How to collect the new "Applications and Services Logs" found on Windows 7 or Windows Server 2008 using WMI?

Question

In Windows Server 2008 and Windows 7 there are new Events categorized under "Applications and Services Logs". There is also a subfolder called Microsoft which has tons of subfolders as well.

Is there any way to collect these events through WMI? For the regular "Windows Logs" such as Application and Security, it is possible to use the Win32_NTLogEvent WMI class in the cimv2 namespace. However, this class does not provide access to the new Microsoft event logs.

Any ideas?

Answer 1

Based on the dearth of WMI answers, it may not be possible; perhaps you could consider using PowerShell or calling the command-line wevtutil utility?