text
Tip:logparser to open eventlog with spaces in their name use single quotes eg logparser -i:evt “select * from ‘mimesweeper log’