perl -00pe 's#^\[WinEventLog://(?:Application|Security|System|ForwardedEvents|Setup)\]\n.*^index\s*=\s*\K.+(?=_(?:np|pr)\s*$)#window#ms' inputs.conf