The former one is obsolete, please don't use in newly deployment. This document describes about the later one. If you want to know about the obsolete one, please see in_windows_eventlog(old).md NOTE: ...
The Winlog input generates a "Message" field which is meant to include a human-readable version of the StringInserts field (#2427). However, this field is consistently empty in logs generated by the ...