...
<TimeCreated (MMM DD HH:MM:SS)> <Hostname> CEF:0<CEFVersion>|<CompanyName>|<ProductName>|<ProductVersion>|<EventType>|<EventName>|<CEFSeverity>|value=<Value> dvchost=<Hostname> msg=<YYYY-MM-DD>|<hh:mm:ss>|<MetricType>|<InstanceName>|<EventName>|<Value>
...
<TimeCreated (MMM DD HH:MM:SS)> <Hostname> LEEF:1.0<LEEFVersion>|<CompanyName>|<ProductName>|<ProductVersion>|<EventType>|URL=<EventType> sev=<LEEFSeverity> resource=<Hostname> value=<Value> msg=<TimeCreated> <MetricType> <InstanceName> <EventName> <Value>
...