{
    "session_properties": {
        "session_name": "Sealighter-Trace",
        "output_format": "stdout",
        "buffering_timout_seconds":  10
    },
    "user_traces": [
        {
            "trace_name": "ProcTrace01",
            "provider_name": "Microsoft-Windows-Kernel-Process",
            "keywords_any": 16,
            "filters": {
                "any_of": {
                    "event_id_is": [ 1, 2 ]
                }
            },
            "buffers": [
                {
                    "event_id": 1,
                    "max_before_buffering": 10,
                    "properties_to_match": [
                        "ImageName"
                    ]
                }
            ]
        }
    ]
}