How to get Properties from "General" tab? RRS feed

  • Question

  • Hi All,


    I've been looking at the Event Log API, and when doing an EvtQuery()

    I see the Properties for "System", and they have some of the

    information I want, but I really want to get the information

    that's on the "General" tab, from the Event Viewer, like the "full" Message

    and Properties that are more like what can get from WMI.


    Is it possible to get those, possibly using the Variants instead of from XML?

    Basically I want to get all the Properties from the "General" tab

    with as little "conversion" as possible.




    Monday, June 27, 2011 3:11 PM

All replies

  • I think I found the answer.


    I ran, pretty much the same, sample code from the docs:

    Rendering Events->Accessing Event Messages

    and here's a sample of the result:


    Publisher name: 'Microsoft-Windows-WMI'

    Event message: 'Windows Management Instrumentation Service started sucessfully'


    So it looks like I can get the "full" Message. :-)

    I can just "convert" the other Properties I want

    from "System".





    Tuesday, June 28, 2011 9:34 PM