InTrust 11.4 Custom Data source

Trying to create custom data source to collect WSUS logs but when I setup custom data source for error.log it does not align in InTrust 11.4 but I am able to align it in Excel. How to setup custom data source for each type of logs below?  Also can this be collected in Real-time need to use Traditional (scheduled job) collection.

 

  1. WSUS

Windows Internal  Database

C:\Windows\WID\Log

      Erro*.log

log_*.trc

system_health_*.xel

 

                   C:\windows\system32\logfiles\httperr

Httperr*.log

 

                   C:\Program Files\Update Services\Logfiles

           

Change.log

SoftwareDistribution.log

Also for Windows Firewall log can it be collected in real-time.