log × 17
event × 15
event-log-monitor × 14
server × 10
2012r2 × 2