System.Diagnostics.EventLog 11.0.0-preview.4.26230.115

About

This package provides types that allow applications to interact with the Windows Event Log service.

When an error occurs in a Windows machine, the system administrator or support representative must determine what caused the error, attempt to recover any lost data, and prevent the error from recurring. It is helpful if applications, the operating system, and other system services record important events, such as low-memory conditions or excessive attempts to access a disk. The system administrator can then use the Windows Event Log to help determine what conditions caused the error and identify the context in which it occurred.

Key Features

• Allows reading from existing logs.
• Allows writing entries to logs.
• Can create or delete event sources.
• Can delete logs.
• Can respond to log entries.
• Can create new logs when creating an event source.

How to Use

if(!EventLog.SourceExists("MySource"))
{
    // An event log source should not be created and immediately used.
    // There is a latency time to enable the source, it should be created
    // prior to executing the application that uses the source.
    // Execute this sample a second time to use the new source.
    EventLog.CreateEventSource("MySource", "MyNewLog");
    Console.WriteLine("Event source created. Exiting, execute the application a second time to use the source.");
    // The source is created. Exit the application to allow it to be registered.
    return;
}

EventLog myLog = new();
myLog.Source = "MySource";
myLog.WriteEntry("Writing an informational entry to the event log.");

Notes:

• This assembly is only supported on Windows operating systems.
• Starting with Windows Vista, you must run the application as an administrator to interact with the Windows Event Log service using the System.Diagnostics.EventLog class.

Main Types

The main types provided by this library are:

Under the System.Diagnostics namespace, the main types are:

• System.Diagnostics.EventLog
• System.Diagnostics.EventLogEntry
• System.Diagnostics.EventLogEntryCollection
• System.Diagnostics.EventLogEntryType

Under the System.Diagnostics.Eventing.Reader namespace, the main types are:

• System.Diagnostics.Eventing.Reader.EventLogQuery
• System.Diagnostics.Eventing.Reader.EventLogReader
• System.Diagnostics.Eventing.Reader.EventLogRecord
• System.Diagnostics.Eventing.Reader.EventLogSession
• System.Diagnostics.Eventing.Reader.EventLogType
• System.Diagnostics.Eventing.Reader.EventRecord

Additional Documentation

• Microsoft Learn - System.Diagnostics.EventLog API reference
• Windows App Development - Event logging
• GitHub - Source code

Related Packages

• System.Diagnostics.PerformanceCounter

Feedback & Contributing

System.Diagnostics.EventLog is released as open source under the MIT license. Bug reports and contributions are welcome at the GitHub repository.