well from the screenshot, I can see yu are querying the Application log, but Windows Process Activation Service events, including Event ID 5002 for application pool rapid-fail protection, are always written to the System log. You need to change the LogName parameter in your script from Application to System to correctly locate these crashes.
You can update your command to Get-WinEvent -LogName System | Where-Object {$_.TimeCreated.ToString('yyyy/MM/dd HH:mm:ss') -like '2026/05/15 10*'} | Where-Object {$_.Id -eq 5002} to pull the relevant records. If querying the System log still yields nothing, it indicates that your worker processes are hanging indefinitely rather than terminating and triggering an application pool shutdown. In that scenario, you should inspect the HTTP request error logs located at C:\Windows\System32\LogFiles\HTTPERR for 503 Service Unavailable queue-full events. You will also need to capture a manual memory dump of the w3wp.exe processes while they are actively hung so we can analyze the internal thread stacks for deadlocks.
Hope this helps :)
VPHAN