Question

Here i am calculating the server restart count.

i need the server restart count for last 24 hours.

string logType = "System";
EventLog ev = new EventLog(logType, System.Environment.MachineName);    
int count=0;
for (int i = ev.Entries.Count - 1; i >= 0; i--)
{
EventLogEntry CurrentEntry = ev.Entries[i];
if (CurrentEntry.Source.ToUpper() == "USER32")
{
count = count + 1;
}
}
ev.Close();

and i have tried like

DateTime dt = DateTime.Now;
TimeSpan ts = dt.Subtract(CurrentEntry.TimeGenerated);
int hours = (ts.Days * 24) + ts.Hours;

Any suggestion?

Answer 1

var ev = new EventLog("system", System.Environment.MachineName);
var count = ev.Entries.Cast<EventLogEntry>()
    .Where (e => e.TimeGenerated >= DateTime.Now.AddDays(-1) 
        && e.Source.Equals("USER32", StringComparison.CurrentCultureIgnoreCase)).Count();

Edit:

Considering jCoder’s comment about the enteries being sorted on TimeGenerated. Using this code will gain performance:

var ev = new EventLog("system", System.Environment.MachineName);
int count = 0;
var y = DateTime.Now.AddDays(-1);
for (int i = ev.Entries.Count - 1; i >= 0 ; i--)
{
    if(ev.Entries[i].TimeGenerated < y)
        break;
    if(ev.Entries[i].Source.Equals("USER32", StringComparison.CurrentCultureIgnoreCase))
        count++;
}