C:\ProgramData\Elastic\Beats\winlogbeat