title: If machine throws event log 5002 and it is not followed by the event 5004 I want to know that computer name
body: <p>there is a table with computer event logs, I am looking to get all computers that show event 5002 but only if that event is not followed by an event 5004, I can't seem to quite figure out how to query that</p>