input {
  eventlog {
    type  => 'Win32-EventLog'
    logfile  => 'System'
  }
}