I'm trying to report on a specific Event Id in the Windows System Log with WMI Event Watcher. The query below reports on cpu usage above 20%
SELECT * from __InstanceModificationEvent WITHIN 2 WHERE TargetInstance ISA 'Win32_Processor' and TargetInstance.LoadPercentage > 20
but, I'm looking for the query, which will report on say EventID = 4 in the System Log ?
Is there a good website where I can go and readup on these type of WQL Queries and how it works ?
Thanks in advance.