-V Heartbeat Service","{#SERVICE.DESCRIPTION}":"Monitors the state of this virtual machine by reporting a heartbeat at regular intervals. This service helps you identify running virtual machines that have stopped responding.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k ICService","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmickvpexchange","{#SERVICE.DISPLAYNAME}":"Hyper-V Data Exchange Service","{#SERVICE.DESCRIPTION}":"Provides a mechanism to exchange data between the virtual machine and the operating system running on the physical computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmicrdv","{#SERVICE.DISPLAYNAME}":"Hyper-V Remote Desktop Virtualization Service","{#SERVICE.DESCRIPTION}":"Provides a platform for communication between the virtual machine and the operating system running on the physical computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k ICService","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmicshutdown","{#SERVICE.DISPLAYNAME}":"Hyper-V Guest Shutdown Service","{#SERVICE.DESCRIPTION}":"Provides a mechanism to shut down the operating system of this virtual machine from the management interfaces on the physical computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmictimesync","{#SERVICE.DISPLAYNAME}":"Hyper-V Time Synchronization Service","{#SERVICE.DESCRIPTION}":"Synchronizes the system time of this virtual machine with the system time of the physical computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"vmicvss","{#SERVICE.DISPLAYNAME}":"Hyper-V Volume Shadow Copy Requestor","{#SERVICE.DESCRIPTION}":"Coordinates the communications that are required to use Volume Shadow Copy Service to back up applications and data on this virtual machine from the operating system on the physical computer.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"VMTools","{#SERVICE.DISPLAYNAME}":"VMware Tools","{#SERVICE.DESCRIPTION}":"Provides support for synchronizing objects between the host and guest operating systems.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Program Files\\VMware\\VMware Tools\\vmtoolsd.exe\"","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"vmvss","{#SERVICE.DISPLAYNAME}":"VMware Snapshot Provider","{#SERVICE.DESCRIPTION}":"VMware Snapshot Provider","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\dllhost.exe /Processid:{B100399F-6456-4067-A7DE-FE3B8F7F8797}","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"VSS","{#SERVICE.DISPLAYNAME}":"Volume Shadow Copy","{#SERVICE.DESCRIPTION}":"Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\vssvc.exe","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"W32Time","{#SERVICE.DISPLAYNAME}":"Windows Time","{#SERVICE.DESCRIPTION}":"Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"w3logsvc","{#SERVICE.DISPLAYNAME}":"W3C Logging Service","{#SERVICE.DESCRIPTION}":"Provides W3C logging for Internet Information Services (IIS). If this service is stopped, W3C logging configured by IIS will not work.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k apphost","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"W3SVC","{#SERVICE.DISPLAYNAME}":"World Wide Web Publishing Service","{#SERVICE.DESCRIPTION}":"Provides Web connectivity and administration through the Internet Information Services Manager","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k iissvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"WAS","{#SERVICE.DISPLAYNAME}":"Windows Process Activation Service","{#SERVICE.DESCRIPTION}":"The Windows Process Activation Service (WAS) provides process activation, resource management and health management services for message-activated applications.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k iissvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Wcmsvc","{#SERVICE.DISPLAYNAME}":"Windows Connection Manager","{#SERVICE.DESCRIPTION}":"Makes automatic connect/disconnect decisions based on the network connectivity options currently available to the PC and enables management of network connectivity based on Group Policy settings.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted","{#SERVICE.USER}":"NT Authority\\LocalService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"WcsPlugInService","{#SERVICE.DISPLAYNAME}":"Windows Color System","{#SERVICE.DESCRIPTION}":"The WcsPlugInService service hosts third-party Windows Color System color device model and gamut map model plug-in modules. These plug-in modules are vendor-specific extensions to the Windows Color System baseline color device and gamut map models. Stopping or disabling the WcsPlugInService service will disable this extensibility feature, and the Windows Color System will use its baseline model processing rather than the vendor's desired processing. This might result in inaccurate color rendering.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k wcssvc","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WdiServiceHost","{#SERVICE.DISPLAYNAME}":"Diagnostic Service Host","{#SERVICE.DESCRIPTION}":"The Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context.  If this service is stopped, any diagnostics that depend on it will no longer function.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WdiSystemHost","{#SERVICE.DISPLAYNAME}":"Diagnostic System Host","{#SERVICE.DESCRIPTION}":"The Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context.  If this service is stopped, any diagnostics that depend on it will no longer function.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WebClient","{#SERVICE.DISPLAYNAME}":"WebClient","{#SERVICE.DESCRIPTION}":"Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k WebClientGroup","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Wecsvc","{#SERVICE.DISPLAYNAME}":"Windows Event Collector","{#SERVICE.DESCRIPTION}":"This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WEPHOSTSVC","{#SERVICE.DISPLAYNAME}":"Windows Encryption Provider Host Service","{#SERVICE.DESCRIPTION}":"Windows Encryption Provider Host Service brokers encryption related functionalities from 3rd Party Encryption Providers to processes that need to evaluate and apply EAS policies. Stopping this will compromise EAS compliancy checks that have been established by the connected Mail Accounts","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k WepHostSvcGroup","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"wercplsupport","{#SERVICE.DISPLAYNAME}":"Problem Reports and Solutions Control Panel Support","{#SERVICE.DESCRIPTION}":"This service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WerSvc","{#SERVICE.DISPLAYNAME}":"Windows Error Reporting Service","{#SERVICE.DESCRIPTION}":"Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k WerSvcGroup","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WiaRpc","{#SERVICE.DISPLAYNAME}":"Still Image Acquisition Events","{#SERVICE.DESCRIPTION}":"Launches applications associated with still image acquisition events.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WinHttpAutoProxySvc","{#SERVICE.DISPLAYNAME}":"WinHTTP Web Proxy Auto-Discovery Service","{#SERVICE.DESCRIPTION}":"WinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalService","{#SERVICE.USER}":"NT AUTHORITY\\LocalService","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Winmgmt","{#SERVICE.DISPLAYNAME}":"Windows Management Instrumentation","{#SERVICE.DESCRIPTION}":"Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"WinRM","{#SERVICE.DISPLAYNAME}":"Windows Remote Management (WS-Management)","{#SERVICE.DESCRIPTION}":"Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine.  The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k NetworkService","{#SERVICE.USER}":"NT AUTHORITY\\NetworkService","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"},{"{#SERVICE.NAME}":"wlidsvc","{#SERVICE.DISPLAYNAME}":"Microsoft Account Sign-in Assistant","{#SERVICE.DESCRIPTION}":"Enables user sign-in through Microsoft account identity services. If this service is stopped, users will not be able to logon to the computer with their Microsoft account.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"wmiApSrv","{#SERVICE.DISPLAYNAME}":"WMI Performance Adapter","{#SERVICE.DESCRIPTION}":"Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\wbem\\WmiApSrv.exe","{#SERVICE.USER}":"localSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WPDBusEnum","{#SERVICE.DISPLAYNAME}":"Portable Device Enumerator Service","{#SERVICE.DESCRIPTION}":"Enforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"WSService","{#SERVICE.DISPLAYNAME}":"Windows Store Service (WSService)","{#SERVICE.DESCRIPTION}":"Provides infrastructure support for Windows Store.This service is started on demand and if disabled applications bought using Windows Store will not behave correctly.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\System32\\svchost.exe -k wsappx","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"wuauserv","{#SERVICE.DISPLAYNAME}":"Windows Update","{#SERVICE.DESCRIPTION}":"Enables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k netsvcs","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"wudfsvc","{#SERVICE.DISPLAYNAME}":"Windows Driver Foundation - User-mode Driver Framework","{#SERVICE.DESCRIPTION}":"Creates and manages user-mode driver processes. This service cannot be stopped.","{#SERVICE.STATE}":6,"{#SERVICE.STATENAME}":"stopped","{#SERVICE.PATH}":"C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":2,"{#SERVICE.STARTUPNAME}":"manual"},{"{#SERVICE.NAME}":"Zabbix Agent","{#SERVICE.DISPLAYNAME}":"Zabbix Agent","{#SERVICE.DESCRIPTION}":"Provides system monitoring","{#SERVICE.STATE}":0,"{#SERVICE.STATENAME}":"running","{#SERVICE.PATH}":"\"C:\\Zabbix\\zabbix_agentd.exe\" --config \"C:\\Zabbix\\zabbix_agentd.conf\"","{#SERVICE.USER}":"LocalSystem","{#SERVICE.STARTUP}":0,"{#SERVICE.STARTUPNAME}":"automatic"}]}'
 28632:20160720:115718.876 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:3/100
 28632:20160720:115718.877 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.877 End of send_buffer():SUCCEED
 28632:20160720:115718.878 buffer: new element 3
 28632:20160720:115718.878 End of process_value():SUCCEED
 28632:20160720:115718.879 In need_meta_update() key:service.discovery
 28632:20160720:115718.879 End of need_meta_update():FAIL
 28632:20160720:115718.881 for key [service.info[AppHostSvc,startup]] received value [0]
 28632:20160720:115718.881 In process_value() key:'bcaves-sfb.bca.int:service.info[AppHostSvc,startup]' value:'0'
 28632:20160720:115718.881 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:4/100
 28632:20160720:115718.882 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.882 End of send_buffer():SUCCEED
 28632:20160720:115718.883 buffer: new element 4
 28632:20160720:115718.883 End of process_value():SUCCEED
 28632:20160720:115718.884 In need_meta_update() key:service.info[AppHostSvc,startup]
 28632:20160720:115718.884 End of need_meta_update():FAIL
 28632:20160720:115718.885 for key [service.info[AppHostSvc,state]] received value [0]
 28632:20160720:115718.885 In process_value() key:'bcaves-sfb.bca.int:service.info[AppHostSvc,state]' value:'0'
 28632:20160720:115718.886 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:5/100
 28632:20160720:115718.886 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.886 End of send_buffer():SUCCEED
 28632:20160720:115718.887 buffer: new element 5
 28632:20160720:115718.887 End of process_value():SUCCEED
 28632:20160720:115718.888 In need_meta_update() key:service.info[AppHostSvc,state]
 28632:20160720:115718.888 End of need_meta_update():FAIL
 28632:20160720:115718.889 for key [service.info[BFE,startup]] received value [0]
 28632:20160720:115718.890 In process_value() key:'bcaves-sfb.bca.int:service.info[BFE,startup]' value:'0'
 28632:20160720:115718.890 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:6/100
 28632:20160720:115718.890 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.891 End of send_buffer():SUCCEED
 28632:20160720:115718.891 buffer: new element 6
 28632:20160720:115718.892 End of process_value():SUCCEED
 28632:20160720:115718.892 In need_meta_update() key:service.info[BFE,startup]
 28632:20160720:115718.892 End of need_meta_update():FAIL
 28632:20160720:115718.893 for key [service.info[BFE,state]] received value [0]
 28632:20160720:115718.894 In process_value() key:'bcaves-sfb.bca.int:service.info[BFE,state]' value:'0'
 28632:20160720:115718.894 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:7/100
 28632:20160720:115718.894 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.895 End of send_buffer():SUCCEED
 28632:20160720:115718.895 buffer: new element 7
 28632:20160720:115718.895 End of process_value():SUCCEED
 28632:20160720:115718.896 In need_meta_update() key:service.info[BFE,state]
 28632:20160720:115718.896 End of need_meta_update():FAIL
 28632:20160720:115718.897 for key [service.info[BrokerInfrastructure,startup]] received value [0]
 28632:20160720:115718.898 In process_value() key:'bcaves-sfb.bca.int:service.info[BrokerInfrastructure,startup]' value:'0'
 28632:20160720:115718.898 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:8/100
 28632:20160720:115718.899 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.899 End of send_buffer():SUCCEED
 28632:20160720:115718.899 buffer: new element 8
 28632:20160720:115718.900 End of process_value():SUCCEED
 28632:20160720:115718.900 In need_meta_update() key:service.info[BrokerInfrastructure,startup]
 28632:20160720:115718.901 End of need_meta_update():FAIL
 28632:20160720:115718.902 for key [service.info[BrokerInfrastructure,state]] received value [0]
 28632:20160720:115718.902 In process_value() key:'bcaves-sfb.bca.int:service.info[BrokerInfrastructure,state]' value:'0'
 28632:20160720:115718.902 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:9/100
 28632:20160720:115718.903 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.903 End of send_buffer():SUCCEED
 28632:20160720:115718.904 buffer: new element 9
 28632:20160720:115718.904 End of process_value():SUCCEED
 28632:20160720:115718.905 In need_meta_update() key:service.info[BrokerInfrastructure,state]
 28632:20160720:115718.905 End of need_meta_update():FAIL
 28632:20160720:115718.906 for key [service.info[CryptSvc,startup]] received value [0]
 28632:20160720:115718.906 In process_value() key:'bcaves-sfb.bca.int:service.info[CryptSvc,startup]' value:'0'
 28632:20160720:115718.907 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:10/100
 28632:20160720:115718.907 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.908 End of send_buffer():SUCCEED
 28632:20160720:115718.908 buffer: new element 10
 28632:20160720:115718.908 End of process_value():SUCCEED
 28632:20160720:115718.909 In need_meta_update() key:service.info[CryptSvc,startup]
 28632:20160720:115718.909 End of need_meta_update():FAIL
 28632:20160720:115718.910 for key [service.info[CryptSvc,state]] received value [0]
 28632:20160720:115718.910 In process_value() key:'bcaves-sfb.bca.int:service.info[CryptSvc,state]' value:'0'
 28632:20160720:115718.911 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:11/100
 28632:20160720:115718.911 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.912 End of send_buffer():SUCCEED
 28632:20160720:115718.912 buffer: new element 11
 28632:20160720:115718.912 End of process_value():SUCCEED
 28632:20160720:115718.913 In need_meta_update() key:service.info[CryptSvc,state]
 28632:20160720:115718.913 End of need_meta_update():FAIL
 28632:20160720:115718.914 for key [service.info[DcomLaunch,startup]] received value [0]
 28632:20160720:115718.915 In process_value() key:'bcaves-sfb.bca.int:service.info[DcomLaunch,startup]' value:'0'
 28632:20160720:115718.915 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:12/100
 28632:20160720:115718.916 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.916 End of send_buffer():SUCCEED
 28632:20160720:115718.917 buffer: new element 12
 28632:20160720:115718.917 End of process_value():SUCCEED
 28632:20160720:115718.918 In need_meta_update() key:service.info[DcomLaunch,startup]
 28632:20160720:115718.918 End of need_meta_update():FAIL
 28632:20160720:115718.919 for key [service.info[DcomLaunch,state]] received value [0]
 28632:20160720:115718.919 In process_value() key:'bcaves-sfb.bca.int:service.info[DcomLaunch,state]' value:'0'
 28632:20160720:115718.920 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:13/100
 28632:20160720:115718.920 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.920 End of send_buffer():SUCCEED
 28632:20160720:115718.921 buffer: new element 13
 28632:20160720:115718.921 End of process_value():SUCCEED
 28632:20160720:115718.922 In need_meta_update() key:service.info[DcomLaunch,state]
 28632:20160720:115718.922 End of need_meta_update():FAIL
 28632:20160720:115718.923 for key [service.info[Dhcp,startup]] received value [0]
 28632:20160720:115718.923 In process_value() key:'bcaves-sfb.bca.int:service.info[Dhcp,startup]' value:'0'
 28632:20160720:115718.924 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:14/100
 28632:20160720:115718.924 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.925 End of send_buffer():SUCCEED
 28632:20160720:115718.925 buffer: new element 14
 28632:20160720:115718.925 End of process_value():SUCCEED
 28632:20160720:115718.926 In need_meta_update() key:service.info[Dhcp,startup]
 28632:20160720:115718.926 End of need_meta_update():FAIL
 28632:20160720:115718.927 for key [service.info[Dhcp,state]] received value [0]
 28632:20160720:115718.927 In process_value() key:'bcaves-sfb.bca.int:service.info[Dhcp,state]' value:'0'
 28632:20160720:115718.928 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:15/100
 28632:20160720:115718.928 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.929 End of send_buffer():SUCCEED
 28632:20160720:115718.929 buffer: new element 15
 28632:20160720:115718.930 End of process_value():SUCCEED
 28632:20160720:115718.930 In need_meta_update() key:service.info[Dhcp,state]
 28632:20160720:115718.931 End of need_meta_update():FAIL
 28632:20160720:115718.932 for key [service.info[DiagTrack,startup]] received value [0]
 28632:20160720:115718.933 In process_value() key:'bcaves-sfb.bca.int:service.info[DiagTrack,startup]' value:'0'
 28632:20160720:115718.933 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:16/100
 28632:20160720:115718.934 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.934 End of send_buffer():SUCCEED
 28632:20160720:115718.934 buffer: new element 16
 28632:20160720:115718.935 End of process_value():SUCCEED
 28632:20160720:115718.935 In need_meta_update() key:service.info[DiagTrack,startup]
 28632:20160720:115718.936 End of need_meta_update():FAIL
 28632:20160720:115718.936 for key [service.info[DiagTrack,state]] received value [0]
 28632:20160720:115718.937 In process_value() key:'bcaves-sfb.bca.int:service.info[DiagTrack,state]' value:'0'
 28632:20160720:115718.937 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:17/100
 28632:20160720:115718.937 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.938 End of send_buffer():SUCCEED
 28632:20160720:115718.938 buffer: new element 17
 28632:20160720:115718.939 End of process_value():SUCCEED
 28632:20160720:115718.939 In need_meta_update() key:service.info[DiagTrack,state]
 28632:20160720:115718.939 End of need_meta_update():FAIL
 28632:20160720:115718.940 for key [service.info[Dnscache,startup]] received value [0]
 28632:20160720:115718.941 In process_value() key:'bcaves-sfb.bca.int:service.info[Dnscache,startup]' value:'0'
 28632:20160720:115718.941 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:18/100
 28632:20160720:115718.942 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.942 End of send_buffer():SUCCEED
 28632:20160720:115718.943 buffer: new element 18
 28632:20160720:115718.943 End of process_value():SUCCEED
 28632:20160720:115718.943 In need_meta_update() key:service.info[Dnscache,startup]
 28632:20160720:115718.944 End of need_meta_update():FAIL
 28632:20160720:115718.945 for key [service.info[Dnscache,state]] received value [0]
 28632:20160720:115718.945 In process_value() key:'bcaves-sfb.bca.int:service.info[Dnscache,state]' value:'0'
 28632:20160720:115718.945 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:19/100
 28632:20160720:115718.946 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.946 End of send_buffer():SUCCEED
 28632:20160720:115718.946 buffer: new element 19
 28632:20160720:115718.947 End of process_value():SUCCEED
 28632:20160720:115718.948 In need_meta_update() key:service.info[Dnscache,state]
 28632:20160720:115718.948 End of need_meta_update():FAIL
 28632:20160720:115718.949 for key [service.info[DPS,startup]] received value [1]
 28632:20160720:115718.950 In process_value() key:'bcaves-sfb.bca.int:service.info[DPS,startup]' value:'1'
 28632:20160720:115718.950 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:20/100
 28632:20160720:115718.951 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.951 End of send_buffer():SUCCEED
 28632:20160720:115718.952 buffer: new element 20
 28632:20160720:115718.952 End of process_value():SUCCEED
 28632:20160720:115718.953 In need_meta_update() key:service.info[DPS,startup]
 28632:20160720:115718.953 End of need_meta_update():FAIL
 28632:20160720:115718.954 for key [service.info[DPS,state]] received value [0]
 28632:20160720:115718.955 In process_value() key:'bcaves-sfb.bca.int:service.info[DPS,state]' value:'0'
 28632:20160720:115718.955 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:21/100
 28632:20160720:115718.956 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.956 End of send_buffer():SUCCEED
 28632:20160720:115718.957 buffer: new element 21
 28632:20160720:115718.957 End of process_value():SUCCEED
 28632:20160720:115718.958 In need_meta_update() key:service.info[DPS,state]
 28632:20160720:115718.958 End of need_meta_update():FAIL
 28632:20160720:115718.959 for key [service.info[EventLog,startup]] received value [0]
 28632:20160720:115718.960 In process_value() key:'bcaves-sfb.bca.int:service.info[EventLog,startup]' value:'0'
 28632:20160720:115718.960 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:22/100
 28632:20160720:115718.961 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.961 End of send_buffer():SUCCEED
 28632:20160720:115718.961 buffer: new element 22
 28632:20160720:115718.962 End of process_value():SUCCEED
 28632:20160720:115718.963 In need_meta_update() key:service.info[EventLog,startup]
 28632:20160720:115718.963 End of need_meta_update():FAIL
 28632:20160720:115718.964 for key [service.info[EventLog,state]] received value [0]
 28632:20160720:115718.964 In process_value() key:'bcaves-sfb.bca.int:service.info[EventLog,state]' value:'0'
 28632:20160720:115718.965 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:23/100
 28632:20160720:115718.965 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.966 End of send_buffer():SUCCEED
 28632:20160720:115718.966 buffer: new element 23
 28632:20160720:115718.967 End of process_value():SUCCEED
 28632:20160720:115718.967 In need_meta_update() key:service.info[EventLog,state]
 28632:20160720:115718.967 End of need_meta_update():FAIL
 28632:20160720:115718.969 for key [service.info[EventSystem,startup]] received value [0]
 28632:20160720:115718.969 In process_value() key:'bcaves-sfb.bca.int:service.info[EventSystem,startup]' value:'0'
 28632:20160720:115718.969 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:24/100
 28632:20160720:115718.970 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.970 End of send_buffer():SUCCEED
 28632:20160720:115718.971 buffer: new element 24
 28632:20160720:115718.971 End of process_value():SUCCEED
 28632:20160720:115718.972 In need_meta_update() key:service.info[EventSystem,startup]
 28632:20160720:115718.972 End of need_meta_update():FAIL
 28632:20160720:115718.973 for key [service.info[EventSystem,state]] received value [0]
 28632:20160720:115718.974 In process_value() key:'bcaves-sfb.bca.int:service.info[EventSystem,state]' value:'0'
 28632:20160720:115718.974 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:25/100
 28632:20160720:115718.975 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.975 End of send_buffer():SUCCEED
 28632:20160720:115718.975 buffer: new element 25
 28632:20160720:115718.976 End of process_value():SUCCEED
 28632:20160720:115718.976 In need_meta_update() key:service.info[EventSystem,state]
 28632:20160720:115718.977 End of need_meta_update():FAIL
 28632:20160720:115718.978 for key [service.info[FontCache,startup]] received value [0]
 28632:20160720:115718.978 In process_value() key:'bcaves-sfb.bca.int:service.info[FontCache,startup]' value:'0'
 28632:20160720:115718.979 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:26/100
 28632:20160720:115718.979 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.980 End of send_buffer():SUCCEED
 28632:20160720:115718.980 buffer: new element 26
 28632:20160720:115718.981 End of process_value():SUCCEED
 28632:20160720:115718.982 In need_meta_update() key:service.info[FontCache,startup]
 28632:20160720:115718.982 End of need_meta_update():FAIL
 28632:20160720:115718.983 for key [service.info[FontCache,state]] received value [0]
 28632:20160720:115718.983 In process_value() key:'bcaves-sfb.bca.int:service.info[FontCache,state]' value:'0'
 28632:20160720:115718.983 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:27/100
 28632:20160720:115718.984 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.984 End of send_buffer():SUCCEED
 28632:20160720:115718.985 buffer: new element 27
 28632:20160720:115718.985 End of process_value():SUCCEED
 28632:20160720:115718.986 In need_meta_update() key:service.info[FontCache,state]
 28632:20160720:115718.986 End of need_meta_update():FAIL
 28632:20160720:115718.987 for key [service.info[FTA,startup]] received value [1]
 28632:20160720:115718.987 In process_value() key:'bcaves-sfb.bca.int:service.info[FTA,startup]' value:'1'
 28632:20160720:115718.988 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:28/100
 28632:20160720:115718.988 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.989 End of send_buffer():SUCCEED
 28632:20160720:115718.990 buffer: new element 28
 28632:20160720:115718.990 End of process_value():SUCCEED
 28632:20160720:115718.991 In need_meta_update() key:service.info[FTA,startup]
 28632:20160720:115718.991 End of need_meta_update():FAIL
 28632:20160720:115718.992 for key [service.info[FTA,state]] received value [0]
 28632:20160720:115718.992 In process_value() key:'bcaves-sfb.bca.int:service.info[FTA,state]' value:'0'
 28632:20160720:115718.993 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:29/100
 28632:20160720:115718.993 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115718.994 End of send_buffer():SUCCEED
 28632:20160720:115718.995 buffer: new element 29
 28632:20160720:115718.995 End of process_value():SUCCEED
 28632:20160720:115718.995 In need_meta_update() key:service.info[FTA,state]
 28632:20160720:115718.996 End of need_meta_update():FAIL
 28632:20160720:115718.997 for key [service.info[gpsvc,startup]] received value [0]
 28632:20160720:115718.998 In process_value() key:'bcaves-sfb.bca.int:service.info[gpsvc,startup]' value:'0'
 28632:20160720:115718.998 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:30/100
 28632:20160720:115718.999 send_buffer() now:1469008638 lastsent:1469008638 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.000 End of send_buffer():SUCCEED
 28632:20160720:115719.000 buffer: new element 30
 28632:20160720:115719.001 End of process_value():SUCCEED
 28632:20160720:115719.001 In need_meta_update() key:service.info[gpsvc,startup]
 28632:20160720:115719.001 End of need_meta_update():FAIL
 28632:20160720:115719.003 for key [service.info[gpsvc,state]] received value [0]
 28632:20160720:115719.003 In process_value() key:'bcaves-sfb.bca.int:service.info[gpsvc,state]' value:'0'
 28632:20160720:115719.004 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:31/100
 28632:20160720:115719.004 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.005 End of send_buffer():SUCCEED
 28632:20160720:115719.005 buffer: new element 31
 28632:20160720:115719.006 End of process_value():SUCCEED
 28632:20160720:115719.006 In need_meta_update() key:service.info[gpsvc,state]
 28632:20160720:115719.007 End of need_meta_update():FAIL
 28632:20160720:115719.008 for key [service.info[IISADMIN,startup]] received value [0]
 28632:20160720:115719.009 In process_value() key:'bcaves-sfb.bca.int:service.info[IISADMIN,startup]' value:'0'
 28632:20160720:115719.009 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:32/100
 28632:20160720:115719.010 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.010 End of send_buffer():SUCCEED
 28632:20160720:115719.011 buffer: new element 32
 28632:20160720:115719.011 End of process_value():SUCCEED
 28632:20160720:115719.012 In need_meta_update() key:service.info[IISADMIN,startup]
 28632:20160720:115719.012 End of need_meta_update():FAIL
 28632:20160720:115719.013 for key [service.info[IISADMIN,state]] received value [0]
 28632:20160720:115719.014 In process_value() key:'bcaves-sfb.bca.int:service.info[IISADMIN,state]' value:'0'
 28632:20160720:115719.014 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:33/100
 28632:20160720:115719.014 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.015 End of send_buffer():SUCCEED
 28632:20160720:115719.015 buffer: new element 33
 28632:20160720:115719.016 End of process_value():SUCCEED
 28632:20160720:115719.016 In need_meta_update() key:service.info[IISADMIN,state]
 28632:20160720:115719.017 End of need_meta_update():FAIL
 28632:20160720:115719.018 for key [service.info[IKEEXT,startup]] received value [0]
 28632:20160720:115719.018 In process_value() key:'bcaves-sfb.bca.int:service.info[IKEEXT,startup]' value:'0'
 28632:20160720:115719.019 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:34/100
 28632:20160720:115719.019 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.020 End of send_buffer():SUCCEED
 28632:20160720:115719.020 buffer: new element 34
 28632:20160720:115719.021 End of process_value():SUCCEED
 28632:20160720:115719.021 In need_meta_update() key:service.info[IKEEXT,startup]
 28632:20160720:115719.021 End of need_meta_update():FAIL
 28632:20160720:115719.022 for key [service.info[IKEEXT,state]] received value [0]
 28632:20160720:115719.023 In process_value() key:'bcaves-sfb.bca.int:service.info[IKEEXT,state]' value:'0'
 28632:20160720:115719.023 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:35/100
 28632:20160720:115719.024 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.024 End of send_buffer():SUCCEED
 28632:20160720:115719.025 buffer: new element 35
 28632:20160720:115719.025 End of process_value():SUCCEED
 28632:20160720:115719.026 In need_meta_update() key:service.info[IKEEXT,state]
 28632:20160720:115719.026 End of need_meta_update():FAIL
 28632:20160720:115719.027 for key [service.info[iphlpsvc,startup]] received value [0]
 28632:20160720:115719.028 In process_value() key:'bcaves-sfb.bca.int:service.info[iphlpsvc,startup]' value:'0'
 28632:20160720:115719.028 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:36/100
 28632:20160720:115719.028 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.029 End of send_buffer():SUCCEED
 28632:20160720:115719.029 buffer: new element 36
 28632:20160720:115719.030 End of process_value():SUCCEED
 28632:20160720:115719.030 In need_meta_update() key:service.info[iphlpsvc,startup]
 28632:20160720:115719.030 End of need_meta_update():FAIL
 28632:20160720:115719.031 for key [service.info[iphlpsvc,state]] received value [0]
 28632:20160720:115719.032 In process_value() key:'bcaves-sfb.bca.int:service.info[iphlpsvc,state]' value:'0'
 28632:20160720:115719.032 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:37/100
 28632:20160720:115719.033 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.033 End of send_buffer():SUCCEED
 28632:20160720:115719.033 buffer: new element 37
 28632:20160720:115719.034 End of process_value():SUCCEED
 28632:20160720:115719.034 In need_meta_update() key:service.info[iphlpsvc,state]
 28632:20160720:115719.034 End of need_meta_update():FAIL
 28632:20160720:115719.036 for key [service.info[LanmanServer,startup]] received value [0]
 28632:20160720:115719.036 In process_value() key:'bcaves-sfb.bca.int:service.info[LanmanServer,startup]' value:'0'
 28632:20160720:115719.037 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:38/100
 28632:20160720:115719.037 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.037 End of send_buffer():SUCCEED
 28632:20160720:115719.038 buffer: new element 38
 28632:20160720:115719.038 End of process_value():SUCCEED
 28632:20160720:115719.039 In need_meta_update() key:service.info[LanmanServer,startup]
 28632:20160720:115719.039 End of need_meta_update():FAIL
 28632:20160720:115719.040 for key [service.info[LanmanServer,state]] received value [0]
 28632:20160720:115719.040 In process_value() key:'bcaves-sfb.bca.int:service.info[LanmanServer,state]' value:'0'
 28632:20160720:115719.041 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:39/100
 28632:20160720:115719.041 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.042 End of send_buffer():SUCCEED
 28632:20160720:115719.042 buffer: new element 39
 28632:20160720:115719.043 End of process_value():SUCCEED
 28632:20160720:115719.043 In need_meta_update() key:service.info[LanmanServer,state]
 28632:20160720:115719.044 End of need_meta_update():FAIL
 28632:20160720:115719.045 for key [service.info[LanmanWorkstation,startup]] received value [0]
 28632:20160720:115719.045 In process_value() key:'bcaves-sfb.bca.int:service.info[LanmanWorkstation,startup]' value:'0'
 28632:20160720:115719.045 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:40/100
 28632:20160720:115719.046 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.046 End of send_buffer():SUCCEED
 28632:20160720:115719.047 buffer: new element 40
 28632:20160720:115719.047 End of process_value():SUCCEED
 28632:20160720:115719.048 In need_meta_update() key:service.info[LanmanWorkstation,startup]
 28632:20160720:115719.048 End of need_meta_update():FAIL
 28632:20160720:115719.049 for key [service.info[LanmanWorkstation,state]] received value [0]
 28632:20160720:115719.049 In process_value() key:'bcaves-sfb.bca.int:service.info[LanmanWorkstation,state]' value:'0'
 28632:20160720:115719.050 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:41/100
 28632:20160720:115719.050 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.050 End of send_buffer():SUCCEED
 28632:20160720:115719.051 buffer: new element 41
 28632:20160720:115719.051 End of process_value():SUCCEED
 28632:20160720:115719.052 In need_meta_update() key:service.info[LanmanWorkstation,state]
 28632:20160720:115719.052 End of need_meta_update():FAIL
 28632:20160720:115719.053 for key [service.info[lmhosts,startup]] received value [0]
 28632:20160720:115719.053 In process_value() key:'bcaves-sfb.bca.int:service.info[lmhosts,startup]' value:'0'
 28632:20160720:115719.053 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:42/100
 28632:20160720:115719.055 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.055 End of send_buffer():SUCCEED
 28632:20160720:115719.055 buffer: new element 42
 28632:20160720:115719.056 End of process_value():SUCCEED
 28632:20160720:115719.056 In need_meta_update() key:service.info[lmhosts,startup]
 28632:20160720:115719.056 End of need_meta_update():FAIL
 28632:20160720:115719.057 for key [service.info[lmhosts,state]] received value [0]
 28632:20160720:115719.058 In process_value() key:'bcaves-sfb.bca.int:service.info[lmhosts,state]' value:'0'
 28632:20160720:115719.058 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:43/100
 28632:20160720:115719.058 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.059 End of send_buffer():SUCCEED
 28632:20160720:115719.059 buffer: new element 43
 28632:20160720:115719.060 End of process_value():SUCCEED
 28632:20160720:115719.060 In need_meta_update() key:service.info[lmhosts,state]
 28632:20160720:115719.061 End of need_meta_update():FAIL
 28632:20160720:115719.062 for key [service.info[LSM,startup]] received value [0]
 28632:20160720:115719.062 In process_value() key:'bcaves-sfb.bca.int:service.info[LSM,startup]' value:'0'
 28632:20160720:115719.063 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:44/100
 28632:20160720:115719.063 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.063 End of send_buffer():SUCCEED
 28632:20160720:115719.064 buffer: new element 44
 28632:20160720:115719.064 End of process_value():SUCCEED
 28632:20160720:115719.065 In need_meta_update() key:service.info[LSM,startup]
 28632:20160720:115719.065 End of need_meta_update():FAIL
 28632:20160720:115719.066 for key [service.info[LSM,state]] received value [0]
 28632:20160720:115719.066 In process_value() key:'bcaves-sfb.bca.int:service.info[LSM,state]' value:'0'
 28632:20160720:115719.066 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:45/100
 28632:20160720:115719.067 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.067 End of send_buffer():SUCCEED
 28632:20160720:115719.068 buffer: new element 45
 28632:20160720:115719.068 End of process_value():SUCCEED
 28632:20160720:115719.068 In need_meta_update() key:service.info[LSM,state]
 28632:20160720:115719.069 End of need_meta_update():FAIL
 28632:20160720:115719.070 for key [service.info[MASTER,startup]] received value [1]
 28632:20160720:115719.070 In process_value() key:'bcaves-sfb.bca.int:service.info[MASTER,startup]' value:'1'
 28632:20160720:115719.071 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:46/100
 28632:20160720:115719.071 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.072 End of send_buffer():SUCCEED
 28632:20160720:115719.072 buffer: new element 46
 28632:20160720:115719.073 End of process_value():SUCCEED
 28632:20160720:115719.073 In need_meta_update() key:service.info[MASTER,startup]
 28632:20160720:115719.073 End of need_meta_update():FAIL
 28632:20160720:115719.074 for key [service.info[MASTER,state]] received value [0]
 28632:20160720:115719.075 In process_value() key:'bcaves-sfb.bca.int:service.info[MASTER,state]' value:'0'
 28632:20160720:115719.075 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:47/100
 28632:20160720:115719.075 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.076 End of send_buffer():SUCCEED
 28632:20160720:115719.076 buffer: new element 47
 28632:20160720:115719.077 End of process_value():SUCCEED
 28632:20160720:115719.077 In need_meta_update() key:service.info[MASTER,state]
 28632:20160720:115719.077 End of need_meta_update():FAIL
 28632:20160720:115719.078 for key [service.info[MpsSvc,startup]] received value [0]
 28632:20160720:115719.079 In process_value() key:'bcaves-sfb.bca.int:service.info[MpsSvc,startup]' value:'0'
 28632:20160720:115719.079 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:48/100
 28632:20160720:115719.080 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.080 End of send_buffer():SUCCEED
 28632:20160720:115719.081 buffer: new element 48
 28632:20160720:115719.081 End of process_value():SUCCEED
 28632:20160720:115719.081 In need_meta_update() key:service.info[MpsSvc,startup]
 28632:20160720:115719.082 End of need_meta_update():FAIL
 28632:20160720:115719.083 for key [service.info[MpsSvc,state]] received value [0]
 28632:20160720:115719.083 In process_value() key:'bcaves-sfb.bca.int:service.info[MpsSvc,state]' value:'0'
 28632:20160720:115719.084 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:49/100
 28632:20160720:115719.084 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.084 End of send_buffer():SUCCEED
 28632:20160720:115719.085 buffer: new element 49
 28632:20160720:115719.085 End of process_value():SUCCEED
 28632:20160720:115719.086 In need_meta_update() key:service.info[MpsSvc,state]
 28632:20160720:115719.086 End of need_meta_update():FAIL
 28632:20160720:115719.087 for key [service.info[MSDTC,startup]] received value [1]
 28632:20160720:115719.088 In process_value() key:'bcaves-sfb.bca.int:service.info[MSDTC,startup]' value:'1'
 28632:20160720:115719.088 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:50/100
 28632:20160720:115719.089 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.089 End of send_buffer():SUCCEED
 28632:20160720:115719.089 buffer: new element 50
 28632:20160720:115719.090 End of process_value():SUCCEED
 28632:20160720:115719.090 In need_meta_update() key:service.info[MSDTC,startup]
 28632:20160720:115719.091 End of need_meta_update():FAIL
 28632:20160720:115719.092 for key [service.info[MSDTC,state]] received value [0]
 28632:20160720:115719.092 In process_value() key:'bcaves-sfb.bca.int:service.info[MSDTC,state]' value:'0'
 28632:20160720:115719.092 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:51/100
 28632:20160720:115719.093 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.093 End of send_buffer():SUCCEED
 28632:20160720:115719.094 buffer: new element 51
 28632:20160720:115719.094 End of process_value():SUCCEED
 28632:20160720:115719.094 In need_meta_update() key:service.info[MSDTC,state]
 28632:20160720:115719.095 End of need_meta_update():FAIL
 28632:20160720:115719.096 for key [service.info[MSSQL$LYNCLOCAL,startup]] received value [0]
 28632:20160720:115719.096 In process_value() key:'bcaves-sfb.bca.int:service.info[MSSQL$LYNCLOCAL,startup]' value:'0'
 28632:20160720:115719.097 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:52/100
 28632:20160720:115719.097 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.097 End of send_buffer():SUCCEED
 28632:20160720:115719.098 buffer: new element 52
 28632:20160720:115719.098 End of process_value():SUCCEED
 28632:20160720:115719.099 In need_meta_update() key:service.info[MSSQL$LYNCLOCAL,startup]
 28632:20160720:115719.099 End of need_meta_update():FAIL
 28632:20160720:115719.100 for key [service.info[MSSQL$LYNCLOCAL,state]] received value [0]
 28632:20160720:115719.100 In process_value() key:'bcaves-sfb.bca.int:service.info[MSSQL$LYNCLOCAL,state]' value:'0'
 28632:20160720:115719.101 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:53/100
 28632:20160720:115719.101 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.102 End of send_buffer():SUCCEED
 28632:20160720:115719.102 buffer: new element 53
 28632:20160720:115719.102 End of process_value():SUCCEED
 28632:20160720:115719.103 In need_meta_update() key:service.info[MSSQL$LYNCLOCAL,state]
 28632:20160720:115719.103 End of need_meta_update():FAIL
 28632:20160720:115719.104 for key [service.info[MSSQL$RTC,startup]] received value [0]
 28632:20160720:115719.105 In process_value() key:'bcaves-sfb.bca.int:service.info[MSSQL$RTC,startup]' value:'0'
 28632:20160720:115719.105 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:54/100
 28632:20160720:115719.106 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.106 End of send_buffer():SUCCEED
 28632:20160720:115719.107 buffer: new element 54
 28632:20160720:115719.107 End of process_value():SUCCEED
 28632:20160720:115719.107 In need_meta_update() key:service.info[MSSQL$RTC,startup]
 28632:20160720:115719.108 End of need_meta_update():FAIL
 28632:20160720:115719.109 for key [service.info[MSSQL$RTC,state]] received value [0]
 28632:20160720:115719.109 In process_value() key:'bcaves-sfb.bca.int:service.info[MSSQL$RTC,state]' value:'0'
 28632:20160720:115719.110 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:55/100
 28632:20160720:115719.110 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.111 End of send_buffer():SUCCEED
 28632:20160720:115719.111 buffer: new element 55
 28632:20160720:115719.111 End of process_value():SUCCEED
 28632:20160720:115719.112 In need_meta_update() key:service.info[MSSQL$RTC,state]
 28632:20160720:115719.112 End of need_meta_update():FAIL
 28632:20160720:115719.113 for key [service.info[MSSQL$RTCLOCAL,startup]] received value [0]
 28632:20160720:115719.114 In process_value() key:'bcaves-sfb.bca.int:service.info[MSSQL$RTCLOCAL,startup]' value:'0'
 28632:20160720:115719.114 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:56/100
 28632:20160720:115719.114 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.115 End of send_buffer():SUCCEED
 28632:20160720:115719.115 buffer: new element 56
 28632:20160720:115719.116 End of process_value():SUCCEED
 28632:20160720:115719.116 In need_meta_update() key:service.info[MSSQL$RTCLOCAL,startup]
 28632:20160720:115719.116 End of need_meta_update():FAIL
 28632:20160720:115719.117 for key [service.info[MSSQL$RTCLOCAL,state]] received value [0]
 28632:20160720:115719.118 In process_value() key:'bcaves-sfb.bca.int:service.info[MSSQL$RTCLOCAL,state]' value:'0'
 28632:20160720:115719.118 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:57/100
 28632:20160720:115719.118 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.119 End of send_buffer():SUCCEED
 28632:20160720:115719.119 buffer: new element 57
 28632:20160720:115719.120 End of process_value():SUCCEED
 28632:20160720:115719.120 In need_meta_update() key:service.info[MSSQL$RTCLOCAL,state]
 28632:20160720:115719.120 End of need_meta_update():FAIL
 28632:20160720:115719.122 for key [service.info[Netlogon,startup]] received value [0]
 28632:20160720:115719.122 In process_value() key:'bcaves-sfb.bca.int:service.info[Netlogon,startup]' value:'0'
 28632:20160720:115719.122 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:58/100
 28632:20160720:115719.123 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.123 End of send_buffer():SUCCEED
 28632:20160720:115719.124 buffer: new element 58
 28632:20160720:115719.124 End of process_value():SUCCEED
 28632:20160720:115719.124 In need_meta_update() key:service.info[Netlogon,startup]
 28632:20160720:115719.125 End of need_meta_update():FAIL
 28632:20160720:115719.125 for key [service.info[Netlogon,state]] received value [0]
 28632:20160720:115719.126 In process_value() key:'bcaves-sfb.bca.int:service.info[Netlogon,state]' value:'0'
 28632:20160720:115719.126 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:59/100
 28632:20160720:115719.127 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.127 End of send_buffer():SUCCEED
 28632:20160720:115719.127 buffer: new element 59
 28632:20160720:115719.128 End of process_value():SUCCEED
 28632:20160720:115719.128 In need_meta_update() key:service.info[Netlogon,state]
 28632:20160720:115719.129 End of need_meta_update():FAIL
 28632:20160720:115719.130 for key [service.info[NlaSvc,startup]] received value [0]
 28632:20160720:115719.130 In process_value() key:'bcaves-sfb.bca.int:service.info[NlaSvc,startup]' value:'0'
 28632:20160720:115719.130 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:60/100
 28632:20160720:115719.131 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.131 End of send_buffer():SUCCEED
 28632:20160720:115719.132 buffer: new element 60
 28632:20160720:115719.132 End of process_value():SUCCEED
 28632:20160720:115719.133 In need_meta_update() key:service.info[NlaSvc,startup]
 28632:20160720:115719.133 End of need_meta_update():FAIL
 28632:20160720:115719.134 for key [service.info[NlaSvc,state]] received value [0]
 28632:20160720:115719.134 In process_value() key:'bcaves-sfb.bca.int:service.info[NlaSvc,state]' value:'0'
 28632:20160720:115719.134 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:61/100
 28632:20160720:115719.136 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.136 End of send_buffer():SUCCEED
 28632:20160720:115719.136 buffer: new element 61
 28632:20160720:115719.136 End of process_value():SUCCEED
 28632:20160720:115719.137 In need_meta_update() key:service.info[NlaSvc,state]
 28632:20160720:115719.137 End of need_meta_update():FAIL
 28632:20160720:115719.138 for key [service.info[nsi,startup]] received value [0]
 28632:20160720:115719.139 In process_value() key:'bcaves-sfb.bca.int:service.info[nsi,startup]' value:'0'
 28632:20160720:115719.139 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:62/100
 28632:20160720:115719.140 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.140 End of send_buffer():SUCCEED
 28632:20160720:115719.140 buffer: new element 62
 28632:20160720:115719.141 End of process_value():SUCCEED
 28632:20160720:115719.141 In need_meta_update() key:service.info[nsi,startup]
 28632:20160720:115719.142 End of need_meta_update():FAIL
 28632:20160720:115719.143 for key [service.info[nsi,state]] received value [0]
 28632:20160720:115719.143 In process_value() key:'bcaves-sfb.bca.int:service.info[nsi,state]' value:'0'
 28632:20160720:115719.143 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:63/100
 28632:20160720:115719.144 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.144 End of send_buffer():SUCCEED
 28632:20160720:115719.145 buffer: new element 63
 28632:20160720:115719.145 End of process_value():SUCCEED
 28632:20160720:115719.146 In need_meta_update() key:service.info[nsi,state]
 28632:20160720:115719.146 End of need_meta_update():FAIL
 28632:20160720:115719.147 for key [service.info[Power,startup]] received value [0]
 28632:20160720:115719.148 In process_value() key:'bcaves-sfb.bca.int:service.info[Power,startup]' value:'0'
 28632:20160720:115719.148 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:64/100
 28632:20160720:115719.149 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.150 End of send_buffer():SUCCEED
 28632:20160720:115719.150 buffer: new element 64
 28632:20160720:115719.151 End of process_value():SUCCEED
 28632:20160720:115719.152 In need_meta_update() key:service.info[Power,startup]
 28632:20160720:115719.152 End of need_meta_update():FAIL
 28632:20160720:115719.153 for key [service.info[Power,state]] received value [0]
 28632:20160720:115719.154 In process_value() key:'bcaves-sfb.bca.int:service.info[Power,state]' value:'0'
 28632:20160720:115719.154 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:65/100
 28632:20160720:115719.155 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.155 End of send_buffer():SUCCEED
 28632:20160720:115719.156 buffer: new element 65
 28632:20160720:115719.156 End of process_value():SUCCEED
 28632:20160720:115719.157 In need_meta_update() key:service.info[Power,state]
 28632:20160720:115719.157 End of need_meta_update():FAIL
 28632:20160720:115719.158 for key [service.info[ProfSvc,startup]] received value [0]
 28632:20160720:115719.159 In process_value() key:'bcaves-sfb.bca.int:service.info[ProfSvc,startup]' value:'0'
 28632:20160720:115719.159 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:66/100
 28632:20160720:115719.160 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.160 End of send_buffer():SUCCEED
 28632:20160720:115719.161 buffer: new element 66
 28632:20160720:115719.161 End of process_value():SUCCEED
 28632:20160720:115719.161 In need_meta_update() key:service.info[ProfSvc,startup]
 28632:20160720:115719.162 End of need_meta_update():FAIL
 28632:20160720:115719.163 for key [service.info[ProfSvc,state]] received value [0]
 28632:20160720:115719.163 In process_value() key:'bcaves-sfb.bca.int:service.info[ProfSvc,state]' value:'0'
 28632:20160720:115719.163 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:67/100
 28632:20160720:115719.164 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.164 End of send_buffer():SUCCEED
 28632:20160720:115719.165 buffer: new element 67
 28632:20160720:115719.165 End of process_value():SUCCEED
 28632:20160720:115719.166 In need_meta_update() key:service.info[ProfSvc,state]
 28632:20160720:115719.166 End of need_meta_update():FAIL
 28632:20160720:115719.167 for key [service.info[REPLICA,startup]] received value [1]
 28632:20160720:115719.168 In process_value() key:'bcaves-sfb.bca.int:service.info[REPLICA,startup]' value:'1'
 28632:20160720:115719.168 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:68/100
 28632:20160720:115719.168 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.169 End of send_buffer():SUCCEED
 28632:20160720:115719.169 buffer: new element 68
 28632:20160720:115719.170 End of process_value():SUCCEED
 28632:20160720:115719.170 In need_meta_update() key:service.info[REPLICA,startup]
 28632:20160720:115719.170 End of need_meta_update():FAIL
 28632:20160720:115719.171 for key [service.info[REPLICA,state]] received value [0]
 28632:20160720:115719.172 In process_value() key:'bcaves-sfb.bca.int:service.info[REPLICA,state]' value:'0'
 28632:20160720:115719.172 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:69/100
 28632:20160720:115719.173 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.173 End of send_buffer():SUCCEED
 28632:20160720:115719.174 buffer: new element 69
 28632:20160720:115719.174 End of process_value():SUCCEED
 28632:20160720:115719.182 In need_meta_update() key:service.info[REPLICA,state]
 28632:20160720:115719.182 End of need_meta_update():FAIL
 28632:20160720:115719.184 for key [service.info[RpcEptMapper,startup]] received value [0]
 28632:20160720:115719.184 In process_value() key:'bcaves-sfb.bca.int:service.info[RpcEptMapper,startup]' value:'0'
 28632:20160720:115719.185 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:70/100
 28632:20160720:115719.186 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.187 End of send_buffer():SUCCEED
 28632:20160720:115719.187 buffer: new element 70
 28632:20160720:115719.188 End of process_value():SUCCEED
 28632:20160720:115719.189 In need_meta_update() key:service.info[RpcEptMapper,startup]
 28632:20160720:115719.190 End of need_meta_update():FAIL
 28632:20160720:115719.191 for key [service.info[RpcEptMapper,state]] received value [0]
 28632:20160720:115719.191 In process_value() key:'bcaves-sfb.bca.int:service.info[RpcEptMapper,state]' value:'0'
 28632:20160720:115719.191 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:71/100
 28632:20160720:115719.192 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.193 End of send_buffer():SUCCEED
 28632:20160720:115719.193 buffer: new element 71
 28632:20160720:115719.193 End of process_value():SUCCEED
 28632:20160720:115719.194 In need_meta_update() key:service.info[RpcEptMapper,state]
 28632:20160720:115719.195 End of need_meta_update():FAIL
 28632:20160720:115719.196 for key [service.info[RpcSs,startup]] received value [0]
 28632:20160720:115719.196 In process_value() key:'bcaves-sfb.bca.int:service.info[RpcSs,startup]' value:'0'
 28632:20160720:115719.197 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:72/100
 28632:20160720:115719.198 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.198 End of send_buffer():SUCCEED
 28632:20160720:115719.199 buffer: new element 72
 28632:20160720:115719.199 End of process_value():SUCCEED
 28632:20160720:115719.200 In need_meta_update() key:service.info[RpcSs,startup]
 28632:20160720:115719.200 End of need_meta_update():FAIL
 28632:20160720:115719.201 for key [service.info[RpcSs,state]] received value [0]
 28632:20160720:115719.201 In process_value() key:'bcaves-sfb.bca.int:service.info[RpcSs,state]' value:'0'
 28632:20160720:115719.202 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:73/100
 28632:20160720:115719.202 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.202 End of send_buffer():SUCCEED
 28632:20160720:115719.203 buffer: new element 73
 28632:20160720:115719.203 End of process_value():SUCCEED
 28632:20160720:115719.204 In need_meta_update() key:service.info[RpcSs,state]
 28632:20160720:115719.204 End of need_meta_update():FAIL
 28632:20160720:115719.205 for key [service.info[RTCASMCU,startup]] received value [1]
 28632:20160720:115719.206 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCASMCU,startup]' value:'1'
 28632:20160720:115719.206 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:74/100
 28632:20160720:115719.207 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.207 End of send_buffer():SUCCEED
 28632:20160720:115719.207 buffer: new element 74
 28632:20160720:115719.208 End of process_value():SUCCEED
 28632:20160720:115719.209 In need_meta_update() key:service.info[RTCASMCU,startup]
 28632:20160720:115719.209 End of need_meta_update():FAIL
 28632:20160720:115719.210 for key [service.info[RTCASMCU,state]] received value [0]
 28632:20160720:115719.210 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCASMCU,state]' value:'0'
 28632:20160720:115719.211 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:75/100
 28632:20160720:115719.211 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.212 End of send_buffer():SUCCEED
 28632:20160720:115719.212 buffer: new element 75
 28632:20160720:115719.214 End of process_value():SUCCEED
 28632:20160720:115719.214 In need_meta_update() key:service.info[RTCASMCU,state]
 28632:20160720:115719.214 End of need_meta_update():FAIL
 28632:20160720:115719.215 for key [service.info[RTCATS,startup]] received value [1]
 28632:20160720:115719.216 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCATS,startup]' value:'1'
 28632:20160720:115719.216 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:76/100
 28632:20160720:115719.217 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.217 End of send_buffer():SUCCEED
 28632:20160720:115719.217 buffer: new element 76
 28632:20160720:115719.218 End of process_value():SUCCEED
 28632:20160720:115719.219 In need_meta_update() key:service.info[RTCATS,startup]
 28632:20160720:115719.219 End of need_meta_update():FAIL
 28632:20160720:115719.220 for key [service.info[RTCATS,state]] received value [0]
 28632:20160720:115719.221 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCATS,state]' value:'0'
 28632:20160720:115719.221 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:77/100
 28632:20160720:115719.222 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.222 End of send_buffer():SUCCEED
 28632:20160720:115719.223 buffer: new element 77
 28632:20160720:115719.223 End of process_value():SUCCEED
 28632:20160720:115719.224 In need_meta_update() key:service.info[RTCATS,state]
 28632:20160720:115719.224 End of need_meta_update():FAIL
 28632:20160720:115719.225 for key [service.info[RTCAVMCU,startup]] received value [1]
 28632:20160720:115719.226 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCAVMCU,startup]' value:'1'
 28632:20160720:115719.226 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:78/100
 28632:20160720:115719.227 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.227 End of send_buffer():SUCCEED
 28632:20160720:115719.227 buffer: new element 78
 28632:20160720:115719.228 End of process_value():SUCCEED
 28632:20160720:115719.228 In need_meta_update() key:service.info[RTCAVMCU,startup]
 28632:20160720:115719.229 End of need_meta_update():FAIL
 28632:20160720:115719.230 for key [service.info[RTCAVMCU,state]] received value [0]
 28632:20160720:115719.230 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCAVMCU,state]' value:'0'
 28632:20160720:115719.231 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:79/100
 28632:20160720:115719.231 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.232 End of send_buffer():SUCCEED
 28632:20160720:115719.232 buffer: new element 79
 28632:20160720:115719.233 End of process_value():SUCCEED
 28632:20160720:115719.233 In need_meta_update() key:service.info[RTCAVMCU,state]
 28632:20160720:115719.233 End of need_meta_update():FAIL
 28632:20160720:115719.235 for key [service.info[RTCCAA,startup]] received value [1]
 28632:20160720:115719.235 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCCAA,startup]' value:'1'
 28632:20160720:115719.235 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:80/100
 28632:20160720:115719.236 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.236 End of send_buffer():SUCCEED
 28632:20160720:115719.237 buffer: new element 80
 28632:20160720:115719.237 End of process_value():SUCCEED
 28632:20160720:115719.238 In need_meta_update() key:service.info[RTCCAA,startup]
 28632:20160720:115719.238 End of need_meta_update():FAIL
 28632:20160720:115719.239 for key [service.info[RTCCAA,state]] received value [0]
 28632:20160720:115719.239 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCCAA,state]' value:'0'
 28632:20160720:115719.240 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:81/100
 28632:20160720:115719.240 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.241 End of send_buffer():SUCCEED
 28632:20160720:115719.241 buffer: new element 81
 28632:20160720:115719.242 End of process_value():SUCCEED
 28632:20160720:115719.242 In need_meta_update() key:service.info[RTCCAA,state]
 28632:20160720:115719.242 End of need_meta_update():FAIL
 28632:20160720:115719.244 for key [service.info[RTCCAS,startup]] received value [1]
 28632:20160720:115719.245 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCCAS,startup]' value:'1'
 28632:20160720:115719.245 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:82/100
 28632:20160720:115719.246 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.246 End of send_buffer():SUCCEED
 28632:20160720:115719.247 buffer: new element 82
 28632:20160720:115719.247 End of process_value():SUCCEED
 28632:20160720:115719.248 In need_meta_update() key:service.info[RTCCAS,startup]
 28632:20160720:115719.248 End of need_meta_update():FAIL
 28632:20160720:115719.249 for key [service.info[RTCCAS,state]] received value [0]
 28632:20160720:115719.250 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCCAS,state]' value:'0'
 28632:20160720:115719.250 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:83/100
 28632:20160720:115719.251 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.251 End of send_buffer():SUCCEED
 28632:20160720:115719.251 buffer: new element 83
 28632:20160720:115719.252 End of process_value():SUCCEED
 28632:20160720:115719.252 In need_meta_update() key:service.info[RTCCAS,state]
 28632:20160720:115719.253 End of need_meta_update():FAIL
 28632:20160720:115719.254 for key [service.info[RTCCLSAGT,startup]] received value [1]
 28632:20160720:115719.254 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCCLSAGT,startup]' value:'1'
 28632:20160720:115719.255 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:84/100
 28632:20160720:115719.255 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.256 End of send_buffer():SUCCEED
 28632:20160720:115719.256 buffer: new element 84
 28632:20160720:115719.257 End of process_value():SUCCEED
 28632:20160720:115719.257 In need_meta_update() key:service.info[RTCCLSAGT,startup]
 28632:20160720:115719.257 End of need_meta_update():FAIL
 28632:20160720:115719.258 for key [service.info[RTCCLSAGT,state]] received value [0]
 28632:20160720:115719.259 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCCLSAGT,state]' value:'0'
 28632:20160720:115719.259 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:85/100
 28632:20160720:115719.260 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.260 End of send_buffer():SUCCEED
 28632:20160720:115719.260 buffer: new element 85
 28632:20160720:115719.261 End of process_value():SUCCEED
 28632:20160720:115719.261 In need_meta_update() key:service.info[RTCCLSAGT,state]
 28632:20160720:115719.262 End of need_meta_update():FAIL
 28632:20160720:115719.263 for key [service.info[RTCCPS,startup]] received value [1]
 28632:20160720:115719.263 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCCPS,startup]' value:'1'
 28632:20160720:115719.264 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:86/100
 28632:20160720:115719.265 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.265 End of send_buffer():SUCCEED
 28632:20160720:115719.266 buffer: new element 86
 28632:20160720:115719.266 End of process_value():SUCCEED
 28632:20160720:115719.267 In need_meta_update() key:service.info[RTCCPS,startup]
 28632:20160720:115719.267 End of need_meta_update():FAIL
 28632:20160720:115719.268 for key [service.info[RTCCPS,state]] received value [0]
 28632:20160720:115719.268 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCCPS,state]' value:'0'
 28632:20160720:115719.269 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:87/100
 28632:20160720:115719.269 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.270 End of send_buffer():SUCCEED
 28632:20160720:115719.270 buffer: new element 87
 28632:20160720:115719.270 End of process_value():SUCCEED
 28632:20160720:115719.271 In need_meta_update() key:service.info[RTCCPS,state]
 28632:20160720:115719.271 End of need_meta_update():FAIL
 28632:20160720:115719.273 for key [service.info[RTCDATAMCU,startup]] received value [1]
 28632:20160720:115719.273 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCDATAMCU,startup]' value:'1'
 28632:20160720:115719.273 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:88/100
 28632:20160720:115719.274 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.274 End of send_buffer():SUCCEED
 28632:20160720:115719.275 buffer: new element 88
 28632:20160720:115719.275 End of process_value():SUCCEED
 28632:20160720:115719.276 In need_meta_update() key:service.info[RTCDATAMCU,startup]
 28632:20160720:115719.276 End of need_meta_update():FAIL
 28632:20160720:115719.277 for key [service.info[RTCDATAMCU,state]] received value [0]
 28632:20160720:115719.278 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCDATAMCU,state]' value:'0'
 28632:20160720:115719.278 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:89/100
 28632:20160720:115719.278 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.279 End of send_buffer():SUCCEED
 28632:20160720:115719.279 buffer: new element 89
 28632:20160720:115719.280 End of process_value():SUCCEED
 28632:20160720:115719.280 In need_meta_update() key:service.info[RTCDATAMCU,state]
 28632:20160720:115719.281 End of need_meta_update():FAIL
 28632:20160720:115719.282 for key [service.info[RTCHA,startup]] received value [1]
 28632:20160720:115719.282 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCHA,startup]' value:'1'
 28632:20160720:115719.283 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:90/100
 28632:20160720:115719.283 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.283 End of send_buffer():SUCCEED
 28632:20160720:115719.284 buffer: new element 90
 28632:20160720:115719.284 End of process_value():SUCCEED
 28632:20160720:115719.285 In need_meta_update() key:service.info[RTCHA,startup]
 28632:20160720:115719.285 End of need_meta_update():FAIL
 28632:20160720:115719.286 for key [service.info[RTCHA,state]] received value [0]
 28632:20160720:115719.286 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCHA,state]' value:'0'
 28632:20160720:115719.287 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:91/100
 28632:20160720:115719.287 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.287 End of send_buffer():SUCCEED
 28632:20160720:115719.288 buffer: new element 91
 28632:20160720:115719.288 End of process_value():SUCCEED
 28632:20160720:115719.289 In need_meta_update() key:service.info[RTCHA,state]
 28632:20160720:115719.289 End of need_meta_update():FAIL
 28632:20160720:115719.290 for key [service.info[RTCIMMCU,startup]] received value [1]
 28632:20160720:115719.291 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCIMMCU,startup]' value:'1'
 28632:20160720:115719.291 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:92/100
 28632:20160720:115719.292 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.293 End of send_buffer():SUCCEED
 28632:20160720:115719.293 buffer: new element 92
 28632:20160720:115719.294 End of process_value():SUCCEED
 28632:20160720:115719.294 In need_meta_update() key:service.info[RTCIMMCU,startup]
 28632:20160720:115719.295 End of need_meta_update():FAIL
 28632:20160720:115719.296 for key [service.info[RTCIMMCU,state]] received value [0]
 28632:20160720:115719.297 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCIMMCU,state]' value:'0'
 28632:20160720:115719.297 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:93/100
 28632:20160720:115719.298 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.299 End of send_buffer():SUCCEED
 28632:20160720:115719.299 buffer: new element 93
 28632:20160720:115719.300 End of process_value():SUCCEED
 28632:20160720:115719.300 In need_meta_update() key:service.info[RTCIMMCU,state]
 28632:20160720:115719.301 End of need_meta_update():FAIL
 28632:20160720:115719.302 for key [service.info[RTCRGS,startup]] received value [1]
 28632:20160720:115719.303 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCRGS,startup]' value:'1'
 28632:20160720:115719.304 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:94/100
 28632:20160720:115719.304 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.305 End of send_buffer():SUCCEED
 28632:20160720:115719.306 buffer: new element 94
 28632:20160720:115719.306 End of process_value():SUCCEED
 28632:20160720:115719.307 In need_meta_update() key:service.info[RTCRGS,startup]
 28632:20160720:115719.307 End of need_meta_update():FAIL
 28632:20160720:115719.308 for key [service.info[RTCRGS,state]] received value [0]
 28632:20160720:115719.308 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCRGS,state]' value:'0'
 28632:20160720:115719.309 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:95/100
 28632:20160720:115719.310 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.310 End of send_buffer():SUCCEED
 28632:20160720:115719.310 buffer: new element 95
 28632:20160720:115719.311 End of process_value():SUCCEED
 28632:20160720:115719.311 In need_meta_update() key:service.info[RTCRGS,state]
 28632:20160720:115719.311 End of need_meta_update():FAIL
 28632:20160720:115719.313 for key [service.info[RtcSrv,startup]] received value [1]
 28632:20160720:115719.313 In process_value() key:'bcaves-sfb.bca.int:service.info[RtcSrv,startup]' value:'1'
 28632:20160720:115719.313 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:96/100
 28632:20160720:115719.314 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.314 End of send_buffer():SUCCEED
 28632:20160720:115719.315 buffer: new element 96
 28632:20160720:115719.315 End of process_value():SUCCEED
 28632:20160720:115719.315 In need_meta_update() key:service.info[RtcSrv,startup]
 28632:20160720:115719.316 End of need_meta_update():FAIL
 28632:20160720:115719.317 for key [service.info[RtcSrv,state]] received value [0]
 28632:20160720:115719.317 In process_value() key:'bcaves-sfb.bca.int:service.info[RtcSrv,state]' value:'0'
 28632:20160720:115719.317 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:97/100
 28632:20160720:115719.318 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.318 End of send_buffer():SUCCEED
 28632:20160720:115719.319 buffer: new element 97
 28632:20160720:115719.319 End of process_value():SUCCEED
 28632:20160720:115719.320 In need_meta_update() key:service.info[RtcSrv,state]
 28632:20160720:115719.320 End of need_meta_update():FAIL
 28632:20160720:115719.321 for key [service.info[RTCXMPPTGW,startup]] received value [1]
 28632:20160720:115719.321 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCXMPPTGW,startup]' value:'1'
 28632:20160720:115719.322 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:98/100
 28632:20160720:115719.322 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.323 End of send_buffer():SUCCEED
 28632:20160720:115719.323 buffer: new element 98
 28632:20160720:115719.324 End of process_value():SUCCEED
 28632:20160720:115719.324 In need_meta_update() key:service.info[RTCXMPPTGW,startup]
 28632:20160720:115719.325 End of need_meta_update():FAIL
 28632:20160720:115719.325 for key [service.info[RTCXMPPTGW,state]] received value [0]
 28632:20160720:115719.326 In process_value() key:'bcaves-sfb.bca.int:service.info[RTCXMPPTGW,state]' value:'0'
 28632:20160720:115719.326 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:99/100
 28632:20160720:115719.326 send_buffer() now:1469008639 lastsent:1469008638 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115719.327 End of send_buffer():SUCCEED
 28632:20160720:115719.327 buffer: new element 99
 28632:20160720:115719.328 End of process_value():SUCCEED
 28632:20160720:115719.328 In need_meta_update() key:service.info[RTCXMPPTGW,state]
 28632:20160720:115719.329 End of need_meta_update():FAIL
 28632:20160720:115719.330 for key [service.info[SamSs,startup]] received value [0]
 28632:20160720:115719.330 In process_value() key:'bcaves-sfb.bca.int:service.info[SamSs,startup]' value:'0'
 28632:20160720:115719.331 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:100/100
 28632:20160720:115719.346 JSON before sending [{"request":"agent data","data":[{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\510(Intel(R) 82574L Gigabit Network Connection)\\898\",300]","value":"4103.517884","clock":1469008638,"ns":759732095},{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\700(_Total)\\702\",60]","value":"0.308621","clock":1469008638,"ns":769943499},{"host":"bcaves-sfb.bca.int","key":"proc.num[]","value":"85","clock":1469008638,"ns":782829843},{"host":"bcaves-sfb.bca.int","key":"service.discovery","value":"{\"data\":[{\"{#SERVICE.NAME}\":\"AeLookupSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Application Experience\",\"{#SERVICE.DESCRIPTION}\":\"Processes application compatibility cache requests for applications as they are launched\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"ALG\",\"{#SERVICE.DISPLAYNAME}\":\"Application Layer Gateway Service\",\"{#SERVICE.DESCRIPTION}\":\"Provides support for 3rd party protocol plug-ins for Internet Connection Sharing\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\alg.exe\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"AppHostSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Application Host Helper Service\",\"{#SERVICE.DESCRIPTION}\":\"Provides administrative services for IIS, for example configuration history and Application Pool account mapping. If this service is stopped, configuration history and locking down files or directories with Application Pool specific Access Control Entries will not work.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k apphost\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"AppIDSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Application Identity\",\"{#SERVICE.DESCRIPTION}\":\"Determines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceNetworkRestricted\",\"{#SERVICE.USER}\":\"NT Authority\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Appinfo\",\"{#SERVICE.DISPLAYNAME}\":\"Application Information\",\"{#SERVICE.DESCRIPTION}\":\"Facilitates the running of interactive applications with additional administrative privileges.  If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"AppMgmt\",\"{#SERVICE.DISPLAYNAME}\":\"Application Management\",\"{#SERVICE.DESCRIPTION}\":\"Processes installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"AppReadiness\",\"{#SERVICE.DISPLAYNAME}\":\"App Readiness\",\"{#SERVICE.DESCRIPTION}\":\"Gets apps ready for use the first time a user signs in to this PC and when adding new apps.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k AppReadiness\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"AppXSvc\",\"{#SERVICE.DISPLAYNAME}\":\"AppX Deployment Service (AppXSVC)\",\"{#SERVICE.DESCRIPTION}\":\"Provides infrastructure support for deploying Store applications. This service is started on demand and if disabled Store applications will not be deployed to the system, and may not function properly.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k wsappx\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"aspnet_state\",\"{#SERVICE.DISPLAYNAME}\":\"ASP.NET State Service\",\"{#SERVICE.DESCRIPTION}\":\"Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\Microsoft.NET\\\\Framework64\\\\v4.0.30319\\\\aspnet_state.exe\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"AudioEndpointBuilder\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Audio Endpoint Builder\",\"{#SERVICE.DESCRIPTION}\":\"Manages audio devices for the Windows Audio service.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Audiosrv\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Audio\",\"{#SERVICE.DESCRIPTION}\":\"Manages audio for Windows-based programs.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalServiceNetworkRestricted\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"AxInstSV\",\"{#SERVICE.DISPLAYNAME}\":\"ActiveX Installer (AxInstSV)\",\"{#SERVICE.DESCRIPTION}\":\"Provides User Account Control validation for the installation of ActiveX controls from the Internet and enables management of ActiveX control installation based on Group Policy settings. This service is started on demand and if disabled the installation of ActiveX controls will behave according to default browser settings.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k AxInstSVGroup\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"BFE\",\"{#SERVICE.DISPLAYNAME}\":\"Base Filtering Engine\",\"{#SERVICE.DESCRIPTION}\":\"The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceNoNetwork\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"BITS\",\"{#SERVICE.DISPLAYNAME}\":\"Background Intelligent Transfer Service\",\"{#SERVICE.DESCRIPTION}\":\"Transfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"BrokerInfrastructure\",\"{#SERVICE.DISPLAYNAME}\":\"Background Tasks Infrastructure Service\",\"{#SERVICE.DESCRIPTION}\":\"Windows infrastructure service that controls which background tasks can run on the system.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k DcomLaunch\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"Browser\",\"{#SERVICE.DISPLAYNAME}\":\"Computer Browser\",\"{#SERVICE.DESCRIPTION}\":\"Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"c2wts\",\"{#SERVICE.DISPLAYNAME}\":\"Claims to Windows Token Service\",\"{#SERVICE.DESCRIPTION}\":\"Service to convert claims based identities to windows identities\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Program Files\\\\Windows Identity Foundation\\\\v3.5\\\\c2wtshost.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"CertPropSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Certificate Propagation\",\"{#SERVICE.DESCRIPTION}\":\"Copies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"COMSysApp\",\"{#SERVICE.DISPLAYNAME}\":\"COM+ System Application\",\"{#SERVICE.DESCRIPTION}\":\"Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"CryptSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Cryptographic Services\",\"{#SERVICE.DESCRIPTION}\":\"Provides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k NetworkService\",\"{#SERVICE.USER}\":\"NT Authority\\\\NetworkService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"CscService\",\"{#SERVICE.DISPLAYNAME}\":\"Offline Files\",\"{#SERVICE.DESCRIPTION}\":\"The Offline Files service performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of the public API, and dispatches interesting events to those interested in Offline Files activities and changes in cache state.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"DcomLaunch\",\"{#SERVICE.DISPLAYNAME}\":\"DCOM Server Process Launcher\",\"{#SERVICE.DESCRIPTION}\":\"The DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k DcomLaunch\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"defragsvc\",\"{#SERVICE.DISPLAYNAME}\":\"Optimize drives\",\"{#SERVICE.DESCRIPTION}\":\"Helps the computer run more efficiently by optimizing files on storage drives.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k defragsvc\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"DeviceAssociationService\",\"{#SERVICE.DISPLAYNAME}\":\"Device Association Service\",\"{#SERVICE.DESCRIPTION}\":\"Enables pairing between the system and wired or wireless devices.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"DeviceInstall\",\"{#SERVICE.DISPLAYNAME}\":\"Device Install Service\",\"{#SERVICE.DESCRIPTION}\":\"Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k DcomLaunch\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Dhcp\",\"{#SERVICE.DISPLAYNAME}\":\"DHCP Client\",\"{#SERVICE.DESCRIPTION}\":\"Registers and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceNetworkRestricted\",\"{#SERVICE.USER}\":\"NT Authority\\\\LocalService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"DiagTrack\",\"{#SERVICE.DISPLAYNAME}\":\"Diagnostics Tracking Service\",\"{#SERVICE.DESCRIPTION}\":\"The Diagnostics Tracking Service enables data collection about functional issues in Windows components.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k utcsvc\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"Dnscache\",\"{#SERVICE.DISPLAYNAME}\":\"DNS Client\",\"{#SERVICE.DESCRIPTION}\":\"The DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computer's name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k NetworkService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"dot3svc\",\"{#SERVICE.DISPLAYNAME}\":\"Wired AutoConfig\",\"{#SERVICE.DESCRIPTION}\":\"The Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"DPS\",\"{#SERVICE.DISPLAYNAME}\":\"Diagnostic Policy Service\",\"{#SERVICE.DESCRIPTION}\":\"The Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components.  If this service is stopped, diagnostics will no longer function.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalServiceNoNetwork\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"DsmSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Device Setup Manager\",\"{#SERVICE.DESCRIPTION}\":\"Enables the detection, download and installation of device-related software. If this service is disabled, devices may be configured with outdated software, and may not work correctly.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Eaphost\",\"{#SERVICE.DISPLAYNAME}\":\"Extensible Authentication Protocol\",\"{#SERVICE.DESCRIPTION}\":\"The Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP).  EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process.  If you disable this service, this computer is prevented from accessing networks that require EAP authentication.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"EFS\",\"{#SERVICE.DISPLAYNAME}\":\"Encrypting File System (EFS)\",\"{#SERVICE.DESCRIPTION}\":\"Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\lsass.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"EventLog\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Event Log\",\"{#SERVICE.DESCRIPTION}\":\"This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalServiceNetworkRestricted\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"EventSystem\",\"{#SERVICE.DISPLAYNAME}\":\"COM+ Event System\",\"{#SERVICE.DESCRIPTION}\":\"Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"FabricHostSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Fabric Host Service\",\"{#SERVICE.DESCRIPTION}\":\"This service controls Windows Fabric process on this machine.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Windows Fabric\\\\bin\\\\FabricHost.exe\\\"\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"fdPHost\",\"{#SERVICE.DISPLAYNAME}\":\"Function Discovery Provider Host\",\"{#SERVICE.DESCRIPTION}\":\"The FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services – Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"FDResPub\",\"{#SERVICE.DISPLAYNAME}\":\"Function Discovery Resource Publication\",\"{#SERVICE.DESCRIPTION}\":\"Publishes this computer and resources attached to this computer so they can be discovered over the network.  If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceAndNoImpersonation\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"FontCache\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Font Cache Service\",\"{#SERVICE.DESCRIPTION}\":\"Optimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"FontCache3.0.0.0\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Presentation Foundation Font Cache 3.0.0.0\",\"{#SERVICE.DESCRIPTION}\":\"Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\Microsoft.Net\\\\Framework64\\\\v3.0\\\\WPF\\\\PresentationFontCache.exe\",\"{#SERVICE.USER}\":\"NT Authority\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"FTA\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server File Transfer Agent\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server File Transfer Agent\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\File Transfer Agent\\\\FileTransferAgent.exe\\\" -s \",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"gpsvc\",\"{#SERVICE.DISPLAYNAME}\":\"Group Policy Client\",\"{#SERVICE.DESCRIPTION}\":\"The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is disabled.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"hidserv\",\"{#SERVICE.DISPLAYNAME}\":\"Human Interface Device Service\",\"{#SERVICE.DESCRIPTION}\":\"Activates and maintains the use of hot buttons on keyboards, remote controls, and other multimedia devices. It is recommended that you keep this service running.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"hkmsvc\",\"{#SERVICE.DISPLAYNAME}\":\"Health Key and Certificate Management\",\"{#SERVICE.DESCRIPTION}\":\"Provides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this service\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"IEEtwCollectorService\",\"{#SERVICE.DISPLAYNAME}\":\"Internet Explorer ETW Collector Service\",\"{#SERVICE.DESCRIPTION}\":\"ETW Collector Service for Internet Explorer. When running, this service collects real time ETW events and processes them.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\IEEtwCollector.exe /V\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"IISADMIN\",\"{#SERVICE.DISPLAYNAME}\":\"IIS Admin Service\",\"{#SERVICE.DESCRIPTION}\":\"Enables this server to administer the IIS metabase. The IIS metabase stores configuration for the SMTP and FTP services. If this service is stopped, the server will be unable to configure SMTP or FTP. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\inetsrv\\\\inetinfo.exe\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"IKEEXT\",\"{#SERVICE.DISPLAYNAME}\":\"IKE and AuthIP IPsec Keying Modules\",\"{#SERVICE.DESCRIPTION}\":\"The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"iphlpsvc\",\"{#SERVICE.DISPLAYNAME}\":\"IP Helper\",\"{#SERVICE.DESCRIPTION}\":\"Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k NetSvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"KeyIso\",\"{#SERVICE.DISPLAYNAME}\":\"CNG Key Isolation\",\"{#SERVICE.DESCRIPTION}\":\"The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\lsass.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"KPSSVC\",\"{#SERVICE.DISPLAYNAME}\":\"KDC Proxy Server service (KPS)\",\"{#SERVICE.DESCRIPTION}\":\"KDC Proxy Server service runs on edge servers to proxy Kerberos protocol messages to domain controllers on the corporate network.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k KpsSvcGroup\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"KtmRm\",\"{#SERVICE.DISPLAYNAME}\":\"KtmRm for Distributed Transaction Coordinator\",\"{#SERVICE.DESCRIPTION}\":\"Coordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k NetworkServiceAndNoImpersonation\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"LanmanServer\",\"{#SERVICE.DISPLAYNAME}\":\"Server\",\"{#SERVICE.DESCRIPTION}\":\"Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"LanmanWorkstation\",\"{#SERVICE.DISPLAYNAME}\":\"Workstation\",\"{#SERVICE.DESCRIPTION}\":\"Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k NetworkService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"lltdsvc\",\"{#SERVICE.DISPLAYNAME}\":\"Link-Layer Topology Discovery Mapper\",\"{#SERVICE.DESCRIPTION}\":\"Creates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device.  If this service is disabled, the Network Map will not function properly.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"lmhosts\",\"{#SERVICE.DISPLAYNAME}\":\"TCP/IP NetBIOS Helper\",\"{#SERVICE.DESCRIPTION}\":\"Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceNetworkRestricted\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"LSM\",\"{#SERVICE.DISPLAYNAME}\":\"Local Session Manager\",\"{#SERVICE.DESCRIPTION}\":\"Core Windows Service that manages local user sessions. Stopping or disabling this service will result in system instability.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k DcomLaunch\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"MASTER\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Master Replicator Agent\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Master Replicator Agent\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Master Replicator Agent\\\\MasterReplicatorAgent.exe\\\" -s\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"MMCSS\",\"{#SERVICE.DISPLAYNAME}\":\"Multimedia Class Scheduler\",\"{#SERVICE.DESCRIPTION}\":\"Enables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications.  If this service is stopped, individual tasks resort to their default priority.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"MpsSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Firewall\",\"{#SERVICE.DESCRIPTION}\":\"Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceNoNetwork\",\"{#SERVICE.USER}\":\"NT Authority\\\\LocalService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"MSDTC\",\"{#SERVICE.DISPLAYNAME}\":\"Distributed Transaction Coordinator\",\"{#SERVICE.DESCRIPTION}\":\"Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\msdtc.exe\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"MSiSCSI\",\"{#SERVICE.DISPLAYNAME}\":\"Microsoft iSCSI Initiator Service\",\"{#SERVICE.DESCRIPTION}\":\"Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"msiserver\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Installer\",\"{#SERVICE.DESCRIPTION}\":\"Adds, modifies, and removes applications provided as a Windows Installer (*.msi, *.msp) package. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\msiexec.exe /V\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"MSSQL$LYNCLOCAL\",\"{#SERVICE.DISPLAYNAME}\":\"SQL Server (LYNCLOCAL)\",\"{#SERVICE.DESCRIPTION}\":\"Provides storage, processing and controlled access of data, and rapid transaction processing.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Microsoft SQL Server\\\\MSSQL12.LYNCLOCAL\\\\MSSQL\\\\Binn\\\\sqlservr.exe\\\" -sLYNCLOCAL\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NETWORKSERVICE\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"MSSQL$RTC\",\"{#SERVICE.DISPLAYNAME}\":\"SQL Server (RTC)\",\"{#SERVICE.DESCRIPTION}\":\"Provides storage, processing and controlled access of data, and rapid transaction processing.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Microsoft SQL Server\\\\MSSQL12.RTC\\\\MSSQL\\\\Binn\\\\sqlservr.exe\\\" -sRTC\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NETWORKSERVICE\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"MSSQL$RTCLOCAL\",\"{#SERVICE.DISPLAYNAME}\":\"SQL Server (RTCLOCAL)\",\"{#SERVICE.DESCRIPTION}\":\"Provides storage, processing and controlled access of data, and rapid transaction processing.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Microsoft SQL Server\\\\MSSQL12.RTCLOCAL\\\\MSSQL\\\\Binn\\\\sqlservr.exe\\\" -sRTCLOCAL\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NETWORKSERVICE\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"napagent\",\"{#SERVICE.DISPLAYNAME}\":\"Network Access Protection Agent\",\"{#SERVICE.DESCRIPTION}\":\"The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k NetworkService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"NcaSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Network Connectivity Assistant\",\"{#SERVICE.DESCRIPTION}\":\"Provides DirectAccess status notification for UI components\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k NetSvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"NcbService\",\"{#SERVICE.DISPLAYNAME}\":\"Network Connection Broker\",\"{#SERVICE.DESCRIPTION}\":\"Brokers connections that allow Windows Store Apps to receive notifications from the internet.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Netlogon\",\"{#SERVICE.DISPLAYNAME}\":\"Netlogon\",\"{#SERVICE.DESCRIPTION}\":\"Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\lsass.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"Netman\",\"{#SERVICE.DISPLAYNAME}\":\"Network Connections\",\"{#SERVICE.DESCRIPTION}\":\"Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"netprofm\",\"{#SERVICE.DISPLAYNAME}\":\"Network List Service\",\"{#SERVICE.DESCRIPTION}\":\"Identifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"NetTcpPortSharing\",\"{#SERVICE.DISPLAYNAME}\":\"Net.Tcp Port Sharing Service\",\"{#SERVICE.DESCRIPTION}\":\"Provides ability to share TCP ports over the net.tcp protocol.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\Microsoft.NET\\\\Framework64\\\\v4.0.30319\\\\SMSvcHost.exe\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"NlaSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Network Location Awareness\",\"{#SERVICE.DESCRIPTION}\":\"Collects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k NetworkService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"nsi\",\"{#SERVICE.DISPLAYNAME}\":\"Network Store Interface Service\",\"{#SERVICE.DESCRIPTION}\":\"This service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT Authority\\\\LocalService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"PerfHost\",\"{#SERVICE.DISPLAYNAME}\":\"Performance Counter DLL Host\",\"{#SERVICE.DESCRIPTION}\":\"Enables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\SysWow64\\\\perfhost.exe\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"pla\",\"{#SERVICE.DISPLAYNAME}\":\"Performance Logs & Alerts\",\"{#SERVICE.DESCRIPTION}\":\"Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalServiceNoNetwork\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"PlugPlay\",\"{#SERVICE.DISPLAYNAME}\":\"Plug and Play\",\"{#SERVICE.DESCRIPTION}\":\"Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k DcomLaunch\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"PolicyAgent\",\"{#SERVICE.DISPLAYNAME}\":\"IPsec Policy Agent\",\"{#SERVICE.DESCRIPTION}\":\"Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection.  This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool \\\"netsh ipsec\\\".  If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec.  Also,remote management of Windows Firewall is not available when this service is stopped.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k NetworkServiceNetworkRestricted\",\"{#SERVICE.USER}\":\"NT Authority\\\\NetworkService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Power\",\"{#SERVICE.DISPLAYNAME}\":\"Power\",\"{#SERVICE.DESCRIPTION}\":\"Manages power policy and power policy notification delivery.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k DcomLaunch\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"PrintNotify\",\"{#SERVICE.DISPLAYNAME}\":\"Printer Extensions and Notifications\",\"{#SERVICE.DESCRIPTION}\":\"This service opens custom printer dialog boxes and handles notifications from a remote print server or a printer. If you turn off this service, you won’t be able to see printer extensions or notifications.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k print\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"ProfSvc\",\"{#SERVICE.DISPLAYNAME}\":\"User Profile Service\",\"{#SERVICE.DESCRIPTION}\":\"This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully sign in or sign out, apps might have problems getting to users' data, and components registered to receive profile event notifications won't receive them.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"RasAuto\",\"{#SERVICE.DISPLAYNAME}\":\"Remote Access Auto Connection Manager\",\"{#SERVICE.DESCRIPTION}\":\"Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"RasMan\",\"{#SERVICE.DISPLAYNAME}\":\"Remote Access Connection Manager\",\"{#SERVICE.DESCRIPTION}\":\"Manages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"RemoteAccess\",\"{#SERVICE.DISPLAYNAME}\":\"Routing and Remote Access\",\"{#SERVICE.DESCRIPTION}\":\"Offers routing services to businesses in local area and wide area network environments.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"RemoteRegistry\",\"{#SERVICE.DISPLAYNAME}\":\"Remote Registry\",\"{#SERVICE.DESCRIPTION}\":\"Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k localService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"REPLICA\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Replica Replicator Agent\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Replica Replicator Agent\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Server\\\\Replica Replicator Agent\\\\ReplicaReplicatorAgent.exe\\\" -s /replicaRootDir:C:\\\\RtcReplicaRoot\\\\ /sqlInstance:(local)\\\\rtclocal /sqlDatabase:xds\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"rpcapd\",\"{#SERVICE.DISPLAYNAME}\":\"Remote Packet Capture Protocol v.0 (experimental)\",\"{#SERVICE.DESCRIPTION}\":\"Allows to capture traffic on this machine from a remote machine.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files (x86)\\\\WinPcap\\\\rpcapd.exe\\\" -d -f \\\"C:\\\\Program Files (x86)\\\\WinPcap\\\\rpcapd.ini\\\"\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"RpcEptMapper\",\"{#SERVICE.DISPLAYNAME}\":\"RPC Endpoint Mapper\",\"{#SERVICE.DESCRIPTION}\":\"Resolves RPC interfaces identifiers to transport endpoints. If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k RPCSS\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"RpcLocator\",\"{#SERVICE.DISPLAYNAME}\":\"Remote Procedure Call (RPC) Locator\",\"{#SERVICE.DESCRIPTION}\":\"In Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\locator.exe\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"RpcSs\",\"{#SERVICE.DISPLAYNAME}\":\"Remote Procedure Call (RPC)\",\"{#SERVICE.DESCRIPTION}\":\"The RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k rpcss\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"RSoPProv\",\"{#SERVICE.DISPLAYNAME}\":\"Resultant Set of Policy Provider\",\"{#SERVICE.DESCRIPTION}\":\"Provides a network service that processes requests to simulate application of Group Policy settings for a target user or computer in various situations and computes the Resultant Set of Policy settings.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\RSoPProv.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"RTCASMCU\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Application Sharing\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Application Sharing\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\OCSMCU\\\\Application Sharing\\\\ASMCUSvc.exe\\\" \",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCATS\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Audio Test Service\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Audio Test Service\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Application Host\\\\OcsAppServerHost.exe\\\" RTCATS\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCAVMCU\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Audio/Video Conferencing\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Audio/Video Conferencing\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\OCSMCU\\\\AV Conferencing\\\\AVMCUSvc.exe\\\" \",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCCAA\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Conferencing Attendant\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Conferencing Attendant\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Application Host\\\\OcsAppServerHost.exe\\\" RTCCAA\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCCAS\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Conferencing Announcement\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Conferencing Announcement\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Application Host\\\\OcsAppServerHost.exe\\\" RTCCAS\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCCLSAGT\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Centralized Logging Service Agent\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Centralized Logging Service Agent\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Common Files\\\\Skype for Business Server 2015\\\\ClsAgent\\\\ClsAgent.exe\\\"\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCCPS\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Call Park\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Call Park\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Application Host\\\\OcsAppServerHost.exe\\\" RTCCPS\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCDATAMCU\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Web Conferencing\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Web Conferencing\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Web Conferencing\\\\DataMCUSvc.exe\\\"\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCHA\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Health Agent\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Health Agent\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Server\\\\Health Agent\\\\HealthAgent.exe\\\"\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCIMMCU\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server IM Conferencing\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server IM Conferencing\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\OCSMCU\\\\IM Conferencing\\\\IMMCUSvc.exe\\\"\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCRGS\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Response Group\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Response Group\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Application Host\\\\OcsAppServerHost.exe\\\" RTCRGS\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RtcSrv\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server Front-End\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server Front-End\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Server\\\\Core\\\\RTCSrv.exe\\\"\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"RTCXMPPTGW\",\"{#SERVICE.DISPLAYNAME}\":\"Skype for Business Server XMPP Translating Gateway\",\"{#SERVICE.DESCRIPTION}\":\"Skype for Business Server XMPP Translating Gateway\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Skype for Business Server 2015\\\\Xmpp\\\\XmppTGW.exe\\\"\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"sacsvr\",\"{#SERVICE.DISPLAYNAME}\":\"Special Administration Console Helper\",\"{#SERVICE.DESCRIPTION}\":\"Allows administrators to remotely access a command prompt using Emergency Management Services.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"SamSs\",\"{#SERVICE.DISPLAYNAME}\":\"Security Accounts Manager\",\"{#SERVICE.DESCRIPTION}\":\"The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests.  Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\lsass.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"SCardSvr\",\"{#SERVICE.DISPLAYNAME}\":\"Smart Card\",\"{#SERVICE.DESCRIPTION}\":\"Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceAndNoImpersonation\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"ScDeviceEnum\",\"{#SERVICE.DISPLAYNAME}\":\"Smart Card Device Enumeration Service\",\"{#SERVICE.DESCRIPTION}\":\"Creates software device nodes for all smart card readers accessible to a given session. If this service is disabled, WinRT APIs will not be able to enumerate smart card readers.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Schedule\",\"{#SERVICE.DISPLAYNAME}\":\"Task Scheduler\",\"{#SERVICE.DESCRIPTION}\":\"Enables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"SCPolicySvc\",\"{#SERVICE.DISPLAYNAME}\":\"Smart Card Removal Policy\",\"{#SERVICE.DESCRIPTION}\":\"Allows the system to be configured to lock the user desktop upon smart card removal.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"seclogon\",\"{#SERVICE.DISPLAYNAME}\":\"Secondary Logon\",\"{#SERVICE.DESCRIPTION}\":\"Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"SENS\",\"{#SERVICE.DISPLAYNAME}\":\"System Event Notification Service\",\"{#SERVICE.DESCRIPTION}\":\"Monitors system events and notifies subscribers to COM+ Event System of these events.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"SessionEnv\",\"{#SERVICE.DISPLAYNAME}\":\"Remote Desktop Configuration\",\"{#SERVICE.DESCRIPTION}\":\"Remote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"SharedAccess\",\"{#SERVICE.DISPLAYNAME}\":\"Internet Connection Sharing (ICS)\",\"{#SERVICE.DESCRIPTION}\":\"Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"ShellHWDetection\",\"{#SERVICE.DISPLAYNAME}\":\"Shell Hardware Detection\",\"{#SERVICE.DESCRIPTION}\":\"Provides notifications for AutoPlay hardware events.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"smphost\",\"{#SERVICE.DISPLAYNAME}\":\"Microsoft Storage Spaces SMP\",\"{#SERVICE.DESCRIPTION}\":\"Host service for the Microsoft Storage Spaces management provider. If this service is stopped or disabled, Storage Spaces cannot be managed.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k smphost\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"SNMPTRAP\",\"{#SERVICE.DISPLAYNAME}\":\"SNMP Trap\",\"{#SERVICE.DESCRIPTION}\":\"Receives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\snmptrap.exe\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Spooler\",\"{#SERVICE.DISPLAYNAME}\":\"Print Spooler\",\"{#SERVICE.DESCRIPTION}\":\"This service spools print jobs and handles interaction with the printer.  If you turn off this service, you won’t be able to print or see your printers.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\spoolsv.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"sppsvc\",\"{#SERVICE.DISPLAYNAME}\":\"Software Protection\",\"{#SERVICE.DESCRIPTION}\":\"Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\sppsvc.exe\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"SQLAgent$LYNCLOCAL\",\"{#SERVICE.DISPLAYNAME}\":\"SQL Server Agent (LYNCLOCAL)\",\"{#SERVICE.DESCRIPTION}\":\"Executes jobs, monitors SQL Server, fires alerts, and allows automation of some administrative tasks.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Microsoft SQL Server\\\\MSSQL12.LYNCLOCAL\\\\MSSQL\\\\Binn\\\\SQLAGENT.EXE\\\" -i LYNCLOCAL\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NETWORKSERVICE\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"SQLAgent$RTC\",\"{#SERVICE.DISPLAYNAME}\":\"SQL Server Agent (RTC)\",\"{#SERVICE.DESCRIPTION}\":\"Executes jobs, monitors SQL Server, fires alerts, and allows automation of some administrative tasks.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Microsoft SQL Server\\\\MSSQL12.RTC\\\\MSSQL\\\\Binn\\\\SQLAGENT.EXE\\\" -i RTC\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NETWORKSERVICE\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"SQLAgent$RTCLOCAL\",\"{#SERVICE.DISPLAYNAME}\":\"SQL Server Agent (RTCLOCAL)\",\"{#SERVICE.DESCRIPTION}\":\"Executes jobs, monitors SQL Server, fires alerts, and allows automation of some administrative tasks.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Microsoft SQL Server\\\\MSSQL12.RTCLOCAL\\\\MSSQL\\\\Binn\\\\SQLAGENT.EXE\\\" -i RTCLOCAL\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NETWORKSERVICE\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"SQLBrowser\",\"{#SERVICE.DISPLAYNAME}\":\"SQL Server Browser\",\"{#SERVICE.DESCRIPTION}\":\"Provides SQL Server connection information to client computers.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files (x86)\\\\Microsoft SQL Server\\\\90\\\\Shared\\\\sqlbrowser.exe\\\"\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LOCALSERVICE\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"SQLWriter\",\"{#SERVICE.DISPLAYNAME}\":\"SQL Server VSS Writer\",\"{#SERVICE.DESCRIPTION}\":\"Provides the interface to backup/restore Microsoft SQL server through the Windows VSS infrastructure.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\Microsoft SQL Server\\\\90\\\\Shared\\\\sqlwriter.exe\\\"\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"SSDPSRV\",\"{#SERVICE.DISPLAYNAME}\":\"SSDP Discovery\",\"{#SERVICE.DESCRIPTION}\":\"Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceAndNoImpersonation\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"SstpSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Secure Socket Tunneling Protocol Service\",\"{#SERVICE.DESCRIPTION}\":\"Provides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT Authority\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"stisvc\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Image Acquisition (WIA)\",\"{#SERVICE.DESCRIPTION}\":\"Provides image acquisition services for scanners and cameras\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k imgsvc\",\"{#SERVICE.USER}\":\"NT Authority\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"svsvc\",\"{#SERVICE.DISPLAYNAME}\":\"Spot Verifier\",\"{#SERVICE.DESCRIPTION}\":\"Verifies potential file system corruptions.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"swprv\",\"{#SERVICE.DISPLAYNAME}\":\"Microsoft Software Shadow Copy Provider\",\"{#SERVICE.DESCRIPTION}\":\"Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k swprv\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"SysMain\",\"{#SERVICE.DISPLAYNAME}\":\"Superfetch\",\"{#SERVICE.DESCRIPTION}\":\"Maintains and improves system performance over time.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"SystemEventsBroker\",\"{#SERVICE.DISPLAYNAME}\":\"System Events Broker\",\"{#SERVICE.DESCRIPTION}\":\"Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k DcomLaunch\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"TabletInputService\",\"{#SERVICE.DISPLAYNAME}\":\"Touch Keyboard and Handwriting Panel Service\",\"{#SERVICE.DESCRIPTION}\":\"Enables Touch Keyboard and Handwriting Panel pen and ink functionality\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k TabletInputServiceGroup\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"TapiSrv\",\"{#SERVICE.DISPLAYNAME}\":\"Telephony\",\"{#SERVICE.DESCRIPTION}\":\"Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k tapisrv\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"TermService\",\"{#SERVICE.DISPLAYNAME}\":\"Remote Desktop Services\",\"{#SERVICE.DESCRIPTION}\":\"Allows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service.  To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k termsvcs\",\"{#SERVICE.USER}\":\"NT Authority\\\\NetworkService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Themes\",\"{#SERVICE.DISPLAYNAME}\":\"Themes\",\"{#SERVICE.DESCRIPTION}\":\"Provides user experience theme management.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"THREADORDER\",\"{#SERVICE.DISPLAYNAME}\":\"Thread Ordering Server\",\"{#SERVICE.DESCRIPTION}\":\"Provides ordered execution for a group of threads within a specific period of time.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"TieringEngineService\",\"{#SERVICE.DISPLAYNAME}\":\"Storage Tiers Management\",\"{#SERVICE.DESCRIPTION}\":\"Optimizes the placement of data in storage tiers on all tiered storage spaces in the system.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\TieringEngineService.exe\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"TimeBroker\",\"{#SERVICE.DISPLAYNAME}\":\"Time Broker\",\"{#SERVICE.DESCRIPTION}\":\"Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceAndNoImpersonation\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"TrkWks\",\"{#SERVICE.DISPLAYNAME}\":\"Distributed Link Tracking Client\",\"{#SERVICE.DESCRIPTION}\":\"Maintains links between NTFS files within a computer or across computers in a network.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"TrustedInstaller\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Modules Installer\",\"{#SERVICE.DESCRIPTION}\":\"Enables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\servicing\\\\TrustedInstaller.exe\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"UALSVC\",\"{#SERVICE.DISPLAYNAME}\":\"User Access Logging Service\",\"{#SERVICE.DESCRIPTION}\":\"This service logs unique client access requests, in the form of IP addresses and user names, of installed products and roles on the local server. This information can be queried, via Powershell, by administrators needing to quantify client demand of server software for offline Client Access License (CAL) management. If the service is disabled, client requests will not be logged and will not be retrievable via Powershell queries. Stopping the service will not affect query of historical data (see supporting documentation for steps to delete historical data). The local system administrator must consult his, or her, Windows Server license terms to determine the number of CALs that are required for the server software to be appropriately licensed; use of the UAL service and data does not alter this obligation.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":1,\"{#SERVICE.STARTUPNAME}\":\"automatic delayed\"},{\"{#SERVICE.NAME}\":\"UI0Detect\",\"{#SERVICE.DISPLAYNAME}\":\"Interactive Services Detection\",\"{#SERVICE.DESCRIPTION}\":\"Enables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new interactive service dialogs will no longer function and there might not be access to interactive service dialogs. If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\UI0Detect.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"UmRdpService\",\"{#SERVICE.DISPLAYNAME}\":\"Remote Desktop Services UserMode Port Redirector\",\"{#SERVICE.DESCRIPTION}\":\"Allows the redirection of Printers/Drives/Ports for RDP connections\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"upnphost\",\"{#SERVICE.DISPLAYNAME}\":\"UPnP Device Host\",\"{#SERVICE.DESCRIPTION}\":\"Allows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceAndNoImpersonation\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":3,\"{#SERVICE.STARTUPNAME}\":\"disabled\"},{\"{#SERVICE.NAME}\":\"VaultSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Credential Manager\",\"{#SERVICE.DESCRIPTION}\":\"Provides secure storage and retrieval of credentials to users, applications and security service packages.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\lsass.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"vds\",\"{#SERVICE.DISPLAYNAME}\":\"Virtual Disk\",\"{#SERVICE.DESCRIPTION}\":\"Provides management services for disks, volumes, file systems, and storage arrays.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\vds.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"vmicguestinterface\",\"{#SERVICE.DISPLAYNAME}\":\"Hyper-V Guest Service Interface\",\"{#SERVICE.DESCRIPTION}\":\"Provides an interface for the Hyper-V host to interact with specific services running inside the virtual machine.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"vmicheartbeat\",\"{#SERVICE.DISPLAYNAME}\":\"Hyper-V Heartbeat Service\",\"{#SERVICE.DESCRIPTION}\":\"Monitors the state of this virtual machine by reporting a heartbeat at regular intervals. This service helps you identify running virtual machines that have stopped responding.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k ICService\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"vmickvpexchange\",\"{#SERVICE.DISPLAYNAME}\":\"Hyper-V Data Exchange Service\",\"{#SERVICE.DESCRIPTION}\":\"Provides a mechanism to exchange data between the virtual machine and the operating system running on the physical computer.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"vmicrdv\",\"{#SERVICE.DISPLAYNAME}\":\"Hyper-V Remote Desktop Virtualization Service\",\"{#SERVICE.DESCRIPTION}\":\"Provides a platform for communication between the virtual machine and the operating system running on the physical computer.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k ICService\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"vmicshutdown\",\"{#SERVICE.DISPLAYNAME}\":\"Hyper-V Guest Shutdown Service\",\"{#SERVICE.DESCRIPTION}\":\"Provides a mechanism to shut down the operating system of this virtual machine from the management interfaces on the physical computer.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"vmictimesync\",\"{#SERVICE.DISPLAYNAME}\":\"Hyper-V Time Synchronization Service\",\"{#SERVICE.DESCRIPTION}\":\"Synchronizes the system time of this virtual machine with the system time of the physical computer.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceNetworkRestricted\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"vmicvss\",\"{#SERVICE.DISPLAYNAME}\":\"Hyper-V Volume Shadow Copy Requestor\",\"{#SERVICE.DESCRIPTION}\":\"Coordinates the communications that are required to use Volume Shadow Copy Service to back up applications and data on this virtual machine from the operating system on the physical computer.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"VMTools\",\"{#SERVICE.DISPLAYNAME}\":\"VMware Tools\",\"{#SERVICE.DESCRIPTION}\":\"Provides support for synchronizing objects between the host and guest operating systems.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Program Files\\\\VMware\\\\VMware Tools\\\\vmtoolsd.exe\\\"\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"vmvss\",\"{#SERVICE.DISPLAYNAME}\":\"VMware Snapshot Provider\",\"{#SERVICE.DESCRIPTION}\":\"VMware Snapshot Provider\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\dllhost.exe /Processid:{B100399F-6456-4067-A7DE-FE3B8F7F8797}\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"VSS\",\"{#SERVICE.DISPLAYNAME}\":\"Volume Shadow Copy\",\"{#SERVICE.DESCRIPTION}\":\"Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\vssvc.exe\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"W32Time\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Time\",\"{#SERVICE.DESCRIPTION}\":\"Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"w3logsvc\",\"{#SERVICE.DISPLAYNAME}\":\"W3C Logging Service\",\"{#SERVICE.DESCRIPTION}\":\"Provides W3C logging for Internet Information Services (IIS). If this service is stopped, W3C logging configured by IIS will not work.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k apphost\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"W3SVC\",\"{#SERVICE.DISPLAYNAME}\":\"World Wide Web Publishing Service\",\"{#SERVICE.DESCRIPTION}\":\"Provides Web connectivity and administration through the Internet Information Services Manager\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k iissvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"WAS\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Process Activation Service\",\"{#SERVICE.DESCRIPTION}\":\"The Windows Process Activation Service (WAS) provides process activation, resource management and health management services for message-activated applications.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k iissvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Wcmsvc\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Connection Manager\",\"{#SERVICE.DESCRIPTION}\":\"Makes automatic connect/disconnect decisions based on the network connectivity options currently available to the PC and enables management of network connectivity based on Group Policy settings.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalServiceNetworkRestricted\",\"{#SERVICE.USER}\":\"NT Authority\\\\LocalService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"WcsPlugInService\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Color System\",\"{#SERVICE.DESCRIPTION}\":\"The WcsPlugInService service hosts third-party Windows Color System color device model and gamut map model plug-in modules. These plug-in modules are vendor-specific extensions to the Windows Color System baseline color device and gamut map models. Stopping or disabling the WcsPlugInService service will disable this extensibility feature, and the Windows Color System will use its baseline model processing rather than the vendor's desired processing. This might result in inaccurate color rendering.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k wcssvc\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"WdiServiceHost\",\"{#SERVICE.DISPLAYNAME}\":\"Diagnostic Service Host\",\"{#SERVICE.DESCRIPTION}\":\"The Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context.  If this service is stopped, any diagnostics that depend on it will no longer function.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"WdiSystemHost\",\"{#SERVICE.DISPLAYNAME}\":\"Diagnostic System Host\",\"{#SERVICE.DESCRIPTION}\":\"The Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context.  If this service is stopped, any diagnostics that depend on it will no longer function.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"WebClient\",\"{#SERVICE.DISPLAYNAME}\":\"WebClient\",\"{#SERVICE.DESCRIPTION}\":\"Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k WebClientGroup\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Wecsvc\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Event Collector\",\"{#SERVICE.DESCRIPTION}\":\"This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k NetworkService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"WEPHOSTSVC\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Encryption Provider Host Service\",\"{#SERVICE.DESCRIPTION}\":\"Windows Encryption Provider Host Service brokers encryption related functionalities from 3rd Party Encryption Providers to processes that need to evaluate and apply EAS policies. Stopping this will compromise EAS compliancy checks that have been established by the connected Mail Accounts\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k WepHostSvcGroup\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"wercplsupport\",\"{#SERVICE.DISPLAYNAME}\":\"Problem Reports and Solutions Control Panel Support\",\"{#SERVICE.DESCRIPTION}\":\"This service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"WerSvc\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Error Reporting Service\",\"{#SERVICE.DESCRIPTION}\":\"Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k WerSvcGroup\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"WiaRpc\",\"{#SERVICE.DISPLAYNAME}\":\"Still Image Acquisition Events\",\"{#SERVICE.DESCRIPTION}\":\"Launches applications associated with still image acquisition events.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"WinHttpAutoProxySvc\",\"{#SERVICE.DISPLAYNAME}\":\"WinHTTP Web Proxy Auto-Discovery Service\",\"{#SERVICE.DESCRIPTION}\":\"WinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\LocalService\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Winmgmt\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Management Instrumentation\",\"{#SERVICE.DESCRIPTION}\":\"Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"WinRM\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Remote Management (WS-Management)\",\"{#SERVICE.DESCRIPTION}\":\"Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine.  The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k NetworkService\",\"{#SERVICE.USER}\":\"NT AUTHORITY\\\\NetworkService\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"},{\"{#SERVICE.NAME}\":\"wlidsvc\",\"{#SERVICE.DISPLAYNAME}\":\"Microsoft Account Sign-in Assistant\",\"{#SERVICE.DESCRIPTION}\":\"Enables user sign-in through Microsoft account identity services. If this service is stopped, users will not be able to logon to the computer with their Microsoft account.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"wmiApSrv\",\"{#SERVICE.DISPLAYNAME}\":\"WMI Performance Adapter\",\"{#SERVICE.DESCRIPTION}\":\"Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\wbem\\\\WmiApSrv.exe\",\"{#SERVICE.USER}\":\"localSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"WPDBusEnum\",\"{#SERVICE.DISPLAYNAME}\":\"Portable Device Enumerator Service\",\"{#SERVICE.DESCRIPTION}\":\"Enforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"WSService\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Store Service (WSService)\",\"{#SERVICE.DESCRIPTION}\":\"Provides infrastructure support for Windows Store.This service is started on demand and if disabled applications bought using Windows Store will not behave correctly.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\System32\\\\svchost.exe -k wsappx\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"wuauserv\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Update\",\"{#SERVICE.DESCRIPTION}\":\"Enables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k netsvcs\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"wudfsvc\",\"{#SERVICE.DISPLAYNAME}\":\"Windows Driver Foundation - User-mode Driver Framework\",\"{#SERVICE.DESCRIPTION}\":\"Creates and manages user-mode driver processes. This service cannot be stopped.\",\"{#SERVICE.STATE}\":6,\"{#SERVICE.STATENAME}\":\"stopped\",\"{#SERVICE.PATH}\":\"C:\\\\Windows\\\\system32\\\\svchost.exe -k LocalSystemNetworkRestricted\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":2,\"{#SERVICE.STARTUPNAME}\":\"manual\"},{\"{#SERVICE.NAME}\":\"Zabbix Agent\",\"{#SERVICE.DISPLAYNAME}\":\"Zabbix Agent\",\"{#SERVICE.DESCRIPTION}\":\"Provides system monitoring\",\"{#SERVICE.STATE}\":0,\"{#SERVICE.STATENAME}\":\"running\",\"{#SERVICE.PATH}\":\"\\\"C:\\\\Zabbix\\\\zabbix_agentd.exe\\\" --config \\\"C:\\\\Zabbix\\\\zabbix_agentd.conf\\\"\",\"{#SERVICE.USER}\":\"LocalSystem\",\"{#SERVICE.STARTUP}\":0,\"{#SERVICE.STARTUPNAME}\":\"automatic\"}]}","clock":1469008638,"ns":978486586},{"host":"bcaves-sfb.bca.int","key":"service.info[AppHostSvc,startup]","value":"0","clock":1469008638,"ns":983264520},{"host":"bcaves-sfb.bca.int","key":"service.info[AppHostSvc,state]","value":"0","clock":1469008638,"ns":987509617},{"host":"bcaves-sfb.bca.int","key":"service.info[BFE,startup]","value":"0","clock":1469008638,"ns":991811909},{"host":"bcaves-sfb.bca.int","key":"service.info[BFE,state]","value":"0","clock":1469008638,"ns":995663978},{"host":"bcaves-sfb.bca.int","key":"service.info[BrokerInfrastructure,startup]","value":"0","clock":1469008639,"ns":17598},{"host":"bcaves-sfb.bca.int","key":"service.info[BrokerInfrastructure,state]","value":"0","clock":1469008639,"ns":4359974},{"host":"bcaves-sfb.bca.int","key":"service.info[CryptSvc,startup]","value":"0","clock":1469008639,"ns":8603605},{"host":"bcaves-sfb.bca.int","key":"service.info[CryptSvc,state]","value":"0","clock":1469008639,"ns":12586194},{"host":"bcaves-sfb.bca.int","key":"service.info[DcomLaunch,startup]","value":"0","clock":1469008639,"ns":17381727},{"host":"bcaves-sfb.bca.int","key":"service.info[DcomLaunch,state]","value":"0","clock":1469008639,"ns":21423466},{"host":"bcaves-sfb.bca.int","key":"service.info[Dhcp,startup]","value":"0","clock":1469008639,"ns":25603547},{"host":"bcaves-sfb.bca.int","key":"service.info[Dhcp,state]","value":"0","clock":1469008639,"ns":29979654},{"host":"bcaves-sfb.bca.int","key":"service.info[DiagTrack,startup]","value":"0","clock":1469008639,"ns":34910106},{"host":"bcaves-sfb.bca.int","key":"service.info[DiagTrack,state]","value":"0","clock":1469008639,"ns":38821814},{"host":"bcaves-sfb.bca.int","key":"service.info[Dnscache,startup]","value":"0","clock":1469008639,"ns":43050779},{"host":"bcaves-sfb.bca.int","key":"service.info[Dnscache,state]","value":"0","clock":1469008639,"ns":47075898},{"host":"bcaves-sfb.bca.int","key":"service.info[DPS,startup]","value":"1","clock":1469008639,"ns":52122695},{"host":"bcaves-sfb.bca.int","key":"service.info[DPS,state]","value":"0","clock":1469008639,"ns":57481372},{"host":"bcaves-sfb.bca.int","key":"service.info[EventLog,startup]","value":"0","clock":1469008639,"ns":62091145},{"host":"bcaves-sfb.bca.int","key":"service.info[EventLog,state]","value":"0","clock":1469008639,"ns":66649100},{"host":"bcaves-sfb.bca.int","key":"service.info[EventSystem,startup]","value":"0","clock":1469008639,"ns":71268161},{"host":"bcaves-sfb.bca.int","key":"service.info[EventSystem,state]","value":"0","clock":1469008639,"ns":75969347},{"host":"bcaves-sfb.bca.int","key":"service.info[FontCache,startup]","value":"0","clock":1469008639,"ns":80954550},{"host":"bcaves-sfb.bca.int","key":"service.info[FontCache,state]","value":"0","clock":1469008639,"ns":85313058},{"host":"bcaves-sfb.bca.int","key":"service.info[FTA,startup]","value":"1","clock":1469008639,"ns":90179473},{"host":"bcaves-sfb.bca.int","key":"service.info[FTA,state]","value":"0","clock":1469008639,"ns":95142189},{"host":"bcaves-sfb.bca.int","key":"service.info[gpsvc,startup]","value":"0","clock":1469008639,"ns":100719867},{"host":"bcaves-sfb.bca.int","key":"service.info[gpsvc,state]","value":"0","clock":1469008639,"ns":105959267},{"host":"bcaves-sfb.bca.int","key":"service.info[IISADMIN,startup]","value":"0","clock":1469008639,"ns":111438200},{"host":"bcaves-sfb.bca.int","key":"service.info[IISADMIN,state]","value":"0","clock":1469008639,"ns":115992245},{"host":"bcaves-sfb.bca.int","key":"service.info[IKEEXT,startup]","value":"0","clock":1469008639,"ns":120749647},{"host":"bcaves-sfb.bca.int","key":"service.info[IKEEXT,state]","value":"0","clock":1469008639,"ns":125375063},{"host":"bcaves-sfb.bca.int","key":"service.info[iphlpsvc,startup]","value":"0","clock":1469008639,"ns":129819607},{"host":"bcaves-sfb.bca.int","key":"service.info[iphlpsvc,state]","value":"0","clock":1469008639,"ns":133851081},{"host":"bcaves-sfb.bca.int","key":"service.info[LanmanServer,startup]","value":"0","clock":1469008639,"ns":138347931},{"host":"bcaves-sfb.bca.int","key":"service.info[LanmanServer,state]","value":"0","clock":1469008639,"ns":142818384},{"host":"bcaves-sfb.bca.int","key":"service.info[LanmanWorkstation,startup]","value":"0","clock":1469008639,"ns":147374873},{"host":"bcaves-sfb.bca.int","key":"service.info[LanmanWorkstation,state]","value":"0","clock":1469008639,"ns":151460119},{"host":"bcaves-sfb.bca.int","key":"service.info[lmhosts,startup]","value":"0","clock":1469008639,"ns":155715971},{"host":"bcaves-sfb.bca.int","key":"service.info[lmhosts,state]","value":"0","clock":1469008639,"ns":160000664},{"host":"bcaves-sfb.bca.int","key":"service.info[LSM,startup]","value":"0","clock":1469008639,"ns":164294646},{"host":"bcaves-sfb.bca.int","key":"service.info[LSM,state]","value":"0","clock":1469008639,"ns":168213686},{"host":"bcaves-sfb.bca.int","key":"service.info[MASTER,startup]","value":"1","clock":1469008639,"ns":172690005},{"host":"bcaves-sfb.bca.int","key":"service.info[MASTER,state]","value":"0","clock":1469008639,"ns":176802137},{"host":"bcaves-sfb.bca.int","key":"service.info[MpsSvc,startup]","value":"0","clock":1469008639,"ns":181181177},{"host":"bcaves-sfb.bca.int","key":"service.info[MpsSvc,state]","value":"0","clock":1469008639,"ns":185431162},{"host":"bcaves-sfb.bca.int","key":"service.info[MSDTC,startup]","value":"1","clock":1469008639,"ns":190064888},{"host":"bcaves-sfb.bca.int","key":"service.info[MSDTC,state]","value":"0","clock":1469008639,"ns":194137913},{"host":"bcaves-sfb.bca.int","key":"service.info[MSSQL$LYNCLOCAL,startup]","value":"0","clock":1469008639,"ns":198536995},{"host":"bcaves-sfb.bca.int","key":"service.info[MSSQL$LYNCLOCAL,state]","value":"0","clock":1469008639,"ns":202550382},{"host":"bcaves-sfb.bca.int","key":"service.info[MSSQL$RTC,startup]","value":"0","clock":1469008639,"ns":207251079},{"host":"bcaves-sfb.bca.int","key":"service.info[MSSQL$RTC,state]","value":"0","clock":1469008639,"ns":211591500},{"host":"bcaves-sfb.bca.int","key":"service.info[MSSQL$RTCLOCAL,startup]","value":"0","clock":1469008639,"ns":215797490},{"host":"bcaves-sfb.bca.int","key":"service.info[MSSQL$RTCLOCAL,state]","value":"0","clock":1469008639,"ns":219822120},{"host":"bcaves-sfb.bca.int","key":"service.info[Netlogon,startup]","value":"0","clock":1469008639,"ns":224062329},{"host":"bcaves-sfb.bca.int","key":"service.info[Netlogon,state]","value":"0","clock":1469008639,"ns":227977947},{"host":"bcaves-sfb.bca.int","key":"service.info[NlaSvc,startup]","value":"0","clock":1469008639,"ns":232436668},{"host":"bcaves-sfb.bca.int","key":"service.info[NlaSvc,state]","value":"0","clock":1469008639,"ns":236642169},{"host":"bcaves-sfb.bca.int","key":"service.info[nsi,startup]","value":"0","clock":1469008639,"ns":241091113},{"host":"bcaves-sfb.bca.int","key":"service.info[nsi,state]","value":"0","clock":1469008639,"ns":245530280},{"host":"bcaves-sfb.bca.int","key":"service.info[Power,startup]","value":"0","clock":1469008639,"ns":251125068},{"host":"bcaves-sfb.bca.int","key":"service.info[Power,state]","value":"0","clock":1469008639,"ns":256532140},{"host":"bcaves-sfb.bca.int","key":"service.info[ProfSvc,startup]","value":"0","clock":1469008639,"ns":261211817},{"host":"bcaves-sfb.bca.int","key":"service.info[ProfSvc,state]","value":"0","clock":1469008639,"ns":265232536},{"host":"bcaves-sfb.bca.int","key":"service.info[REPLICA,startup]","value":"1","clock":1469008639,"ns":269899015},{"host":"bcaves-sfb.bca.int","key":"service.info[REPLICA,state]","value":"0","clock":1469008639,"ns":274538118},{"host":"bcaves-sfb.bca.int","key":"service.info[RpcEptMapper,startup]","value":"0","clock":1469008639,"ns":288566883},{"host":"bcaves-sfb.bca.int","key":"service.info[RpcEptMapper,state]","value":"0","clock":1469008639,"ns":293576528},{"host":"bcaves-sfb.bca.int","key":"service.info[RpcSs,startup]","value":"0","clock":1469008639,"ns":299312591},{"host":"bcaves-sfb.bca.int","key":"service.info[RpcSs,state]","value":"0","clock":1469008639,"ns":303573331},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCASMCU,startup]","value":"1","clock":1469008639,"ns":308251053},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCASMCU,state]","value":"0","clock":1469008639,"ns":313284651},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCATS,startup]","value":"1","clock":1469008639,"ns":318246389},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCATS,state]","value":"0","clock":1469008639,"ns":323466236},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCAVMCU,startup]","value":"1","clock":1469008639,"ns":327879983},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCAVMCU,state]","value":"0","clock":1469008639,"ns":332800170},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCCAA,startup]","value":"1","clock":1469008639,"ns":337078997},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCCAA,state]","value":"0","clock":1469008639,"ns":341745964},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCCAS,startup]","value":"1","clock":1469008639,"ns":347393547},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCCAS,state]","value":"0","clock":1469008639,"ns":351983277},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCCLSAGT,startup]","value":"1","clock":1469008639,"ns":356784187},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCCLSAGT,state]","value":"0","clock":1469008639,"ns":361054704},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCCPS,startup]","value":"1","clock":1469008639,"ns":366452489},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCCPS,state]","value":"0","clock":1469008639,"ns":370654568},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCDATAMCU,startup]","value":"1","clock":1469008639,"ns":375650525},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCDATAMCU,state]","value":"0","clock":1469008639,"ns":379902466},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCHA,startup]","value":"1","clock":1469008639,"ns":384349943},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCHA,state]","value":"0","clock":1469008639,"ns":388459631},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCIMMCU,startup]","value":"1","clock":1469008639,"ns":393875992},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCIMMCU,state]","value":"0","clock":1469008639,"ns":399816880},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCRGS,startup]","value":"1","clock":1469008639,"ns":406403526},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCRGS,state]","value":"0","clock":1469008639,"ns":410874957},{"host":"bcaves-sfb.bca.int","key":"service.info[RtcSrv,startup]","value":"1","clock":1469008639,"ns":415188003},{"host":"bcaves-sfb.bca.int","key":"service.info[RtcSrv,state]","value":"0","clock":1469008639,"ns":419298669},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCXMPPTGW,startup]","value":"1","clock":1469008639,"ns":423902575},{"host":"bcaves-sfb.bca.int","key":"service.info[RTCXMPPTGW,state]","value":"0","clock":1469008639,"ns":427889076}],"clock":1469008639,"ns":445643300}]
 52856:20160720:115719.360 In collect_perfstat()
 52856:20160720:115719.368 End of collect_perfstat()
 28632:20160720:115719.430 JSON back [{"response":"success","info":"processed: 100; failed: 0; total: 100; seconds spent: 0.029024"}]
 28632:20160720:115719.431 In check_response() response:'{"response":"success","info":"processed: 100; failed: 0; total: 100; seconds spent: 0.029024"}'
 28632:20160720:115719.431 info from server: 'processed: 100; failed: 0; total: 100; seconds spent: 0.029024'
 28632:20160720:115719.432 End of check_response():SUCCEED
 28632:20160720:115719.432 OK
 28632:20160720:115719.433 End of send_buffer():SUCCEED
 28632:20160720:115719.433 buffer: new element 0
 28632:20160720:115719.434 End of process_value():SUCCEED
 28632:20160720:115719.434 In need_meta_update() key:service.info[SamSs,startup]
 28632:20160720:115719.435 End of need_meta_update():FAIL
 28632:20160720:115719.435 for key [service.info[SamSs,state]] received value [0]
 28632:20160720:115719.436 In process_value() key:'bcaves-sfb.bca.int:service.info[SamSs,state]' value:'0'
 28632:20160720:115719.436 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115719.437 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.437 End of send_buffer():SUCCEED
 28632:20160720:115719.438 buffer: new element 1
 28632:20160720:115719.438 End of process_value():SUCCEED
 28632:20160720:115719.439 In need_meta_update() key:service.info[SamSs,state]
 28632:20160720:115719.439 End of need_meta_update():FAIL
 28632:20160720:115719.440 for key [service.info[Schedule,startup]] received value [0]
 28632:20160720:115719.441 In process_value() key:'bcaves-sfb.bca.int:service.info[Schedule,startup]' value:'0'
 28632:20160720:115719.441 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:2/100
 28632:20160720:115719.441 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.442 End of send_buffer():SUCCEED
 28632:20160720:115719.442 buffer: new element 2
 28632:20160720:115719.443 End of process_value():SUCCEED
 28632:20160720:115719.443 In need_meta_update() key:service.info[Schedule,startup]
 28632:20160720:115719.444 End of need_meta_update():FAIL
 28632:20160720:115719.445 for key [service.info[Schedule,state]] received value [0]
 28632:20160720:115719.445 In process_value() key:'bcaves-sfb.bca.int:service.info[Schedule,state]' value:'0'
 28632:20160720:115719.445 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:3/100
 28632:20160720:115719.446 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.446 End of send_buffer():SUCCEED
 28632:20160720:115719.447 buffer: new element 3
 28632:20160720:115719.447 End of process_value():SUCCEED
 28632:20160720:115719.448 In need_meta_update() key:service.info[Schedule,state]
 28632:20160720:115719.448 End of need_meta_update():FAIL
 28632:20160720:115719.449 for key [service.info[SENS,startup]] received value [0]
 28632:20160720:115719.450 In process_value() key:'bcaves-sfb.bca.int:service.info[SENS,startup]' value:'0'
 28632:20160720:115719.450 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:4/100
 28632:20160720:115719.450 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.451 End of send_buffer():SUCCEED
 28632:20160720:115719.451 buffer: new element 4
 28632:20160720:115719.452 End of process_value():SUCCEED
 28632:20160720:115719.452 In need_meta_update() key:service.info[SENS,startup]
 28632:20160720:115719.452 End of need_meta_update():FAIL
 28632:20160720:115719.453 for key [service.info[SENS,state]] received value [0]
 28632:20160720:115719.453 In process_value() key:'bcaves-sfb.bca.int:service.info[SENS,state]' value:'0'
 28632:20160720:115719.454 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:5/100
 28632:20160720:115719.454 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.455 End of send_buffer():SUCCEED
 28632:20160720:115719.455 buffer: new element 5
 28632:20160720:115719.456 End of process_value():SUCCEED
 28632:20160720:115719.456 In need_meta_update() key:service.info[SENS,state]
 28632:20160720:115719.457 End of need_meta_update():FAIL
 28632:20160720:115719.458 for key [service.info[ShellHWDetection,startup]] received value [0]
 28632:20160720:115719.459 In process_value() key:'bcaves-sfb.bca.int:service.info[ShellHWDetection,startup]' value:'0'
 28632:20160720:115719.460 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:6/100
 28632:20160720:115719.460 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.461 End of send_buffer():SUCCEED
 28632:20160720:115719.461 buffer: new element 6
 28632:20160720:115719.461 End of process_value():SUCCEED
 28632:20160720:115719.462 In need_meta_update() key:service.info[ShellHWDetection,startup]
 28632:20160720:115719.463 End of need_meta_update():FAIL
 28632:20160720:115719.464 for key [service.info[ShellHWDetection,state]] received value [0]
 28632:20160720:115719.464 In process_value() key:'bcaves-sfb.bca.int:service.info[ShellHWDetection,state]' value:'0'
 28632:20160720:115719.465 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:7/100
 28632:20160720:115719.465 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.466 End of send_buffer():SUCCEED
 28632:20160720:115719.466 buffer: new element 7
 28632:20160720:115719.467 End of process_value():SUCCEED
 28632:20160720:115719.467 In need_meta_update() key:service.info[ShellHWDetection,state]
 28632:20160720:115719.468 End of need_meta_update():FAIL
 28632:20160720:115719.469 for key [service.info[Spooler,startup]] received value [0]
 28632:20160720:115719.470 In process_value() key:'bcaves-sfb.bca.int:service.info[Spooler,startup]' value:'0'
 28632:20160720:115719.470 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:8/100
 28632:20160720:115719.471 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.471 End of send_buffer():SUCCEED
 28632:20160720:115719.472 buffer: new element 8
 28632:20160720:115719.472 End of process_value():SUCCEED
 28632:20160720:115719.472 In need_meta_update() key:service.info[Spooler,startup]
 28632:20160720:115719.473 End of need_meta_update():FAIL
 28632:20160720:115719.474 for key [service.info[Spooler,state]] received value [0]
 28632:20160720:115719.474 In process_value() key:'bcaves-sfb.bca.int:service.info[Spooler,state]' value:'0'
 28632:20160720:115719.475 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:9/100
 28632:20160720:115719.475 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.475 End of send_buffer():SUCCEED
 28632:20160720:115719.476 buffer: new element 9
 28632:20160720:115719.476 End of process_value():SUCCEED
 28632:20160720:115719.477 In need_meta_update() key:service.info[Spooler,state]
 28632:20160720:115719.477 End of need_meta_update():FAIL
 28632:20160720:115719.478 for key [service.info[SQLBrowser,startup]] received value [0]
 28632:20160720:115719.479 In process_value() key:'bcaves-sfb.bca.int:service.info[SQLBrowser,startup]' value:'0'
 28632:20160720:115719.479 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:10/100
 28632:20160720:115719.479 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.480 End of send_buffer():SUCCEED
 28632:20160720:115719.480 buffer: new element 10
 28632:20160720:115719.481 End of process_value():SUCCEED
 28632:20160720:115719.481 In need_meta_update() key:service.info[SQLBrowser,startup]
 28632:20160720:115719.482 End of need_meta_update():FAIL
 28632:20160720:115719.483 for key [service.info[SQLBrowser,state]] received value [0]
 28632:20160720:115719.483 In process_value() key:'bcaves-sfb.bca.int:service.info[SQLBrowser,state]' value:'0'
 28632:20160720:115719.484 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:11/100
 28632:20160720:115719.484 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.484 End of send_buffer():SUCCEED
 28632:20160720:115719.485 buffer: new element 11
 28632:20160720:115719.485 End of process_value():SUCCEED
 28632:20160720:115719.486 In need_meta_update() key:service.info[SQLBrowser,state]
 28632:20160720:115719.487 End of need_meta_update():FAIL
 28632:20160720:115719.488 for key [service.info[SQLWriter,startup]] received value [0]
 28632:20160720:115719.488 In process_value() key:'bcaves-sfb.bca.int:service.info[SQLWriter,startup]' value:'0'
 28632:20160720:115719.488 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:12/100
 28632:20160720:115719.489 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.489 End of send_buffer():SUCCEED
 28632:20160720:115719.490 buffer: new element 12
 28632:20160720:115719.490 End of process_value():SUCCEED
 28632:20160720:115719.491 In need_meta_update() key:service.info[SQLWriter,startup]
 28632:20160720:115719.491 End of need_meta_update():FAIL
 28632:20160720:115719.492 for key [service.info[SQLWriter,state]] received value [0]
 28632:20160720:115719.492 In process_value() key:'bcaves-sfb.bca.int:service.info[SQLWriter,state]' value:'0'
 28632:20160720:115719.493 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:13/100
 28632:20160720:115719.493 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.493 End of send_buffer():SUCCEED
 28632:20160720:115719.495 buffer: new element 13
 28632:20160720:115719.495 End of process_value():SUCCEED
 28632:20160720:115719.495 In need_meta_update() key:service.info[SQLWriter,state]
 28632:20160720:115719.495 End of need_meta_update():FAIL
 28632:20160720:115719.496 for key [service.info[SystemEventsBroker,startup]] received value [0]
 28632:20160720:115719.497 In process_value() key:'bcaves-sfb.bca.int:service.info[SystemEventsBroker,startup]' value:'0'
 28632:20160720:115719.497 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:14/100
 28632:20160720:115719.498 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.498 End of send_buffer():SUCCEED
 28632:20160720:115719.498 buffer: new element 14
 28632:20160720:115719.499 End of process_value():SUCCEED
 28632:20160720:115719.499 In need_meta_update() key:service.info[SystemEventsBroker,startup]
 28632:20160720:115719.499 End of need_meta_update():FAIL
 28632:20160720:115719.500 for key [service.info[SystemEventsBroker,state]] received value [0]
 28632:20160720:115719.501 In process_value() key:'bcaves-sfb.bca.int:service.info[SystemEventsBroker,state]' value:'0'
 28632:20160720:115719.501 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:15/100
 28632:20160720:115719.501 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.502 End of send_buffer():SUCCEED
 28632:20160720:115719.502 buffer: new element 15
 28632:20160720:115719.503 End of process_value():SUCCEED
 28632:20160720:115719.503 In need_meta_update() key:service.info[SystemEventsBroker,state]
 28632:20160720:115719.503 End of need_meta_update():FAIL
 28632:20160720:115719.505 for key [service.info[Themes,startup]] received value [0]
 28632:20160720:115719.505 In process_value() key:'bcaves-sfb.bca.int:service.info[Themes,startup]' value:'0'
 28632:20160720:115719.505 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:16/100
 28632:20160720:115719.506 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.506 End of send_buffer():SUCCEED
 28632:20160720:115719.507 buffer: new element 16
 28632:20160720:115719.507 End of process_value():SUCCEED
 28632:20160720:115719.507 In need_meta_update() key:service.info[Themes,startup]
 28632:20160720:115719.508 End of need_meta_update():FAIL
 28632:20160720:115719.508 for key [service.info[Themes,state]] received value [0]
 28632:20160720:115719.509 In process_value() key:'bcaves-sfb.bca.int:service.info[Themes,state]' value:'0'
 28632:20160720:115719.509 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:17/100
 28632:20160720:115719.510 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.510 End of send_buffer():SUCCEED
 28632:20160720:115719.511 buffer: new element 17
 28632:20160720:115719.511 End of process_value():SUCCEED
 28632:20160720:115719.511 In need_meta_update() key:service.info[Themes,state]
 28632:20160720:115719.512 End of need_meta_update():FAIL
 28632:20160720:115719.513 for key [service.info[TrkWks,startup]] received value [0]
 28632:20160720:115719.513 In process_value() key:'bcaves-sfb.bca.int:service.info[TrkWks,startup]' value:'0'
 28632:20160720:115719.514 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:18/100
 28632:20160720:115719.514 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.514 End of send_buffer():SUCCEED
 28632:20160720:115719.515 buffer: new element 18
 28632:20160720:115719.515 End of process_value():SUCCEED
 28632:20160720:115719.516 In need_meta_update() key:service.info[TrkWks,startup]
 28632:20160720:115719.516 End of need_meta_update():FAIL
 28632:20160720:115719.517 for key [service.info[TrkWks,state]] received value [0]
 28632:20160720:115719.517 In process_value() key:'bcaves-sfb.bca.int:service.info[TrkWks,state]' value:'0'
 28632:20160720:115719.518 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:19/100
 28632:20160720:115719.518 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.518 End of send_buffer():SUCCEED
 28632:20160720:115719.519 buffer: new element 19
 28632:20160720:115719.519 End of process_value():SUCCEED
 28632:20160720:115719.520 In need_meta_update() key:service.info[TrkWks,state]
 28632:20160720:115719.520 End of need_meta_update():FAIL
 28632:20160720:115719.521 for key [service.info[UALSVC,startup]] received value [1]
 28632:20160720:115719.521 In process_value() key:'bcaves-sfb.bca.int:service.info[UALSVC,startup]' value:'1'
 28632:20160720:115719.522 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:20/100
 28632:20160720:115719.522 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.523 End of send_buffer():SUCCEED
 28632:20160720:115719.523 buffer: new element 20
 28632:20160720:115719.523 End of process_value():SUCCEED
 28632:20160720:115719.524 In need_meta_update() key:service.info[UALSVC,startup]
 28632:20160720:115719.524 End of need_meta_update():FAIL
 28632:20160720:115719.525 for key [service.info[UALSVC,state]] received value [0]
 28632:20160720:115719.525 In process_value() key:'bcaves-sfb.bca.int:service.info[UALSVC,state]' value:'0'
 28632:20160720:115719.526 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:21/100
 28632:20160720:115719.526 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.527 End of send_buffer():SUCCEED
 28632:20160720:115719.527 buffer: new element 21
 28632:20160720:115719.527 End of process_value():SUCCEED
 28632:20160720:115719.528 In need_meta_update() key:service.info[UALSVC,state]
 28632:20160720:115719.528 End of need_meta_update():FAIL
 28632:20160720:115719.529 for key [service.info[VMTools,startup]] received value [0]
 28632:20160720:115719.530 In process_value() key:'bcaves-sfb.bca.int:service.info[VMTools,startup]' value:'0'
 28632:20160720:115719.530 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:22/100
 28632:20160720:115719.531 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.531 End of send_buffer():SUCCEED
 28632:20160720:115719.531 buffer: new element 22
 28632:20160720:115719.532 End of process_value():SUCCEED
 28632:20160720:115719.532 In need_meta_update() key:service.info[VMTools,startup]
 28632:20160720:115719.533 End of need_meta_update():FAIL
 28632:20160720:115719.533 for key [service.info[VMTools,state]] received value [0]
 28632:20160720:115719.534 In process_value() key:'bcaves-sfb.bca.int:service.info[VMTools,state]' value:'0'
 28632:20160720:115719.534 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:23/100
 28632:20160720:115719.534 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.535 End of send_buffer():SUCCEED
 28632:20160720:115719.535 buffer: new element 23
 28632:20160720:115719.536 End of process_value():SUCCEED
 28632:20160720:115719.536 In need_meta_update() key:service.info[VMTools,state]
 28632:20160720:115719.536 End of need_meta_update():FAIL
 28632:20160720:115719.537 for key [service.info[W3SVC,startup]] received value [0]
 28632:20160720:115719.538 In process_value() key:'bcaves-sfb.bca.int:service.info[W3SVC,startup]' value:'0'
 28632:20160720:115719.538 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:24/100
 28632:20160720:115719.539 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.539 End of send_buffer():SUCCEED
 28632:20160720:115719.540 buffer: new element 24
 28632:20160720:115719.540 End of process_value():SUCCEED
 28632:20160720:115719.540 In need_meta_update() key:service.info[W3SVC,startup]
 28632:20160720:115719.541 End of need_meta_update():FAIL
 28632:20160720:115719.542 for key [service.info[W3SVC,state]] received value [0]
 28632:20160720:115719.542 In process_value() key:'bcaves-sfb.bca.int:service.info[W3SVC,state]' value:'0'
 28632:20160720:115719.542 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:25/100
 28632:20160720:115719.543 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.543 End of send_buffer():SUCCEED
 28632:20160720:115719.544 buffer: new element 25
 28632:20160720:115719.544 End of process_value():SUCCEED
 28632:20160720:115719.544 In need_meta_update() key:service.info[W3SVC,state]
 28632:20160720:115719.545 End of need_meta_update():FAIL
 28632:20160720:115719.546 for key [service.info[Wcmsvc,startup]] received value [0]
 28632:20160720:115719.546 In process_value() key:'bcaves-sfb.bca.int:service.info[Wcmsvc,startup]' value:'0'
 28632:20160720:115719.547 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:26/100
 28632:20160720:115719.547 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.548 End of send_buffer():SUCCEED
 28632:20160720:115719.548 buffer: new element 26
 28632:20160720:115719.548 End of process_value():SUCCEED
 28632:20160720:115719.549 In need_meta_update() key:service.info[Wcmsvc,startup]
 28632:20160720:115719.549 End of need_meta_update():FAIL
 28632:20160720:115719.550 for key [service.info[Wcmsvc,state]] received value [0]
 28632:20160720:115719.550 In process_value() key:'bcaves-sfb.bca.int:service.info[Wcmsvc,state]' value:'0'
 28632:20160720:115719.551 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:27/100
 28632:20160720:115719.551 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.551 End of send_buffer():SUCCEED
 28632:20160720:115719.552 buffer: new element 27
 28632:20160720:115719.552 End of process_value():SUCCEED
 28632:20160720:115719.553 In need_meta_update() key:service.info[Wcmsvc,state]
 28632:20160720:115719.553 End of need_meta_update():FAIL
 28632:20160720:115719.554 for key [service.info[Winmgmt,startup]] received value [0]
 28632:20160720:115719.554 In process_value() key:'bcaves-sfb.bca.int:service.info[Winmgmt,startup]' value:'0'
 28632:20160720:115719.555 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:28/100
 28632:20160720:115719.555 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.556 End of send_buffer():SUCCEED
 28632:20160720:115719.556 buffer: new element 28
 28632:20160720:115719.557 End of process_value():SUCCEED
 28632:20160720:115719.557 In need_meta_update() key:service.info[Winmgmt,startup]
 28632:20160720:115719.557 End of need_meta_update():FAIL
 28632:20160720:115719.558 for key [service.info[Winmgmt,state]] received value [0]
 28632:20160720:115719.559 In process_value() key:'bcaves-sfb.bca.int:service.info[Winmgmt,state]' value:'0'
 28632:20160720:115719.559 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:29/100
 28632:20160720:115719.560 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.560 End of send_buffer():SUCCEED
 28632:20160720:115719.560 buffer: new element 29
 28632:20160720:115719.561 End of process_value():SUCCEED
 28632:20160720:115719.561 In need_meta_update() key:service.info[Winmgmt,state]
 28632:20160720:115719.562 End of need_meta_update():FAIL
 28632:20160720:115719.563 for key [service.info[WinRM,startup]] received value [0]
 28632:20160720:115719.564 In process_value() key:'bcaves-sfb.bca.int:service.info[WinRM,startup]' value:'0'
 28632:20160720:115719.564 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:30/100
 28632:20160720:115719.564 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.565 End of send_buffer():SUCCEED
 28632:20160720:115719.565 buffer: new element 30
 28632:20160720:115719.566 End of process_value():SUCCEED
 28632:20160720:115719.566 In need_meta_update() key:service.info[WinRM,startup]
 28632:20160720:115719.567 End of need_meta_update():FAIL
 28632:20160720:115719.567 for key [service.info[WinRM,state]] received value [0]
 28632:20160720:115719.568 In process_value() key:'bcaves-sfb.bca.int:service.info[WinRM,state]' value:'0'
 28632:20160720:115719.568 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:31/100
 28632:20160720:115719.569 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.569 End of send_buffer():SUCCEED
 28632:20160720:115719.570 buffer: new element 31
 28632:20160720:115719.570 End of process_value():SUCCEED
 28632:20160720:115719.571 In need_meta_update() key:service.info[WinRM,state]
 28632:20160720:115719.571 End of need_meta_update():FAIL
 28632:20160720:115719.572 for key [service.info[Zabbix Agent,startup]] received value [0]
 28632:20160720:115719.573 In process_value() key:'bcaves-sfb.bca.int:service.info[Zabbix Agent,startup]' value:'0'
 28632:20160720:115719.573 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:32/100
 28632:20160720:115719.574 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.574 End of send_buffer():SUCCEED
 28632:20160720:115719.575 buffer: new element 32
 28632:20160720:115719.575 End of process_value():SUCCEED
 28632:20160720:115719.575 In need_meta_update() key:service.info[Zabbix Agent,startup]
 28632:20160720:115719.576 End of need_meta_update():FAIL
 28632:20160720:115719.577 for key [service.info[Zabbix Agent,state]] received value [0]
 28632:20160720:115719.577 In process_value() key:'bcaves-sfb.bca.int:service.info[Zabbix Agent,state]' value:'0'
 28632:20160720:115719.578 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:33/100
 28632:20160720:115719.578 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.579 End of send_buffer():SUCCEED
 28632:20160720:115719.579 buffer: new element 33
 28632:20160720:115719.580 End of process_value():SUCCEED
 28632:20160720:115719.580 In need_meta_update() key:service.info[Zabbix Agent,state]
 28632:20160720:115719.580 End of need_meta_update():FAIL
 28632:20160720:115719.581 for key [system.cpu.num[online]] received value [4]
 28632:20160720:115719.581 In process_value() key:'bcaves-sfb.bca.int:system.cpu.num[online]' value:'4'
 28632:20160720:115719.582 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:34/100
 28632:20160720:115719.582 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.582 End of send_buffer():SUCCEED
 28632:20160720:115719.583 buffer: new element 34
 28632:20160720:115719.584 End of process_value():SUCCEED
 28632:20160720:115719.584 In need_meta_update() key:system.cpu.num[online]
 28632:20160720:115719.584 End of need_meta_update():FAIL
 28632:20160720:115719.585 In get_perf_counter_value() path:\Processor(_Total)\% Processor Time interval:60
 28632:20160720:115719.585 End of get_perf_counter_value():SUCCEED
 28632:20160720:115719.586 for key [system.cpu.util[,,avg1]] received value [11.783810]
 28632:20160720:115719.586 In process_value() key:'bcaves-sfb.bca.int:system.cpu.util[,,avg1]' value:'11.783810'
 28632:20160720:115719.587 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:35/100
 28632:20160720:115719.587 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.588 End of send_buffer():SUCCEED
 28632:20160720:115719.588 buffer: new element 35
 28632:20160720:115719.589 End of process_value():SUCCEED
 28632:20160720:115719.589 In need_meta_update() key:system.cpu.util[,,avg1]
 28632:20160720:115719.590 End of need_meta_update():FAIL
 28632:20160720:115719.590 for key [system.localtime] received value [1469008639]
 28632:20160720:115719.590 In process_value() key:'bcaves-sfb.bca.int:system.localtime' value:'1469008639'
 28632:20160720:115719.591 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:36/100
 28632:20160720:115719.591 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.592 End of send_buffer():SUCCEED
 28632:20160720:115719.592 buffer: new element 36
 28632:20160720:115719.593 End of process_value():SUCCEED
 28632:20160720:115719.593 In need_meta_update() key:system.localtime
 28632:20160720:115719.594 End of need_meta_update():FAIL
 28632:20160720:115719.779 cannot convert WMI result of type 1 to VT_BSTR
 28632:20160720:115719.802 for key [system.uname] received value [Windows BCAVES-SFB 6.3.9600 Microsoft Windows Server 2012 R2 Standard x64]
 28632:20160720:115719.803 In process_value() key:'bcaves-sfb.bca.int:system.uname' value:'Windows BCAVES-SFB 6.3.9600 Microsoft Windows Server 2012 R2 Standard x64'
 28632:20160720:115719.804 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:37/100
 28632:20160720:115719.804 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.804 End of send_buffer():SUCCEED
 28632:20160720:115719.805 buffer: new element 37
 28632:20160720:115719.805 End of process_value():SUCCEED
 28632:20160720:115719.806 In need_meta_update() key:system.uname
 28632:20160720:115719.806 End of need_meta_update():FAIL
 28632:20160720:115719.807 In PERF_COUNTER()
 28632:20160720:115719.807 In get_counter_name() pdhIndex:2
 28632:20160720:115719.808 End of get_counter_name():SUCCEED
 28632:20160720:115719.808 In get_counter_name() pdhIndex:674
 28632:20160720:115719.809 End of get_counter_name():SUCCEED
 28632:20160720:115719.809 counter path converted to '\\BCAVES-SFB\System\System Up Time'
 28632:20160720:115719.809 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\System\System Up Time interval:1
 28632:20160720:115719.810 In add_perf_counter() counter:'\\BCAVES-SFB\System\System Up Time' interval:1
 28632:20160720:115719.814 add_perf_counter(): PerfCounter '\\BCAVES-SFB\System\System Up Time' successfully added
 28632:20160720:115719.815 End of add_perf_counter(): SUCCEED
 28632:20160720:115719.815 get_perf_counter_value_by_path(): PerfCounter '\\BCAVES-SFB\System\System Up Time' successfully added
 28632:20160720:115719.819 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115719.819 End of PERF_COUNTER():SUCCEED
 28632:20160720:115719.820 for key [system.uptime] received value [629775]
 28632:20160720:115719.820 In process_value() key:'bcaves-sfb.bca.int:system.uptime' value:'629775'
 28632:20160720:115719.821 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:38/100
 28632:20160720:115719.821 send_buffer() now:1469008639 lastsent:1469008639 now-lastsent:0 BufferSend:5; will not send now
 28632:20160720:115719.821 End of send_buffer():SUCCEED
 28632:20160720:115719.822 buffer: new element 38
 28632:20160720:115719.823 End of process_value():SUCCEED
 28632:20160720:115719.823 In need_meta_update() key:system.uptime
 28632:20160720:115719.823 End of need_meta_update():FAIL
 52856:20160720:115720.369 In collect_perfstat()
 52856:20160720:115720.377 End of collect_perfstat()
 28632:20160720:115720.838 for key [vfs.fs.discovery] received value [{"data":[{"{#FSNAME}":"A:","{#FSTYPE}":"UNKNOWN","{#FSDRIVETYPE}":"removable"},{"{#FSNAME}":"C:","{#FSTYPE}":"NTFS","{#FSDRIVETYPE}":"fixed"},{"{#FSNAME}":"D:","{#FSTYPE}":"UDF","{#FSDRIVETYPE}":"cdrom"}]}]
 28632:20160720:115720.839 In process_value() key:'bcaves-sfb.bca.int:vfs.fs.discovery' value:'{"data":[{"{#FSNAME}":"A:","{#FSTYPE}":"UNKNOWN","{#FSDRIVETYPE}":"removable"},{"{#FSNAME}":"C:","{#FSTYPE}":"NTFS","{#FSDRIVETYPE}":"fixed"},{"{#FSNAME}":"D:","{#FSTYPE}":"UDF","{#FSDRIVETYPE}":"cdrom"}]}'
 28632:20160720:115720.839 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:39/100
 28632:20160720:115720.840 send_buffer() now:1469008640 lastsent:1469008639 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115720.840 End of send_buffer():SUCCEED
 28632:20160720:115720.841 buffer: new element 39
 28632:20160720:115720.841 End of process_value():SUCCEED
 28632:20160720:115720.841 In need_meta_update() key:vfs.fs.discovery
 28632:20160720:115720.842 End of need_meta_update():FAIL
 28632:20160720:115720.842 for key [vfs.fs.size[C:,free]] received value [28413349888]
 28632:20160720:115720.843 In process_value() key:'bcaves-sfb.bca.int:vfs.fs.size[C:,free]' value:'28413349888'
 28632:20160720:115720.843 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:40/100
 28632:20160720:115720.844 send_buffer() now:1469008640 lastsent:1469008639 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115720.844 End of send_buffer():SUCCEED
 28632:20160720:115720.844 buffer: new element 40
 28632:20160720:115720.845 End of process_value():SUCCEED
 28632:20160720:115720.845 In need_meta_update() key:vfs.fs.size[C:,free]
 28632:20160720:115720.846 End of need_meta_update():FAIL
 28632:20160720:115720.846 for key [vfs.fs.size[C:,pfree]] received value [33.220238]
 28632:20160720:115720.846 In process_value() key:'bcaves-sfb.bca.int:vfs.fs.size[C:,pfree]' value:'33.220238'
 28632:20160720:115720.847 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:41/100
 28632:20160720:115720.847 send_buffer() now:1469008640 lastsent:1469008639 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115720.848 End of send_buffer():SUCCEED
 28632:20160720:115720.848 buffer: new element 41
 28632:20160720:115720.848 End of process_value():SUCCEED
 28632:20160720:115720.849 In need_meta_update() key:vfs.fs.size[C:,pfree]
 28632:20160720:115720.849 End of need_meta_update():FAIL
 28632:20160720:115720.850 for key [vfs.fs.size[C:,total]] received value [85530243072]
 28632:20160720:115720.850 In process_value() key:'bcaves-sfb.bca.int:vfs.fs.size[C:,total]' value:'85530243072'
 28632:20160720:115720.851 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:42/100
 28632:20160720:115720.851 send_buffer() now:1469008640 lastsent:1469008639 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115720.851 End of send_buffer():SUCCEED
 28632:20160720:115720.852 buffer: new element 42
 28632:20160720:115720.852 End of process_value():SUCCEED
 28632:20160720:115720.853 In need_meta_update() key:vfs.fs.size[C:,total]
 28632:20160720:115720.853 End of need_meta_update():FAIL
 28632:20160720:115720.854 for key [vfs.fs.size[C:,used]] received value [57116893184]
 28632:20160720:115720.854 In process_value() key:'bcaves-sfb.bca.int:vfs.fs.size[C:,used]' value:'57116893184'
 28632:20160720:115720.854 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:43/100
 28632:20160720:115720.855 send_buffer() now:1469008640 lastsent:1469008639 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115720.855 End of send_buffer():SUCCEED
 28632:20160720:115720.856 buffer: new element 43
 28632:20160720:115720.856 End of process_value():SUCCEED
 28632:20160720:115720.857 In need_meta_update() key:vfs.fs.size[C:,used]
 28632:20160720:115720.857 End of need_meta_update():FAIL
 28632:20160720:115720.858 for key [vm.memory.size[free]] received value [3491082240]
 28632:20160720:115720.858 In process_value() key:'bcaves-sfb.bca.int:vm.memory.size[free]' value:'3491082240'
 28632:20160720:115720.858 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:44/100
 28632:20160720:115720.859 send_buffer() now:1469008640 lastsent:1469008639 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115720.859 End of send_buffer():SUCCEED
 28632:20160720:115720.860 buffer: new element 44
 28632:20160720:115720.860 End of process_value():SUCCEED
 28632:20160720:115720.861 In need_meta_update() key:vm.memory.size[free]
 28632:20160720:115720.861 End of need_meta_update():FAIL
 28632:20160720:115720.862 End of process_active_checks()
 28632:20160720:115720.862 In get_min_nextcheck()
 28632:20160720:115720.862 End of get_min_nextcheck():1469008659
 28632:20160720:115720.863 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:45/100
 28632:20160720:115720.863 send_buffer() now:1469008640 lastsent:1469008639 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115720.864 End of send_buffer():SUCCEED
 52856:20160720:115721.378 In collect_perfstat()
 52856:20160720:115721.387 End of collect_perfstat()
 28632:20160720:115721.865 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:45/100
 28632:20160720:115721.866 send_buffer() now:1469008641 lastsent:1469008639 now-lastsent:2 BufferSend:5; will not send now
 28632:20160720:115721.866 End of send_buffer():SUCCEED
 52856:20160720:115722.387 In collect_perfstat()
 52856:20160720:115722.398 End of collect_perfstat()
 28632:20160720:115722.868 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:45/100
 28632:20160720:115722.869 send_buffer() now:1469008642 lastsent:1469008639 now-lastsent:3 BufferSend:5; will not send now
 28632:20160720:115722.869 End of send_buffer():SUCCEED
 52856:20160720:115723.400 In collect_perfstat()
 52856:20160720:115723.408 End of collect_perfstat()
 28632:20160720:115723.870 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:45/100
 28632:20160720:115723.871 send_buffer() now:1469008643 lastsent:1469008639 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115723.871 End of send_buffer():SUCCEED
 52856:20160720:115724.410 In collect_perfstat()
 52856:20160720:115724.419 End of collect_perfstat()
 28632:20160720:115724.872 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:45/100
 28632:20160720:115724.884 JSON before sending [{"request":"agent data","data":[{"host":"bcaves-sfb.bca.int","key":"service.info[SamSs,startup]","value":"0","clock":1469008639,"ns":533920692},{"host":"bcaves-sfb.bca.int","key":"service.info[SamSs,state]","value":"0","clock":1469008639,"ns":538287022},{"host":"bcaves-sfb.bca.int","key":"service.info[Schedule,startup]","value":"0","clock":1469008639,"ns":543113351},{"host":"bcaves-sfb.bca.int","key":"service.info[Schedule,state]","value":"0","clock":1469008639,"ns":547274368},{"host":"bcaves-sfb.bca.int","key":"service.info[SENS,startup]","value":"0","clock":1469008639,"ns":551701802},{"host":"bcaves-sfb.bca.int","key":"service.info[SENS,state]","value":"0","clock":1469008639,"ns":555989918},{"host":"bcaves-sfb.bca.int","key":"service.info[ShellHWDetection,startup]","value":"0","clock":1469008639,"ns":561643366},{"host":"bcaves-sfb.bca.int","key":"service.info[ShellHWDetection,state]","value":"0","clock":1469008639,"ns":567044084},{"host":"bcaves-sfb.bca.int","key":"service.info[Spooler,startup]","value":"0","clock":1469008639,"ns":572240466},{"host":"bcaves-sfb.bca.int","key":"service.info[Spooler,state]","value":"0","clock":1469008639,"ns":576323757},{"host":"bcaves-sfb.bca.int","key":"service.info[SQLBrowser,startup]","value":"0","clock":1469008639,"ns":580907621},{"host":"bcaves-sfb.bca.int","key":"service.info[SQLBrowser,state]","value":"0","clock":1469008639,"ns":585342389},{"host":"bcaves-sfb.bca.int","key":"service.info[SQLWriter,startup]","value":"0","clock":1469008639,"ns":590325147},{"host":"bcaves-sfb.bca.int","key":"service.info[SQLWriter,state]","value":"0","clock":1469008639,"ns":594656281},{"host":"bcaves-sfb.bca.int","key":"service.info[SystemEventsBroker,startup]","value":"0","clock":1469008639,"ns":598901378},{"host":"bcaves-sfb.bca.int","key":"service.info[SystemEventsBroker,state]","value":"0","clock":1469008639,"ns":602908409},{"host":"bcaves-sfb.bca.int","key":"service.info[Themes,startup]","value":"0","clock":1469008639,"ns":607123198},{"host":"bcaves-sfb.bca.int","key":"service.info[Themes,state]","value":"0","clock":1469008639,"ns":611132674},{"host":"bcaves-sfb.bca.int","key":"service.info[TrkWks,startup]","value":"0","clock":1469008639,"ns":615387548},{"host":"bcaves-sfb.bca.int","key":"service.info[TrkWks,state]","value":"0","clock":1469008639,"ns":619408267},{"host":"bcaves-sfb.bca.int","key":"service.info[UALSVC,startup]","value":"1","clock":1469008639,"ns":623650920},{"host":"bcaves-sfb.bca.int","key":"service.info[UALSVC,state]","value":"0","clock":1469008639,"ns":627648175},{"host":"bcaves-sfb.bca.int","key":"service.info[VMTools,startup]","value":"0","clock":1469008639,"ns":631946067},{"host":"bcaves-sfb.bca.int","key":"service.info[VMTools,state]","value":"0","clock":1469008639,"ns":635862662},{"host":"bcaves-sfb.bca.int","key":"service.info[W3SVC,startup]","value":"0","clock":1469008639,"ns":640193307},{"host":"bcaves-sfb.bca.int","key":"service.info[W3SVC,state]","value":"0","clock":1469008639,"ns":644251667},{"host":"bcaves-sfb.bca.int","key":"service.info[Wcmsvc,startup]","value":"0","clock":1469008639,"ns":648562269},{"host":"bcaves-sfb.bca.int","key":"service.info[Wcmsvc,state]","value":"0","clock":1469008639,"ns":652500862},{"host":"bcaves-sfb.bca.int","key":"service.info[Winmgmt,startup]","value":"0","clock":1469008639,"ns":656776756},{"host":"bcaves-sfb.bca.int","key":"service.info[Winmgmt,state]","value":"0","clock":1469008639,"ns":661100557},{"host":"bcaves-sfb.bca.int","key":"service.info[WinRM,startup]","value":"0","clock":1469008639,"ns":666029543},{"host":"bcaves-sfb.bca.int","key":"service.info[WinRM,state]","value":"0","clock":1469008639,"ns":670289794},{"host":"bcaves-sfb.bca.int","key":"service.info[Zabbix Agent,startup]","value":"0","clock":1469008639,"ns":675283307},{"host":"bcaves-sfb.bca.int","key":"service.info[Zabbix Agent,state]","value":"0","clock":1469008639,"ns":679730785},{"host":"bcaves-sfb.bca.int","key":"system.cpu.num[online]","value":"4","clock":1469008639,"ns":683697243},{"host":"bcaves-sfb.bca.int","key":"system.cpu.util[,,avg1]","value":"11.783810","clock":1469008639,"ns":688872605},{"host":"bcaves-sfb.bca.int","key":"system.localtime","value":"1469008639","clock":1469008639,"ns":692856172},{"host":"bcaves-sfb.bca.int","key":"system.uname","value":"Windows BCAVES-SFB 6.3.9600 Microsoft Windows Server 2012 R2 Standard x64","clock":1469008639,"ns":905467395},{"host":"bcaves-sfb.bca.int","key":"system.uptime","value":"629775","clock":1469008639,"ns":922709803},{"host":"bcaves-sfb.bca.int","key":"vfs.fs.discovery","value":"{\"data\":[{\"{#FSNAME}\":\"A:\",\"{#FSTYPE}\":\"UNKNOWN\",\"{#FSDRIVETYPE}\":\"removable\"},{\"{#FSNAME}\":\"C:\",\"{#FSTYPE}\":\"NTFS\",\"{#FSDRIVETYPE}\":\"fixed\"},{\"{#FSNAME}\":\"D:\",\"{#FSTYPE}\":\"UDF\",\"{#FSDRIVETYPE}\":\"cdrom\"}]}","clock":1469008640,"ns":941278925},{"host":"bcaves-sfb.bca.int","key":"vfs.fs.size[C:,free]","value":"28413349888","clock":1469008640,"ns":945014650},{"host":"bcaves-sfb.bca.int","key":"vfs.fs.size[C:,pfree]","value":"33.220238","clock":1469008640,"ns":948784105},{"host":"bcaves-sfb.bca.int","key":"vfs.fs.size[C:,total]","value":"85530243072","clock":1469008640,"ns":952401530},{"host":"bcaves-sfb.bca.int","key":"vfs.fs.size[C:,used]","value":"57116893184","clock":1469008640,"ns":956716042},{"host":"bcaves-sfb.bca.int","key":"vm.memory.size[free]","value":"3491082240","clock":1469008640,"ns":960325157}],"clock":1469008644,"ns":983443436}]
 28632:20160720:115724.903 JSON back [{"response":"success","info":"processed: 45; failed: 0; total: 45; seconds spent: 0.007454"}]
 28632:20160720:115724.903 In check_response() response:'{"response":"success","info":"processed: 45; failed: 0; total: 45; seconds spent: 0.007454"}'
 28632:20160720:115724.904 info from server: 'processed: 45; failed: 0; total: 45; seconds spent: 0.007454'
 28632:20160720:115724.904 End of check_response():SUCCEED
 28632:20160720:115724.905 OK
 28632:20160720:115724.906 End of send_buffer():SUCCEED
 52856:20160720:115725.420 In collect_perfstat()
 52856:20160720:115725.429 End of collect_perfstat()
 28632:20160720:115725.907 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115725.908 End of send_buffer():SUCCEED
 52856:20160720:115726.430 In collect_perfstat()
 52856:20160720:115726.439 End of collect_perfstat()
 28632:20160720:115726.909 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115726.910 End of send_buffer():SUCCEED
 52856:20160720:115727.440 In collect_perfstat()
 52856:20160720:115727.448 End of collect_perfstat()
 28632:20160720:115727.911 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115727.912 End of send_buffer():SUCCEED
 52856:20160720:115728.449 In collect_perfstat()
 52856:20160720:115728.458 End of collect_perfstat()
 28632:20160720:115728.914 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115728.915 End of send_buffer():SUCCEED
 52856:20160720:115729.460 In collect_perfstat()
 52856:20160720:115729.468 End of collect_perfstat()
 28632:20160720:115729.916 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115729.917 End of send_buffer():SUCCEED
 52856:20160720:115730.470 In collect_perfstat()
 52856:20160720:115730.478 End of collect_perfstat()
 28632:20160720:115730.918 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115730.919 End of send_buffer():SUCCEED
 52856:20160720:115731.480 In collect_perfstat()
 52856:20160720:115731.488 End of collect_perfstat()
 28632:20160720:115731.920 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115731.921 End of send_buffer():SUCCEED
 52856:20160720:115732.489 In collect_perfstat()
 52856:20160720:115732.500 End of collect_perfstat()
 28632:20160720:115732.922 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115732.923 End of send_buffer():SUCCEED
 52856:20160720:115733.501 In collect_perfstat()
 52856:20160720:115733.509 End of collect_perfstat()
 28632:20160720:115733.924 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115733.925 End of send_buffer():SUCCEED
 52856:20160720:115734.511 In collect_perfstat()
 52856:20160720:115734.521 End of collect_perfstat()
 28632:20160720:115734.926 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115734.927 End of send_buffer():SUCCEED
 52856:20160720:115735.522 In collect_perfstat()
 52856:20160720:115735.530 End of collect_perfstat()
 28632:20160720:115735.928 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115735.929 End of send_buffer():SUCCEED
 52856:20160720:115736.532 In collect_perfstat()
 52856:20160720:115736.540 End of collect_perfstat()
 28632:20160720:115736.930 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115736.931 End of send_buffer():SUCCEED
 52856:20160720:115737.541 In collect_perfstat()
 52856:20160720:115737.549 End of collect_perfstat()
 28632:20160720:115737.932 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115737.933 End of send_buffer():SUCCEED
 52856:20160720:115738.551 In collect_perfstat()
 52856:20160720:115738.560 End of collect_perfstat()
 28632:20160720:115738.934 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115738.935 End of send_buffer():SUCCEED
 52856:20160720:115739.561 In collect_perfstat()
 52856:20160720:115739.569 End of collect_perfstat()
 28632:20160720:115739.936 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115739.937 End of send_buffer():SUCCEED
 28632:20160720:115739.937 In process_active_checks() server:'monitor.wwi.dk' port:10051
 28632:20160720:115739.945 for key [net.if.discovery] received value [{"data":[{"{#IFNAME}":"WAN Miniport (IP)"},{"{#IFNAME}":"WAN Miniport (IPv6)"},{"{#IFNAME}":"WAN Miniport (Network Monitor)"},{"{#IFNAME}":"Microsoft Kernel Debug Network Adapter"},{"{#IFNAME}":"WAN Miniport (IP)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (IP)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"WAN Miniport (IPv6)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (IPv6)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"WAN Miniport (Network Monitor)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (Network Monitor)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (PPPOE)"},{"{#IFNAME}":"RAS Async Adapter"},{"{#IFNAME}":"Software Loopback Interface 1"},{"{#IFNAME}":"WAN Miniport (L2TP)"},{"{#IFNAME}":"WAN Miniport (SSTP)"},{"{#IFNAME}":"WAN Miniport (IKEv2)"},{"{#IFNAME}":"WAN Miniport (PPTP)"},{"{#IFNAME}":"Microsoft ISATAP Adapter"}]}]
 28632:20160720:115739.945 In process_value() key:'bcaves-sfb.bca.int:net.if.discovery' value:'{"data":[{"{#IFNAME}":"WAN Miniport (IP)"},{"{#IFNAME}":"WAN Miniport (IPv6)"},{"{#IFNAME}":"WAN Miniport (Network Monitor)"},{"{#IFNAME}":"Microsoft Kernel Debug Network Adapter"},{"{#IFNAME}":"WAN Miniport (IP)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (IP)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"WAN Miniport (IPv6)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (IPv6)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"WAN Miniport (Network Monitor)-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (Network Monitor)-QoS Packet Scheduler-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000"},{"{#IFNAME}":"Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000"},{"{#IFNAME}":"WAN Miniport (PPPOE)"},{"{#IFNAME}":"RAS Async Adapter"},{"{#IFNAME}":"Software Loopback Interface 1"},{"{#IFNAME}":"WAN Miniport (L2TP)"},{"{#IFNAME}":"WAN Miniport (SSTP)"},{"{#IFNAME}":"WAN Miniport (IKEv2)"},{"{#IFNAME}":"WAN Miniport (PPTP)"},{"{#IFNAME}":"Microsoft ISATAP Adapter"}]}'
 28632:20160720:115739.946 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115739.946 End of send_buffer():SUCCEED
 28632:20160720:115739.948 buffer: new element 0
 28632:20160720:115739.948 End of process_value():SUCCEED
 28632:20160720:115739.948 In need_meta_update() key:net.if.discovery
 28632:20160720:115739.948 End of need_meta_update():FAIL
 28632:20160720:115739.949 In PERF_COUNTER()
 28632:20160720:115739.949 In get_counter_name() pdhIndex:1300
 28632:20160720:115739.950 End of get_counter_name():SUCCEED
 28632:20160720:115739.950 In get_counter_name() pdhIndex:1302
 28632:20160720:115739.951 End of get_counter_name():SUCCEED
 28632:20160720:115739.951 counter path converted to '\\BCAVES-SFB\Server Work Queues(*)\Queue Length'
 28632:20160720:115739.951 In get_perf_counter_value_by_path() path:\\BCAVES-SFB\Server Work Queues(*)\Queue Length interval:300
 28632:20160720:115739.952 End of get_perf_counter_value_by_path():SUCCEED
 28632:20160720:115739.952 End of PERF_COUNTER():SUCCEED
 28632:20160720:115739.953 for key [perf_counter["\1300(*)\1302",300]] received value [0.000000]
 28632:20160720:115739.953 In process_value() key:'bcaves-sfb.bca.int:perf_counter["\1300(*)\1302",300]' value:'0.000000'
 28632:20160720:115739.953 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115739.966 JSON before sending [{"request":"agent data","data":[{"host":"bcaves-sfb.bca.int","key":"net.if.discovery","value":"{\"data\":[{\"{#IFNAME}\":\"WAN Miniport (IP)\"},{\"{#IFNAME}\":\"WAN Miniport (IPv6)\"},{\"{#IFNAME}\":\"WAN Miniport (Network Monitor)\"},{\"{#IFNAME}\":\"Microsoft Kernel Debug Network Adapter\"},{\"{#IFNAME}\":\"WAN Miniport (IP)-WFP Native MAC Layer LightWeight Filter-0000\"},{\"{#IFNAME}\":\"WAN Miniport (IP)-QoS Packet Scheduler-0000\"},{\"{#IFNAME}\":\"WAN Miniport (IPv6)-WFP Native MAC Layer LightWeight Filter-0000\"},{\"{#IFNAME}\":\"WAN Miniport (IPv6)-QoS Packet Scheduler-0000\"},{\"{#IFNAME}\":\"WAN Miniport (Network Monitor)-WFP Native MAC Layer LightWeight Filter-0000\"},{\"{#IFNAME}\":\"WAN Miniport (Network Monitor)-QoS Packet Scheduler-0000\"},{\"{#IFNAME}\":\"Intel(R) 82574L Gigabit Network Connection\"},{\"{#IFNAME}\":\"Intel(R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000\"},{\"{#IFNAME}\":\"Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000\"},{\"{#IFNAME}\":\"Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000\"},{\"{#IFNAME}\":\"WAN Miniport (PPPOE)\"},{\"{#IFNAME}\":\"RAS Async Adapter\"},{\"{#IFNAME}\":\"Software Loopback Interface 1\"},{\"{#IFNAME}\":\"WAN Miniport (L2TP)\"},{\"{#IFNAME}\":\"WAN Miniport (SSTP)\"},{\"{#IFNAME}\":\"WAN Miniport (IKEv2)\"},{\"{#IFNAME}\":\"WAN Miniport (PPTP)\"},{\"{#IFNAME}\":\"Microsoft ISATAP Adapter\"}]}","clock":1469008660,"ns":47567672}],"clock":1469008660,"ns":64927891}]
 28632:20160720:115739.984 JSON back [{"response":"success","info":"processed: 1; failed: 0; total: 1; seconds spent: 0.009401"}]
 28632:20160720:115739.985 In check_response() response:'{"response":"success","info":"processed: 1; failed: 0; total: 1; seconds spent: 0.009401"}'
 28632:20160720:115739.985 info from server: 'processed: 1; failed: 0; total: 1; seconds spent: 0.009401'
 28632:20160720:115739.986 End of check_response():SUCCEED
 28632:20160720:115739.986 OK
 28632:20160720:115739.987 End of send_buffer():SUCCEED
 28632:20160720:115739.987 buffer: new element 0
 28632:20160720:115739.988 End of process_value():SUCCEED
 28632:20160720:115739.988 In need_meta_update() key:perf_counter["\1300(*)\1302",300]
 28632:20160720:115739.989 End of need_meta_update():FAIL
 28632:20160720:115739.989 End of process_active_checks()
 28632:20160720:115739.990 In get_min_nextcheck()
 28632:20160720:115739.990 End of get_min_nextcheck():1469008669
 52856:20160720:115740.571 In collect_perfstat()
 52856:20160720:115740.580 End of collect_perfstat()
 28632:20160720:115740.992 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115740.992 send_buffer() now:1469008660 lastsent:1469008659 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115740.993 End of send_buffer():SUCCEED
 52856:20160720:115741.581 In collect_perfstat()
 52856:20160720:115741.590 End of collect_perfstat()
 28632:20160720:115741.994 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115741.995 send_buffer() now:1469008661 lastsent:1469008659 now-lastsent:2 BufferSend:5; will not send now
 28632:20160720:115741.995 End of send_buffer():SUCCEED
 52856:20160720:115742.592 In collect_perfstat()
 52856:20160720:115742.604 End of collect_perfstat()
 28632:20160720:115742.997 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115742.997 send_buffer() now:1469008662 lastsent:1469008659 now-lastsent:3 BufferSend:5; will not send now
 28632:20160720:115742.998 End of send_buffer():SUCCEED
 52856:20160720:115743.606 In collect_perfstat()
 52856:20160720:115743.614 End of collect_perfstat()
 28632:20160720:115743.999 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115744.000 send_buffer() now:1469008663 lastsent:1469008659 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115744.000 End of send_buffer():SUCCEED
 52856:20160720:115744.615 In collect_perfstat()
 52856:20160720:115744.625 End of collect_perfstat()
 28632:20160720:115745.001 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115745.013 JSON before sending [{"request":"agent data","data":[{"host":"bcaves-sfb.bca.int","key":"perf_counter[\"\\1300(*)\\1302\",300]","value":"0.000000","clock":1469008660,"ns":88128295}],"clock":1469008665,"ns":112365532}]
 28632:20160720:115745.023 JSON back [{"response":"success","info":"processed: 1; failed: 0; total: 1; seconds spent: 0.000035"}]
 28632:20160720:115745.024 In check_response() response:'{"response":"success","info":"processed: 1; failed: 0; total: 1; seconds spent: 0.000035"}'
 28632:20160720:115745.024 info from server: 'processed: 1; failed: 0; total: 1; seconds spent: 0.000035'
 28632:20160720:115745.025 End of check_response():SUCCEED
 28632:20160720:115745.025 OK
 28632:20160720:115745.026 End of send_buffer():SUCCEED
 52856:20160720:115745.627 In collect_perfstat()
 52856:20160720:115745.637 End of collect_perfstat()
 28632:20160720:115746.027 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115746.028 End of send_buffer():SUCCEED
 52856:20160720:115746.638 In collect_perfstat()
 52856:20160720:115746.646 End of collect_perfstat()
 28632:20160720:115747.029 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115747.030 End of send_buffer():SUCCEED
 52856:20160720:115747.648 In collect_perfstat()
 52856:20160720:115747.653 End of collect_perfstat()
 28632:20160720:115748.031 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115748.032 End of send_buffer():SUCCEED
 52856:20160720:115748.654 In collect_perfstat()
 52856:20160720:115748.662 End of collect_perfstat()
 28632:20160720:115749.033 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115749.033 End of send_buffer():SUCCEED
 28632:20160720:115749.033 In process_active_checks() server:'monitor.wwi.dk' port:10051
 28632:20160720:115749.034 for key [system.cpu.num[online]] received value [4]
 28632:20160720:115749.034 In process_value() key:'bcaves-sfb.bca.int:system.cpu.num[online]' value:'4'
 28632:20160720:115749.034 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115749.034 End of send_buffer():SUCCEED
 28632:20160720:115749.035 buffer: new element 0
 28632:20160720:115749.035 End of process_value():SUCCEED
 28632:20160720:115749.035 In need_meta_update() key:system.cpu.num[online]
 28632:20160720:115749.035 End of need_meta_update():FAIL
 28632:20160720:115749.036 End of process_active_checks()
 28632:20160720:115749.036 In get_min_nextcheck()
 28632:20160720:115749.036 End of get_min_nextcheck():1469008670
 52856:20160720:115749.663 In collect_perfstat()
 52856:20160720:115749.671 End of collect_perfstat()
 28632:20160720:115750.037 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115750.049 JSON before sending [{"request":"agent data","data":[{"host":"bcaves-sfb.bca.int","key":"system.cpu.num[online]","value":"4","clock":1469008669,"ns":134795522}],"clock":1469008670,"ns":148481121}]
 28632:20160720:115750.059 JSON back [{"response":"success","info":"processed: 1; failed: 0; total: 1; seconds spent: 0.000041"}]
 28632:20160720:115750.059 In check_response() response:'{"response":"success","info":"processed: 1; failed: 0; total: 1; seconds spent: 0.000041"}'
 28632:20160720:115750.060 info from server: 'processed: 1; failed: 0; total: 1; seconds spent: 0.000041'
 28632:20160720:115750.060 End of check_response():SUCCEED
 28632:20160720:115750.061 OK
 28632:20160720:115750.061 End of send_buffer():SUCCEED
 28632:20160720:115750.062 In process_active_checks() server:'monitor.wwi.dk' port:10051
 52856:20160720:115750.673 In collect_perfstat()
 52856:20160720:115750.681 End of collect_perfstat()
 28632:20160720:115751.076 for key [vfs.fs.discovery] received value [{"data":[{"{#FSNAME}":"A:","{#FSTYPE}":"UNKNOWN","{#FSDRIVETYPE}":"removable"},{"{#FSNAME}":"C:","{#FSTYPE}":"NTFS","{#FSDRIVETYPE}":"fixed"},{"{#FSNAME}":"D:","{#FSTYPE}":"UDF","{#FSDRIVETYPE}":"cdrom"}]}]
 28632:20160720:115751.076 In process_value() key:'bcaves-sfb.bca.int:vfs.fs.discovery' value:'{"data":[{"{#FSNAME}":"A:","{#FSTYPE}":"UNKNOWN","{#FSDRIVETYPE}":"removable"},{"{#FSNAME}":"C:","{#FSTYPE}":"NTFS","{#FSDRIVETYPE}":"fixed"},{"{#FSNAME}":"D:","{#FSTYPE}":"UDF","{#FSDRIVETYPE}":"cdrom"}]}'
 28632:20160720:115751.077 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115751.077 End of send_buffer():SUCCEED
 28632:20160720:115751.078 buffer: new element 0
 28632:20160720:115751.078 End of process_value():SUCCEED
 28632:20160720:115751.079 In need_meta_update() key:vfs.fs.discovery
 28632:20160720:115751.079 End of need_meta_update():FAIL
 28632:20160720:115751.080 End of process_active_checks()
 28632:20160720:115751.080 In get_min_nextcheck()
 28632:20160720:115751.080 End of get_min_nextcheck():1469008689
 28632:20160720:115751.081 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115751.081 send_buffer() now:1469008671 lastsent:1469008670 now-lastsent:1 BufferSend:5; will not send now
 28632:20160720:115751.082 End of send_buffer():SUCCEED
 52856:20160720:115751.682 In collect_perfstat()
 52856:20160720:115751.690 End of collect_perfstat()
 28632:20160720:115752.083 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115752.084 send_buffer() now:1469008672 lastsent:1469008670 now-lastsent:2 BufferSend:5; will not send now
 28632:20160720:115752.084 End of send_buffer():SUCCEED
 52856:20160720:115752.691 In collect_perfstat()
 52856:20160720:115752.699 End of collect_perfstat()
 28632:20160720:115753.085 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115753.086 send_buffer() now:1469008673 lastsent:1469008670 now-lastsent:3 BufferSend:5; will not send now
 28632:20160720:115753.086 End of send_buffer():SUCCEED
 52856:20160720:115753.701 In collect_perfstat()
 52856:20160720:115753.709 End of collect_perfstat()
 28632:20160720:115754.087 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115754.088 send_buffer() now:1469008674 lastsent:1469008670 now-lastsent:4 BufferSend:5; will not send now
 28632:20160720:115754.088 End of send_buffer():SUCCEED
 52856:20160720:115754.710 In collect_perfstat()
 52856:20160720:115754.718 End of collect_perfstat()
 28632:20160720:115755.089 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:1/100
 28632:20160720:115755.100 JSON before sending [{"request":"agent data","data":[{"host":"bcaves-sfb.bca.int","key":"vfs.fs.discovery","value":"{\"data\":[{\"{#FSNAME}\":\"A:\",\"{#FSTYPE}\":\"UNKNOWN\",\"{#FSDRIVETYPE}\":\"removable\"},{\"{#FSNAME}\":\"C:\",\"{#FSTYPE}\":\"NTFS\",\"{#FSDRIVETYPE}\":\"fixed\"},{\"{#FSNAME}\":\"D:\",\"{#FSTYPE}\":\"UDF\",\"{#FSDRIVETYPE}\":\"cdrom\"}]}","clock":1469008671,"ns":178233953}],"clock":1469008675,"ns":200577908}]
 28632:20160720:115755.117 JSON back [{"response":"success","info":"processed: 1; failed: 0; total: 1; seconds spent: 0.006325"}]
 28632:20160720:115755.117 In check_response() response:'{"response":"success","info":"processed: 1; failed: 0; total: 1; seconds spent: 0.006325"}'
 28632:20160720:115755.118 info from server: 'processed: 1; failed: 0; total: 1; seconds spent: 0.006325'
 28632:20160720:115755.118 End of check_response():SUCCEED
 28632:20160720:115755.119 OK
 28632:20160720:115755.119 End of send_buffer():SUCCEED
 52856:20160720:115755.719 In collect_perfstat()
 52856:20160720:115755.727 End of collect_perfstat()
 28632:20160720:115756.120 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115756.121 End of send_buffer():SUCCEED
 52856:20160720:115756.728 In collect_perfstat()
 52856:20160720:115756.736 End of collect_perfstat()
 28632:20160720:115757.123 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115757.123 End of send_buffer():SUCCEED
 52856:20160720:115757.739 In collect_perfstat()
 52856:20160720:115757.747 End of collect_perfstat()
 28632:20160720:115758.125 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115758.126 End of send_buffer():SUCCEED
 52856:20160720:115758.749 In collect_perfstat()
 52856:20160720:115758.758 End of collect_perfstat()
 28632:20160720:115759.127 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115759.128 End of send_buffer():SUCCEED
 52856:20160720:115759.760 In collect_perfstat()
 52856:20160720:115759.768 End of collect_perfstat()
 28632:20160720:115800.129 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115800.129 End of send_buffer():SUCCEED
 52856:20160720:115800.769 In collect_perfstat()
 52856:20160720:115800.777 End of collect_perfstat()
 28632:20160720:115801.130 In send_buffer() host:'monitor.wwi.dk' port:10051 entries:0/100
 28632:20160720:115801.131 End of send_buffer():SUCCEED
 52856:20160720:115801.779 In free_cpu_collector()
 52856:20160720:115801.780 End of free_cpu_collector()
 28632:20160720:115802.132 In free_active_metrics()
 28632:20160720:115802.133 End of free_active_metrics()
 55132:20160720:115802.727 Zabbix Agent stopped. Zabbix 3.1.0 (revision 3342).