Windows Event Size Reducer

This add-on strips the repeated text from certain windows events, this leads to a reduction in license consumption, and disk usage by zero value repeated content within these security events. It works with the Splunk supplied Windows TA and is designed to reduce the event size while maintaining the content that makes the event CIM compliance for apps like Enterprise Security, PCI Compliance or IT Service Intelligence. There is also a convenient dashboard included to allow you to recognise the benefits. It is currently known to work with the following eventcodes: 4624, 4625, 4626, 4634, 4688, 4769