Windows event log, rolls over after 20mb it writes old entries. Lots of other logs doing it to. osquery? will just keep writing until the size gets so large it crashes the daemon