Event logs

Event logs

If someone (another domain adminstrator) cleared the event logs, how can those event logs be recovered (which tools) without shutting down the machine?