To determine the name of a custom eventlog container, complete the following steps.
1. Open the Event Viewer application.
2. Select the custom container you are looking for (for example DNS Server).
3. Right click on the container and select Properties.
4. The name of the container is the name of the file (without the extension) displayed in the Log path field.
(for example for C:\WINDOWS\system32\winevt\Logs\Security.evtx it is Security).