Hi
I have tested WMI connect method...Yes, WMI could work fine.
But remember and read ducument, it provide a message about it only parse security event (Note in the Page.6 of document ).....
and I also open a SR about Custom WMI Connect method....it will auto re-set to default setting about 10-15 mins....

wyldkao