Added spec for windows event logger