$xmlQuery = @'
   <QueryList>
       <Query Id="0" Path="System">
           <Select Path="System">*[System[(Level=2 or Level=3) and TimeCreated[timediff(@SystemTime) <= 2592000000]]]</Select>
       </Query>
   </QueryList>
   '@
   Get-WinEvent -FilterXML $xmlQuery