I understand, not trying to step on toes. The utf8 issue is blocking the shipping of some sysmon logs using

windows_events

- I think I am seeing it more because of recent sysmon updates