push @filter, [("EventLog", "started", "The EventLog  has been Started")];
push @filter, [("EventLog", "stopped", "The EventLog has been Stopped")];