https://www.hakanuzuner.com/exchange-2010-log-truncation-event-id/