http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/logs/eventlogs/
http://etutorials.org/Server+Administration/Active+directory/Part+III+Scripting+Active+Directory+with+ADSI+ADO+and+WMI/Chapter+26.+Scripting+with+WMI/26.6+Querying+the+Event+Logs/
http://www.paessler.com/manuals/prtg/wmi_event_log_sensor
----
"SELECT * FROM __InstanceCreationEvent WITHIN 60 WHERE TargetInstance ISA 'Win32_NTLogEvent' and TargetInstance.EventType <= 2"
http://www.codeproject.com/Articles/42571/WMI-Windows-Event-Logs-and-User-Privileges
http://msdn.microsoft.com/en-us/library/aa394593%28v=vs.85%29.aspx
http://www.siccolo.com/Articles/CodeProject/LogWatcher_RSS_feed/build_log_watcher_rss_feed_using_WMI.html
http://sourceforge.net/projects/eventlogmonitor/files/
http://etutorials.org/Server+Administration/Active+directory/Part+III+Scripting+Active+Directory+with+ADSI+ADO+and+WMI/Chapter+26.+Scripting+with+WMI/26.6+Querying+the+Event+Logs/
http://sourceforge.net/projects/jarapac/
http://algo.math.ntua.gr/~symvonis/other-material/java_material/docs/technotes/guides/rmi/socketfactory/index.html
http://www.cnblogs.com/guotd/archive/2011/12/21/2295328.html
http://docs.oracle.com/javase/7/docs/technotes/guides/rmi/socketfactory/index.html
http://sourceforge.net/p/eventlogmonitor/code/HEAD/tree/eventlogmon/