ntevl probe taking long to get events from the Windows event log