How do i change my wineventlogs to output like this...
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
<EventID>4625</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12544</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2016-07-29T11:54:00.714207700Z" />
<EventRecordID>67620</EventRecordID>
<Correlation />
<Execution ProcessID="552" ThreadID="4700" />
<Channel>Security</Channel>
<Computer>***</Computer>
<Security />
</System>
instead of this...
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">- <System><Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" /><EventID>4625</EventID><Version>0</Version><Level>0</Level><Task>12544</Task><Opcode>0</Opcode> <Keywords>0x8010000000000000</Keywords><TimeCreated SystemTime="2016-07-29T11:54:00.714207700Z" /><EventRecordID>67620</EventRecordID><Correlation /><Execution ProcessID="552" ThreadID="4700" /> <Channel>Security</Channel> <Computer>***</Computer><Security /> </System>
