I have used the System.Diagnostics.EventLog to view the logs on the local computer. However, I would like to open a saved event log archive (.evt or .evtx) and view the logs that are contained in the saved file. I just need to view timestamps, messages, sources, etc. associated with the logs in the file. Can this be done in C#?
I have used the System.Diagnostics.EventLog to view the logs on the local computer. However,
Share
Check out the
System.Diagnostics.Eventing.Readernamespace. Specifically theEventLogQueryclass.http://msdn.microsoft.com/en-us/library/bb671200(v=VS.90).aspx