BACK TO INDEX

Win32_NTLogEvent
This class is used to translate instances from the NT Eventlog.
NameSpace Path
\ROOT\CIMV2
PROPERTY	SMS_REPORT	CIMTYPE	DESCRIPTION
Category		UInt16	Specifies a subcategory for this event. This subcategory is source specific.
CategoryString		String	Specifies the translation of the subcategory. The translation is source specific.
ComputerName		String	The variable-length null-terminated string specifying the name of the computer that generated this event.
Data		UInt8	The binary data that accompanied the report of the NT event.
EventCode		UInt16	This property has the value of the lower 16-bits of the EventIdentifier property. It is present to match the value displayed in the NT Event Viewer. NOTE: Two events from the same source may have the same value for this property but may have different severity and EventIdentifier values
EventIdentifier		UInt32	Identifies the event. This is specific to the source that generated the event log entry, and is used, together with SourceName, to uniquely identify an NT event type.
EventType		UInt8	The Type property specifies the type of event.
InsertionStrings		String	The insertion strings that accompanied the report of the NT event.
Logfile		String	The name of NT Eventlog logfile. This is used together with the RecordNumber to uniquely identify an instance of this class.
Message		String	The event message as it appears in the NT Eventlog. This is a standard message with zero or more insertion strings supplied by the source of the NT event. The insertion strings are inserted into the standard message in a predefined format. If there are no insertion strings or there is a problem inserting the insertion strings, only the standard message will be present in this field.
RecordNumber		UInt32	Identifies the event within the NT Eventlog logfile. This is specific to the logfile and is used together with the logfile name to uniquely identify an instance of this class.
SourceName		String	The variable-length null-terminated string specifying the name of the source (application, service, driver, subsystem) that generated the entry. It is used, together with the EventIdentifier, to uniquely identify an NT event type.
TimeGenerated		DateTime	Specifies the time at which the source generated the event.
TimeWritten		DateTime	Specifies the time at which the event was written to the logfile.
Type		String	Specifies the type of event. This is an enumerated string
User		String	The user name of the logged on user when the event ocurred. If the user name cannot be determined this will be NULL
SAMPLE DATA INSTANCE
[LOCALE(1033): ToInstance Amended]    instance of Win32_NTLogEvent    {     Category = 0;     ComputerName = "SCCM01";     Data = {123, 68, 55, 68, 65, 68, 49, 69, 52, 45, 52, 53, 70, 52, 45, 51, 66, 50, 66, 45, 56, 57, 57, 65, 45, 69, 65, 55, 50, 56, 49, 54, 55, 69, 67, 52, 70, 125};     EventCode = 1035;     EventIdentifier = 1035;     EventType = 3;     InsertionStrings = {"Microsoft Visual Studio 2008 Professional Edition - ENU", "9.0.30729", "1033", "0", "(NULL)", "", ""};     Logfile = "Application";     RecordNumber = 90676;     SourceName = "MsiInstaller";     TimeGenerated = "20110330145145.000000-420";     TimeWritten = "20110330145145.000000-420";     Type = "Information";     User = "NT AUTHORITY\\SYSTEM";    };