system:
  provider: VMware Tools
  guid: ''
  event_source_name: ''
  event_id: 1000
  version: 0
  level: 3
  task: 0
  opcode: 0
  keywords: 36028797018963968
  time_created: '2014-11-26T23:25:05.000000Z'
  event_record_id: 1187
  correlation: {}
  execution:
    process_id: 0
    thread_id: 0
  channel: Application
  computer: IE10Win7
  security:
    user_id: S-1-5-18
event_data: {}