# Win32_NTEventlogFile - Retrieve: true