Grok Lines for Windows Event Logs

Good Evening,

I'm getting syslog data (port 514) sent to Elastic, but it's not parsed.

Does anyone have some Grok statements that manually parse the data I could use?

Everything is stuck in the message field and not really searchable.

Cheers