http://msmvps.com/blogs/nickwienholt/archive/2006/11/21/wevtutil-queries.aspxIt is possible to query the event log in Windows Vista using the WEVUTIL command line tool, passing any arbitrarily complex query. Unfortunately, the syntax needed by the query command line paramter (/q) doesn't seem to be documented (I was searchingenCommunityServer 2008.5 SP2 (Build: 40407.4157)