{
    "TimberWinR": {
        "Inputs": {
            "WindowsEvents": [
                {
                    "source": "Application,System",
                    "binaryFormat": "PRINT",
                    "resolveSIDS": true
                }
            ],
            "Tcp": [
                {
                    "_comment": "Output from NLog",
                    "port": 5140
                }
            ]
        },
        "Filters": [
            {
                "grok": {
                    "condition": "\"[EventTypeName]\" == \"Information Event\"",
                    "match": [
                        "Text",
                        ""
                    ],
                    "drop": "true"
                }
            }
        ],
        "Outputs": {
            "Redis": [
                {
                    "_comment": "Change the host to your Redis instance",
                    "port": 6379,
                    "host": [
                        "logaggregator.mycompany.svc"
                    ]
                }
            ]
        }
    }
}