(EventID:56 OR EventID:50) Provider_Name:TermDD