create NONclustered INDEX [WindowsEventAlertRuleOccurrences_CLUST] ON [WindowsEventAlertRuleOccurrences] 
(
        [AlertRuleID]
       ,[DeviceID]
       ,[TimestampTicks] 
)
go

ALTER TABLE [WindowsEventNT6Alert]  ADD  CONSTRAINT [WindowsEventNT6Alert_PK] PRIMARY KEY 
	nonCLUSTERED 
(
	[WindowsEventNT6AlertGuid] 
)
go