2. trying to analyze the raw logs with event viewer is futile. You need a log management solution that does filtering and reporting