Failed Logins

I am trying to pin down where a user account is tied to within Eventlog Analyzer. Is seems to be failing against; Caller Process Name: C:\ ManageEngine\ EventLog\ bin\ SysEvtCol.exe

Has anyone seen a user account tied to this? ME's Services are using local system accounts, I verified that.