Refactoring Windows Event Log samples