http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/logs/eventlogs/

http://etutorials.org/Server+Administration/Active+directory/Part+III+Scripting+Active+Directory+with+ADSI+ADO+and+WMI/Chapter+26.+Scripting+with+WMI/26.6+Querying+the+Event+Logs/

http://www.paessler.com/manuals/prtg/wmi_event_log_sensor

----

"SELECT * FROM __InstanceCreationEvent WITHIN 60 WHERE TargetInstance ISA 'Win32_NTLogEvent' and TargetInstance.EventType <= 2" http://www.codeproject.com/Articles/42571/WMI-Windows-Event-Logs-and-User-Privileges http://msdn.microsoft.com/en-us/library/aa394593%28v=vs.85%29.aspx http://www.siccolo.com/Articles/CodeProject/LogWatcher_RSS_feed/build_log_watcher_rss_feed_using_WMI.html http://sourceforge.net/projects/eventlogmonitor/files/ http://etutorials.org/Server+Administration/Active+directory/Part+III+Scripting+Active+Directory+with+ADSI+ADO+and+WMI/Chapter+26.+Scripting+with+WMI/26.6+Querying+the+Event+Logs/ http://sourceforge.net/projects/jarapac/ http://algo.math.ntua.gr/~symvonis/other-material/java_material/docs/technotes/guides/rmi/socketfactory/index.html http://www.cnblogs.com/guotd/archive/2011/12/21/2295328.html http://docs.oracle.com/javase/7/docs/technotes/guides/rmi/socketfactory/index.html http://sourceforge.net/p/eventlogmonitor/code/HEAD/tree/eventlogmon/