Collecting Audit Events
Consume Windows event logs through MiNiFi
Setting up ConsumeWindowsEventLog
Apply Filters
Using DefragmentText processor