windows-server-2003/admin/wmi/wbem/scripting/samples/general/ntevent.vbs

on error resume next
set events = GetObject("winmgmts:{impersonationLevel=impersonate}").ExecNotificationQuery _ 
		("select * from __instancecreationevent where targetinstance isa 'Win32_NTLogEvent'") 					

if err <> 0 then
	WScript.Echo Err.Description, Err.Number, Err.Source
end if 

do 
	' Note that the timeout value below (in ms) passed
	' as an argument can explicitly specified

	set NTEvent = events.nextevent ()
	if err <> 0 then
		WScript.Echo Err.Number, Err.Description, Err.Source
	else		
		WScript.Echo NTEvent.TargetInstance.Message
	end if
	exit do
loop

WScript.Echo "finished"