Searching in windows/svc/eventlog