BACK TO INDEX

Win32_NTEventlogFile
CIM_DataFile is a type of logical file that is a named collection of data or executable code. The behavior of the provider backing this class will be changed in future releases. Currently the provider returns both files on fixed disks as well as files on mapped logical disks. In the future, only instances of files on local fixed disks will be returned.
NameSpace Path
\ROOT\CIMV2\SMS
PROPERTYSMS_REPORTCIMTYPEDESCRIPTION
AccessMaskUInt32The AccessMask property is a bit array representing the access rights to the given file or directory held by the user or group on whose behalf the instance is returned. This property is only supported under Windows NT and Windows 2000. On Windows 98 and on Windows NT/2000 FAT volumes, FULL_ACCESS is returned, indicating no security has been set on the object.
ArchiveBooleanThe Archive property is a boolean value indicating that the file should be archived.
CaptionStringThe Caption property is a short textual description (one-line string) of the object.
CompressedBooleanThe Compressed property is a boolean value indicating that the file is compressed.
CompressionMethodStringThe CompressionMethod property is a free form string indicating the algorithm or tool used to compress the logical file. If it is not possible (or not desired) to describe the compression scheme (perhaps because it is not known), use the following words: "Unknown" to represent that it is not known whether the logical file is compressed or not, "Compressed" to represent that the file is compressed but either its compression scheme is not known or not disclosed, and "Not Compressed" to represent that the logical file is not compressed.
CreationClassNameStringThe CreationClassName property is a string indicating the name of this class.
CreationDateDateTimeThe CreationDate property is a datetime value indicating the file's creation date.
CSCreationClassNameStringThe CSCreationClassName property is a string indicating the class of the computer system.
CSNameStringThe CSName property is a string indicating the name of the computer system.
DescriptionStringThe Description property provides a textual description of the object.
DriveStringThe Drive property is a string representing the drive letter (including colon) of the file. Example: c:
EightDotThreeFileNameStringThe EightDotThreeFileName property is a string representing the DOS-compatible file name for this file. Example: c:\progra~1
EncryptedBooleanThe Encrypted property is a boolean value indicating that the file is encrypted.
EncryptionMethodStringThe EncryptionMethod property is a free form string indicating the algorithm or tool used to encrypt the logical file. If it is not possible (or not desired) to describe the encryption scheme (perhaps for security reasons), use the following words: "Unknown" to represent that it is not known whether the logical file is encrypted or not, "Encrypted" to represent that the file is encrypted but either its encryption scheme is not known or not disclosed, and "Not Encrypted" to represent that the logical file is not encrypted.
ExtensionStringThe Extension property is a string representing the file's extension (without the dot). Example: txt, mof, mdb.
FileNameStringThe FileName property is a string representing the filename (without extension) of the file. Example: autoexec
FileSizeUInt64The FileSize property represents the size of the file (in bytes).
FileTypeStringThe FileType property is a string descriptor representing the file type (indicated by the Extension property).
FSCreationClassNameStringThe FSCreationClassName property is a string indicating the class of the file system.
FSNameStringThe FSName property is string indicating the name of the file system.
HiddenBooleanThe Hidden property is a boolean value indicating if the file is hidden.
InstallDateDateTimeThe InstallDate property is datetime value indicating when the object was installed. A lack of a value does not indicate that the object is not installed.
InUseCountUInt64The InUseCount property is an integer indicating the number of 'file opens' that are currently active against the file.
LastAccessedDateTimeThe LastAccessed property is a datetime value indicating the time the file was last accessed.
LastModifiedDateTimeThe LastModified property is a datetime value indicating the time the file was last modified.
LogfileNameStringThe LogFileName property indicates name of the log file.
ManufacturerStringManufacturer string from version resource if one is present.
MaxFileSizeUInt32The MaxFileSize property indicates the maximum size (in bytes) permitted for the log file. If the file exceeds its maximum size, its contents are moved to another file and the primary file is emptied. A value of zero indicates no size limit.
NameStringThe Name property is a string representing the inherited name that serves as a key of a logical file instance within a file system. Full path names should be provided. Example: c:\winnt\system\win.ini
NumberOfRecordsUInt32Number of records in the log file. This value is determined by calling the Win32 function GetNumberOfEventLogRecords.
OverwriteOutDatedUInt32Number of days after which an event can be overwritten. Values are: 0 = Any entry can be overwritten when necessary.1..365 = Events that have been in the log file for one year (365 days) or less can be overwritten.4294967295 = Nothing can be ever be overwritten. There is an interdependence between the OverWriteOutDated property (which is writable) value and the OverWritePolicy property (which is not writable) value. If one changes the OverWriteOutDated property value to 0, the OverWritePolicy property value will be 'henNeeded' If one changes the OverWriteOutDated property value to 1-365, the OverWritePolicy property value will be 'outDated' If one changes the OverWriteOutDated property value to 4294967295, the OverWritePolicy property value will be 'Never'.
OverWritePolicyStringCurrent overwrite policy the Windows NT/Windows 2000 Event Log service employs for this log file. The possible values of the property are: WhenNeeded - This corresponds to OverWriteOutdated = 0. OutDated - This corresponds to OverWriteOutdated of 1 to 365. Never - This corresponds to OverWriteOutdated = 4294967295. There is an interdependence between the OverWriteOutDated property (which is writable) value and the OverWritePolicy property (which is not writable) value. If one changes the OverWriteOutDated property value to 0, the OverWritePolicy property value will be 'henNeeded' If one changes the OverWriteOutDated property value to 1-365, the OverWritePolicy property value will be 'outDated' If one changes the OverWriteOutDated property value to 4294967295, the OverWritePolicy property value will be 'Never'.
PathStringThe Path property is a string representing the path of the file. This includes leading and trailing backslashes. Example: \windows\system\
ReadableBooleanThe Readable property is a boolean value indicating if the file can be read.
SourcesStringThe Sources property indicates the applications that are registered to log into this log file.
StatusStringThe Status property is a string indicating the current status of the object. Various operational and non-operational statuses can be defined. Operational statuses are "OK", "Degraded" and "Pred Fail". "Pred Fail" indicates that an element may be functioning properly but predicting a failure in the near future. An example is a SMART-enabled hard drive. Non-operational statuses can also be specified. These are "Error", "Starting", "Stopping" and "Service". The latter, "Service", could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither "OK" nor in one of the other states.
SystemBooleanThe system property is a boolean value indicating if the file is a system file.
VersionStringVersion string from version resource if one is present.
WriteableBooleanThe Writeable property is a boolean value indicating if the file can be written.
SAMPLE DATA INSTANCE
   [LOCALE(1033): ToInstance Amended]
   instance of Win32_NTEventlogFile
   {
    Archive = TRUE;
    Caption = "c:\\windows\\system32\\config\\appevent.evt";
    Compressed = FALSE;
    CreationClassName = "Win32_NTEventlogFile";
    CreationDate = "20091214141539.671875-480";
    CSCreationClassName = "Win32_ComputerSystem";
    CSName = "SCCM01";
    Description = "c:\\windows\\system32\\config\\appevent.evt";
    Drive = "c:";
    EightDotThreeFileName = "c:\\windows\\system32\\config\\appevent.evt";
    Encrypted = FALSE;
    Extension = "evt";
    FileName = "appevent";
    FileSize = "16777216";
    FileType = "evt File";
    FSCreationClassName = "Win32_FileSystem";
    FSName = "NTFS";
    Hidden = FALSE;
    InstallDate = "20091214141539.671875-480";
    LastAccessed = "20110316031631.689795-420";
    LastModified = "20110316031631.689795-420";
    LogfileName = "Application";
    MaxFileSize = 16777216;
    Name = "C:\\WINDOWS\\system32\\config\\AppEvent.Evt";
    NumberOfRecords = 58914;
    OverwriteOutDated = 0;
    OverWritePolicy = "WhenNeeded";
    Path = "\\windows\\system32\\config\\";
    Readable = TRUE;
    Sources = {"WSH", "WMIAdapter", "WMI.NET Provider Extension", "WmdmPmSN", "WinRM", "WinMgmt", "Winlogon", "Windows Product Activation", "Windows 3.1 Migration", "WebClient", "WebClassRuntime", "WDSServer", "WDSPXE", "WDSIMGSRV", "W3SVC-WP", "W3Ctrs", "VSTTExecution", "VSTO 4.0", "VSTO 3.0", "vsta", "VSSetup", "VSS", "VsJITDebugger", "Visual Studio Analyzer RPC bridge", "Visual Studio 2008 Remote Debugger", "Visual Studio 2005 Remote Debugger", "Visual Studio - VsTemplate", "VBSDIDB", "VBRuntime", "Userinit", "Userenv", "UploadM", "TrustMonitor", "Tlntsvr", "System.ServiceModel.Install 3.0.0.0", "System.ServiceModel 4.0.0.0", "System.ServiceModel 3.0.0.0", "System.Runtime.Serialization 4.0.0.0", "System.Runtime.Serialization 3.0.0.0", "System.IO.Log 4.0.0.0", "System.IO.Log 3.0.0.0", "System.IdentityModel 4.0.0.0", "System.IdentityModel 3.0.0.0", "SysmonLog", "SQLWriter", "SQLVDI", "SQLSERVERAGENT", "SQLNCLI10", "SQLNCLI", "SQLISService100", "SQLISService", "SQLISPackage100", "SQLISPackage", "SQLDumper", "SQLCTR$MSSQLSERVER_NI", "SQLCTR", "SQLBrowser", "SQLAgent$MSSQLSERVER_NI", "SpoolerCtrs", "SPInstaller", "Software Restriction Policies", "Software Installation", "SmsClient", "SmsAdminUI", "SMS Server", "SMS Provider", "SMS Performance Data Provider", "SMS Client", "ServiceModel Audit 4.0.0.0", "ServiceModel Audit 3.0.0.0", "SclgNtfy", "SceSrv", "SceCli", "safrslv", "SAFrdms", "RPC", "Remote Assistance", "PerfProc", "PerfOS", "PerfNet", "Perfmon", "Perflib", "PerfDisk", "Perfctrs", "PassportManager", "Outlook", "OnTime", "Offline Files", "Oakley", "Ntbackup.ini", "ntbackup", "Network Optional Components", "MSSQLServerADHelper100", "MSSQLSERVER/MSDE", "MSSQLSERVER", "MSSQL$MSSQLSERVER_NI", "MSSOAP", "MsiInstaller", "MSDTC Client", "MSDTC", "MSDMine", "mnmsrvc", "Microsoft.Transactions.Bridge 4.0.0.0", "Microsoft.Transactions.Bridge 3.0.0.0", "Microsoft Visual Studio Tools for Applications", "Microsoft Visual Studio", "Microsoft Office 12", "Microsoft Help Viewer", "Microsoft H.323 Telephony Service Provider", "Microsoft Document Explorer", "Microsoft (R) Visual C# 2005 Compiler", "Microsoft (R) Visual Basic Compiler", "LoadPerf", "LicenseService", "Java VM", "ipsecevents", "ipmiprv", "IISInfoCtrs", "IISADMIN", "HotFixInstaller", "HostMIBAgent", "HelpSvc", "HelpLibManager", "HelpLibAgent", "Help Zip", "Help Protocol", "Help Index", "Help CacheLib", "Group Policy Start Menu Settings", "Group Policy Standard Edition", "Group Policy Shortcuts", "Group Policy Services", "Group Policy Scheduled Tasks", "Group Policy Registry", "Group Policy Regional Options", "Group Policy Printers", "Group Policy Power Options", "Group Policy Network Shares", "Group Policy Network Options", "Group Policy Local Users and Groups", "Group Policy Internet Settings", "Group Policy Ini Files", "Group Policy Folders", "Group Policy Folder Options", "Group Policy Files", "Group Policy Environment", "Group Policy Drive Maps", "Group Policy Device Settings", "Group Policy Data Sources", "Group Policy Client", "Group Policy Applications", "Folder Redirection", "File Deployment", "ExceptionManagerInternalException", "EvntAgnt", "EventSystem", "EventCreate", "ESENT", "DSReplicationProvider", "DrWatson", "DiskQuota", "devenv", "DataTransformationServices90", "DatabaseMail", "crypt32", "Configuration Manager Console", "COM+", "COM", "Ci", "Chkdsk", "CertEnterprisePolicy", "CardSpace 4.0.0.0", "CardSpace 3.0.0.0", "BITS Extensions", "BINLSVC", "Automation Manager", "AutoEnrollment", "Autochk", "AssetManagement", "Asset Intelligence Catalog Sync Service", "ASP.NET 4.0.30319.0", "ASP.NET 2.0.50727.0", "ASP.NET 1.1.4322.0", "Application Management", "Application Hang", "Application Error", "apphelp", "ADFS Install", "Active Server Pages", ".NET Runtime Optimization Service", ".NET Runtime 4.0 Error Reporting", ".NET Runtime 2.0 Error Reporting", ".NET Runtime", "Application"};
    Status = "OK";
    System = FALSE;
    Writeable = TRUE;
   };