I also suspect you are missing a "use" statement. If you still cannot get it to work try the more flexible WMI instead: -

use strict;
use Win32::OLE;

my $w = Win32::OLE->GetObject("winmgmts:");
die "failed to get obj\n" if !defined $w;

my $q = $w->ExecQuery(qq(SELECT * FROM Win32_NTLogEvent where Logfile=
+"SYSTEM"));
die "failed to create query\n" if !defined $q;

my @t = qw(Error Warning Information SecurityAuditSuccess SecurityAudi
+tFailure);

foreach my $r (sort {$a->RecordNumber > $b->RecordNumber} in $q) {
    print
        join(',' , 
            $r->TimeWritten, 
            $t[$r->EventType - 1], 
            @$r{"ComputerName", "SourceName", "EventCode"}, 
            substr($r->Message, 0, -3)
         )."\n";
}
[download]