<ViewerConfig>
<QueryConfig>
<QueryParams>
<Simple>
<Source>Microsoft-Windows-Diagnostics-Networking</Source>
<Channel>System</Channel>
<RelativeTimeInfo>0</RelativeTimeInfo>
<EventId>6100</EventId>
</Simple></QueryParams>
<QueryNode>
<Name ResourceId="%windir%\system32\ndfapi.dll, -40124">Network Diagnostics Events</Name>
<QueryList>
<Query Id="0" Path="System"><Select Path="System">*[System[Provider[@Name='Microsoft-Windows-Diagnostics-Networking'] and (EventID=6100)]]</Select></Query>
</QueryList>
</QueryNode>
</QueryConfig>
</ViewerConfig>