Event Viewer , how to add a "task" to it programatically

Question

I am currently writing Events Messages on to the event Viewer of the Operating system (windows 7), I am using c# & .net framework 4

When i use the front end to see the messages I have logged, I can see that there is a possibility through the front end to add a task, to a specific message.

My idea is to respond to a specific error on the Event viewer.

Like adding an error Handler as a "task" (as is called on the event viewer)

is this possible programatically ? (I know is possible through the front end)

thanks

score 0 · Answer 1 · answered Feb 20 '14 at 10:58

0

The Task Scheduler Managed Wrapper will allow you to do this. Look in particular at the EventTrigger which will allow you to hook in to Windows Events. The examples page has a pretty basic example of it.

answered Feb 20 '14 at 10:58

ajg

1,743
12
14

thanks for your answer, but is not related to this. What I was looking to do is to add a task to the eventtviewer programatically – user3292410 Feb 20 '14 at 14:50
Unless I've totally misunderstood your question, that's exactly what that does. When you add the task through the link in the EventViewer, its just creating a Scheduled task behind the scenes, with the trigger as an EventTrigger. Look at the SetBasic method in the examples page above, it takes 3 parameters - the first on in the Log Name (e.g. 'Application'), the second is the Source (e.g. 'YourAppName'), the third is the event id (e.g. 1000). – ajg Feb 20 '14 at 15:21
Hi, I don't see any reference to the EventViewer Log. Your link seems seems more to add a task to a scheduler, after some amount of research, i found the answer and posted and answer. thanks – user3292410 Feb 20 '14 at 17:11

score 0 · Accepted Answer · answered Feb 20 '14 at 17:12

after I did some research what I was after is :

public class EventViewer()
{
    EventLog _eventlog;

    public void createandreferenceEventViewer(string sLogNameTrimmed)
    {
            //Creates or reference the default Event Viewer
            if (!EventLog.SourceExists(sLogNameTrimmed))
            {                
                EventLog.CreateEventSource(sLogNameTrimmed, sLogNameTrimmed);
                Thread.Sleep(500); // Event viewer need latency to allow being written 
            }
            // Connect to the newly created / existing Log
            _eventlog = new EventLog(sLogNameTrimmed);
            _eventlog.Source = sLogNameTrimmed;
            _eventlog.EntryWritten += WrittenEntryEventHandler;
            _eventlog.EnableRaisingEvents = true;
    }

    void WrittenEntryEventHandler(object source, EntryWrittenEventArgs e)
        {
            switch (e.Entry.EntryType)
            {
                case EventLogEntryType.Error:
                        DO_ERROR_HANDLING_HERE();
                    break;
                case EventLogEntryType.Warning :
                        DO_WARNING_HANDLING_HERE();
                    break;
                default:
                    DO_DEFAULT_HANDLING_HERE();
                    break;
            }
        }
}

where WrittenEntryEventHandler will respond to all entries written to the Event Viewer. then later we can filter or add event handlers per type. Thanks to the ones that took time of reading the question itself

Thanks

Event Viewer , how to add a "task" to it programatically

2 Answers2