Hi,
I hope that i understand good your question...
first of all you can't change the WMI Parsing rules.
if you wish to change the Parsing you will need to integrate the Data Source (in your case the DC.) via Collector - MEF.
Second point, you will need to write a "multi line" REGEX that will parse multiple logs.
Best Regards👍👍👍
David.