<Event>
    <Timestamp data_type="4">
        08/15/2018 14:14:42.061
    </Timestamp>
    <Computer-Name data_type="1">
        VSRV-NPS
    </Computer-Name>
    <Event-Source data_type="1">
        IAS
    </Event-Source>
    <User-Name data_type="1">
        v_pupkin
    </User-Name>
    <NAS-Identifier data_type="1">
        login
    </NAS-Identifier>
    <NAS-Port data_type="0">
        398
    </NAS-Port>
    <NAS-Port-Type data_type="0">
        5
    </NAS-Port-Type>
    <Service-Type data_type="0">
        8
    </Service-Type>
    <Client-IP-Address data_type="3">
        192.168.22.91
    </Client-IP-Address>
    <Client-Vendor data_type="0">
        0
    </Client-Vendor>
    <Client-Friendly-Name data_type="1">
        DOMAIN-VoIP-GW03-FXS01
    </Client-Friendly-Name>
    <Proxy-Policy-Name data_type="1">
        ProxyPolTest
    </Proxy-Policy-Name>
    <Provider-Type data_type="0">
        1
    </Provider-Type>
    <SAM-Account-Name data_type="1">
        DOMAIN\v_pupkin
    </SAM-Account-Name>
    <Authentication-Type data_type="0">
        1
    </Authentication-Type>
    <NP-Policy-Name data_type="1">
        VoIP
    </NP-Policy-Name>
    <Class data_type="1">
        311 1 192.168.6.82 08/06/2018 13:19:34 30023
    </Class>
    <MS-Extended-Quarantine-State data_type="0">
        0
    </MS-Extended-Quarantine-State>
    <Quarantine-Update-Non-Compliant data_type="0">
        1
    </Quarantine-Update-Non-Compliant>
    <MS-Quarantine-State data_type="0">
        0
    </MS-Quarantine-State>
    <Fully-Qualifed-User-Name data_type="1">
        DOMAIN.local/OU1/OU2/OU3/Василий Пупкин
    </Fully-Qualifed-User-Name>
    <Packet-Type data_type="0">
        1
    </Packet-Type>
    <Reason-Code data_type="0">
        0
    </Reason-Code>
</Event>

<Event>
    <Timestamp data_type="4">
        08/15/2018 14:14:42.061
    </Timestamp>
    <Computer-Name data_type="1">
        VSRV-NPS
    </Computer-Name>
    <Event-Source data_type="1">
        IAS
    </Event-Source>
    <Class data_type="1">
        311 1 192.168.6.82 08/06/2018 13:19:34 30023
    </Class>
    <MS-Extended-Quarantine-State data_type="0">
        0
    </MS-Extended-Quarantine-State>
    <MS-Quarantine-State data_type="0">
        0
    </MS-Quarantine-State>
    <Fully-Qualifed-User-Name data_type="1">
        DOMAIN.local/OU1/OU2/OU3/Василий Пупкин
    </Fully-Qualifed-User-Name>
    <MS-Link-Drop-Time-Limit data_type="0">
        120
    </MS-Link-Drop-Time-Limit>
    <Client-IP-Address data_type="3">
        192.168.22.91
    </Client-IP-Address>
    <Client-Vendor data_type="0">
        0
    </Client-Vendor>
    <Client-Friendly-Name data_type="1">
        DOMAIN-VoIP-GW03-FXS01
    </Client-Friendly-Name>
    <Proxy-Policy-Name data_type="1">
        ProxyPolTest
    </Proxy-Policy-Name>
    <Provider-Type data_type="0">
        1
    </Provider-Type>
    <SAM-Account-Name data_type="1">
        DOMAIN\v_pupkin
    </SAM-Account-Name>
    <Authentication-Type data_type="0">
        1
    </Authentication-Type>
    <NP-Policy-Name data_type="1">
        VoIP
    </NP-Policy-Name>
    <Cisco-AV-Pair data_type="1">
        shell:priv-lvl=15
    </Cisco-AV-Pair>
    <Quarantine-Update-Non-Compliant data_type="0">
        1
    </Quarantine-Update-Non-Compliant>
    <Service-Type data_type="0">
        6
    </Service-Type>
    <MS-Link-Utilization-Threshold data_type="0">
        50
    </MS-Link-Utilization-Threshold>
    <Packet-Type data_type="0">
        2
    </Packet-Type>
    <Reason-Code data_type="0">
        0
    </Reason-Code>
</Event>