Way to modify events collected by LEM agents?

While there are connectors that will direct the Agent to many places in the Windows Event Logs, if we don't have a connector for it, you'll need to put in a support request for a new reader for that log location.

thanks curtisi‌, I have since figured how to modify some of the connectors to do some of what I need.  However I did want to ask a follow up question.  So there is no way to clone and customize the generic connectors for MS Event logs, ie-  ntapplication.xml, or ntsystem.xml?  Thanks!

There's no supported or official way, but they're just files like anything else.