In my configuration file I have an entry that looks as such:

<Input eventlog>
     Query <QueryList>\
               <Query Id="0">\
                   #<Select Path="Application"></Select>\
                   #<Select Path="Security"></Select>\
                   #<Select Path="Setup"></Select>\
                   #<Select Path="System"></Select>\
                   <Select Path="Forwarded Events">*</Select>\
               </Query>\
           </QueryList>
</Input>

When I start NXlog, I get all logs (Application, Security, Setup, etc...) How do only allow the "Forwarded Events" logs?