WMI 条目到达事件访问事件 ID

发布于 2024-12-26 22:00:01 字数 341 浏览 1 评论 0原文

当我使用 WMI 监视事件日志时，尝试获取事件 ID 时遇到一个小问题。这是我的代码：

private static void EventLogMonitor(object sender, EventArrivedEventArgs e)
{
    int realEventId = (int)(e.NewEvent.Properties["EventID"].Value);
    ...

但它无法为我获取事件 ID，只是抛出异常。有谁知道应该用什么来代替上面代码行中的 "EventID" ，以便我可以访问触发此处理程序的事件日志条目写入事件的事件 ID？

原文

I am having a small problem trying to get the Event ID when I use WMI to monitor the event log. Here is my code:

private static void EventLogMonitor(object sender, EventArrivedEventArgs e)
{
    int realEventId = (int)(e.NewEvent.Properties["EventID"].Value);
    ...

But it fails to pick up the Event ID for me, just throwing an exception. Does anybody know what should go in place of "EventID" in the line of code above so that I can access the Event ID of the event log entry written event that fires this handler?

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

寄居者 2025-01-02 22:00:01

我找到了如何做到这一点，对于其他发现这有用的人来说，这里是代码：

private static void EventLogMonitor(object sender, EventArrivedEventArgs e)
{
    ManagementBaseObject targetInstance = (ManagementBaseObject)e.NewEvent
                                                  .GetPropertyValue("TargetInstance");
    UInt16 EventId = (UInt16)(targetInstance.GetPropertyValue("EventCode"));

I found out how to do this, for anybody else that finds this useful here is the code:

private static void EventLogMonitor(object sender, EventArrivedEventArgs e)
{
    ManagementBaseObject targetInstance = (ManagementBaseObject)e.NewEvent
                                                  .GetPropertyValue("TargetInstance");
    UInt16 EventId = (UInt16)(targetInstance.GetPropertyValue("EventCode"));

回复收藏 0 原文

~没有更多了~