Post by Murali How to retrive EventData details of an eventlog using wmi query?
Try this: How Can I Retrieve Information From My Event Logs Regarding Unsuccessful Logons? http://www.microsoft.com/technet/scriptcenter/resources/qanda/jan05/hey0126.mspx