How to audit failure events for Windows security eventlog in C#

Question

i need to access Audit Failure under Window log -> Security event instantly when it logs, is there any way to capture it instantly when it logs. i need to access real time attempts.
currently i am reading this from EventLogEntry class in c#, but i need a my application to run when Audit Failure occurs.

 foreach (EventLogEntry entry in log.Entries)
   {
     if (entry.EntryType==EventLogEntryType.FailureAudit)
       {
          ///
       }
   }

some thing similar to:

    EventLog myNewLog = new EventLog();
    myNewLog.Log = "MyCustomLog";                      

    myNewLog.EntryWritten += new EntryWrittenEventHandler(MyOnEntryWritten);
    myNewLog.EnableRaisingEvents = true;

Event log events, some like this i want to trigger windows log also

score 0 · Accepted Answer · answered Feb 28 '13 at 13:10

0

You can get EventLogs using EventLog.GetEventLogs() method:

class Program
{
    static void Main(string[] args)
    {
        EventLog log = EventLog.GetEventLogs().First(o => o.Log == "Security");
        log.EnableRaisingEvents = true;
        log.EntryWritten += (s, e) => { Console.WriteLine(e.Entry.EntryType); };
        Console.WriteLine(log.LogDisplayName);
        Console.ReadKey();
    }
}

answered Feb 28 '13 at 13:10

StaWho

2,488
17
24

will this application display log details, when any log get written in Security section – user1523935 Feb 28 '13 at 13:14
as i discussed , i need real time – user1523935 Feb 28 '13 at 13:15
http://stackoverflow.com/questions/15153322/missing-source-ip-address-and-source-port-number-in-event-log – user1523935 Mar 01 '13 at 08:18

score 0 · Answer 2 · answered Mar 26 '21 at 22:50

0

void Main()
{
    var eventLog = new EventLog();
    eventLog.Log = "Security";
    
    eventLog.Entries.Cast<EventLogEntry>()
    .OrderByDescending(e => e.TimeGenerated);
}

answered Mar 26 '21 at 22:50

Álvaro Blázquez Sarabia

45
1
5

1

This isn't exactly what the question is looking for. It asks for a way to get the "event instantly when it logs". – BDL Mar 27 '21 at 11:20

How to audit failure events for Windows security eventlog in C#

2 Answers2

Linked