Windows NPS Logs

You can compare the capabilities here

Agent supports both windows and log input.

But I think perhaps if you want to decode XML you will still need to use filebeat with the xml_decode processor

Unless you can get to that via windows integration.