[WinEventLog]
interval=60
evt_resolve_ad_obj = 0
evt_dc_name=
evt_dns_name=
index = idx_tin_windows
sourcetype = events_windows