http://blogs.technet.com/b/heyscriptingguy/archive/2005/01/04/how-can-i-return-only-the-last-record-written-to-an-event-log.aspxHey, Scripting Guy! How can I read only the last record written to an event log? In other words, what is the WMI equivalent to the SQL statement Select Top 1 ? -- KM Hey, KM. Well, as it turns out WMI doesn’t have an equivalent to the Select Top command;en-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.technet.com/b/heyscriptingguy/archive/2005/01/04/how-can-i-return-only-the-last-record-written-to-an-event-log.aspx#3545454Fri, 11 Jan 2013 20:09:15 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3545454wizardpc<p>What&#39;s the 2008R2 equivalent for this? </p> <p>Set colLoggedEvents = objWMIService.ExecQuery _</p> <p> &nbsp; &nbsp;(&quot;Select * From Win32_NTLogEvent Where Logfile = &#39;Application&#39; AND &quot; &amp; _</p> <p> &nbsp; &nbsp; &nbsp; &nbsp;&quot;RecordNumber = &quot; &amp; intRecords)</p> <p>...returns 0 records</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3545454" width="1" height="1">http://blogs.technet.com/b/heyscriptingguy/archive/2005/01/04/how-can-i-return-only-the-last-record-written-to-an-event-log.aspx#3359680Mon, 04 Oct 2010 13:55:06 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3359680Greg<p>I know this is old, but is this reliable? &nbsp;I have heard that the Windows Event Log is a circular buffer, in that when the log is full, it will start dropping old logs to put in new ones. &nbsp;</p> <p>Does that mean that NumberOfRecords will not actually be returning the top recordnumber, and instead be returning the actual number of logs in the Event Log?</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3359680" width="1" height="1">