[WinEventLog]
interval=60
evt_resolve_ad_obj = 0
evt_dc_name=
evt_dns_name=
index = idx_m-tic_windows
sourcetype = events_windows