Stack Overflow
Stack Overflow

Questions tagged [eventlog-source]

Questions about the Source attribute of Microsoft Windows Event Log Entries

66 questions
0
votes
1 answer

powershell get-eventlog add if more than 5 times

I am using: "%windir%\system32\WindowsPowerShell\v1.0\powershell.exe" $log=Get-EventLog -LogName Security -InstanceID 4625 -After (Get-Date).AddDays(-60); if (($log)) {Write-Output $log[0].Message} ELSE {Write-Output 'WARNING-NoEventFound'} This…
Rolando
  • 1
  • 1
0
votes
1 answer

Writing to the event log without admin

I am admin on my local machine. However the app I am creating (an outlook VSTO addin) will be deployed by a deployment admin to users who won't have admin. The app installs correctly. My issue is that I have code which checks if an…
Sniipe
  • 1,116
  • 3
  • 13
  • 28
0
votes
1 answer

Windows 10 Event Log Parsing

Is it possible to parse exported or saved .evtx files and get relevant information (Xml details)of Windows 10 Event Logs using System.Diagnostics.EventLog class in visual studio. I need to develop a tool which can extract forensically relevant…
Sharika R Nair
  • 1
  • 1
0
votes
0 answers

Cannot write to custom event log

I have created a simple Windows service. The service registers a custom event source and log. For testing purposes I have named the log "asd" and the source ".asd". Both the log and source are correctly created, the service is correctly installed…
J. Doe
  • 329
  • 3
  • 12
0
votes
1 answer

C#_EventLog Exception

I’m trying to write a simple event log but i confront with “System.Security.SecurityException: The source was not found...” and i searched a lot but couldn’t find an efficient solution, I really really appreciate if someone help me with that I…
S.Katuzian
  • 13
  • 6
0
votes
2 answers

how to write in windows event logs using Ada language?

an Ada application which will write in to windows event logs? i have tried to use system call in Ada but its not working this is main.adb with System; with Interfaces.C; use Interfaces.C; with Ada.Text_IO; use Ada.Text_IO; with…
a verma
  • 25
  • 6
0
votes
1 answer

C# Read Eventlog from evtx file with EventLog Class

I'm trying to read a stored .evtx with the EventLog Class from System.Diagnostics. but it doesn't work. Isn't it possible to read a stored evtx file with EventLog Class or where is the problem? Below is My Code string source = @"S:\test.evtx"; …
flaeckli
  • 100
  • 1
  • 9
0
votes
1 answer

EventCreate.exe creates a "CustomSource" value, what does it mean?

The command-line EventCreate.exe tool registers a user-defined event source in the Registry for the Windows Event Log Viewer to use, like this: eventcreate /t INFORMATION /ID 100 /L "Application" /SO [SourceName] /D "Description" I wrote an app…
Remy Lebeau
  • 555,201
  • 31
  • 458
  • 770
0
votes
1 answer

Requested registry is not allowed

When I run the code below I get Exception Unhandled System.Security.SecurityException:'Requested registry access is not allowed'. I have all the necessary machine access. namespace EventViewer { class Program { static void…
Stanley Mabunda
  • 19
  • 11
0
votes
1 answer

.NET Runtime version 4.0.30319.0. There was a failure initializing profiling API attach infrastructure.

Lately I started noticing ".NET Runtime version 4.0.30319.0 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 10288. Message ID:…
user781700
  • 844
  • 3
  • 15
  • 27
0
votes
1 answer

How to change the value of an attribute in an instrumentation manifest with msbuild?

The Microsoft EventRegister Tool creates an instrumentation manifest file along with a resource file during project compilation. I would like to move those files to another path after compilation and change two attributes in the instrumentation…
BdN3504
  • 1,693
  • 21
  • 29
0
votes
1 answer

Determining if user is actually logged off in a domain - Windows Active Directory

I am writing a windows service which monitors accounts login and logoff events within a domain(Windows 2012). The login event id is 4624 and the logoff event id is 4634. But however I am seeing these two events in pairs i.e the event 4624…
Rajat Paliwal
  • 634
  • 7
  • 11
0
votes
1 answer

How to get just description field from a wevtutil output

I can fetch latest 5 events generated by MsiInstaller from Event logs with - wevtutil qe Application /rd:true /f:text /c:5 /q:"*[System[Provider[@Name='MsiInstaller']]]" But the output is too descriptive. Is it possible to get only the description…
A_N
  • 127
  • 1
  • 1
  • 14
0
votes
2 answers

Custom Event Logging in a Windows Service

In the project installer i am creating a custom event log. But when my service starts my all logs are going to the "Application" instead of my cuustom log. Below is the code which i have added to installer. // Create Event Source and Event Log …
Mehwish
  • 11
  • 1
  • 5
0
votes
1 answer

Custom Windows Eventlog, register one source in multiple eventlogs

Is it possible, for example to have a source "MyApp" and register it to Application eventlog and another custom eventlog?
Legends
  • 21,202
  • 16
  • 97
  • 123
1 2 3
4
5