$VAR1 = {
          'TimeGenerated' => 1359043271,
          'TimeGeneratedDate' => '2013-01-24 09:01:11',
          'RecordNumber' => 22733,
          'TimeWrittenDate' => '2013-01-24 09:01:11',
          'UserType' => undef,
          'UserName' => undef,
          'EventType' => 'Audit success',
          'Source' => 'Microsoft-Windows-Security-Auditing',
          'TimeWritten' => 1359043271,
          'ClosingRecordNumber' => 0,
          'Computer' => 'dev',
          'EventID' => 4648,
          'EventTypeCode' => 8,
          'Length' => 0,
          'UserDomain' => undef,
          'Category' => 12544
        };