title: Wevtutil to output event log description
body: <p>Is there anyway to only output the description field in an event log entry?</p>
  
  <p>Im current using:</p>
  
  <pre><code>wevtutil qe Application /q:*[System[(EventID=431)]] /f:text /rd:true /c:2 /gm:true &gt; C  :\query.txt
  </code></pre>
  
  <p>However this output everything.  I just want to output the description which is under:</p>
  
  <pre><code>&lt;EventData&gt; 
  &lt;Data&gt; Description bllah blah&lt;/data&gt; 
  &lt;/EventData&gt;
  </code></pre>