Win32_NTLogEvent, ROOT\CIMV2\ms_409

Class | Methods | Properties (16) | Qualifiers (4) | Instances (999) | Namespaces (2)
Samples: VB Script | C# | VB.Net | Search on:Microsoft

Description

This class is used to translate instances from the NT Eventlog.

Win32_NTLogEvent properties

Win32_NTLogEvent has 16 properties (16 Local)

NameOriginCIMType
CategoryWin32_NTLogEvent18 [uint16]
CategoryStringWin32_NTLogEvent8 [string]
ComputerNameWin32_NTLogEvent8 [string]
DataWin32_NTLogEvent17 [Uint8]
EventCodeWin32_NTLogEvent18 [uint16]
EventIdentifierWin32_NTLogEvent19 [uint32]
EventTypeWin32_NTLogEvent17 [uint8]
InsertionStringsWin32_NTLogEvent8 [string]
key
Logfile
Win32_NTLogEvent8 [string]
MessageWin32_NTLogEvent8 [string]
key
RecordNumber
Win32_NTLogEvent19 [uint32]
SourceNameWin32_NTLogEvent8 [string]
TimeGeneratedWin32_NTLogEvent101 [datetime]
TimeWrittenWin32_NTLogEvent101 [datetime]
TypeWin32_NTLogEvent8 [string]
UserWin32_NTLogEvent8 [string]

Detailed description of Win32_NTLogEvent properties

Local properties (16) of Win32_NTLogEvent class

Category property
CIMTYPE'uint16'
Description'Specifies a subcategory for this event. This subcategory is source specific.'
DisplayName'Category'
Category property is in 2 classes of ROOT\CIMV2\ms_409 and in 11 namespaces
CategoryString property
CIMTYPE'string'
Description'Specifies the translation of the subcategory. The translation is source specific.'
DisplayName'Category String'
CategoryString property is in 1 class (Win32_NTLogEvent) of ROOT\CIMV2\ms_409 and in 2 namespaces
ComputerName property
CIMTYPE'string'
Description'The variable-length null-terminated string specifying the name of the computer that generated this event.'
DisplayName'Computer Name'
ComputerName property is in 4 classes of ROOT\CIMV2\ms_409 and in 11 namespaces
Data property
CIMTYPE'Uint8'
Description'The binary data that accompanied the report of the NT event.'
DisplayName'Binary Data'
Data property is in 2 classes of ROOT\CIMV2\ms_409 and in 14 namespaces
EventCode property
CIMTYPE'uint16'
Description'This property has the value of the lower 16-bits of the EventIdentifier property. It is present to match the value displayed in the NT Event Viewer. NOTE: Two events from the same source may have the same value for this property but may have different severity and EventIdentifier values'
DisplayName'Event Code'
EventCode property is in 1 class (Win32_NTLogEvent) of ROOT\CIMV2\ms_409 and in 4 namespaces
EventIdentifier property
CIMTYPE'uint32'
Description'Identifies the event. This is specific to the source that generated the event log entry, and is used, together with SourceName, to uniquely identify an NT event type.'
DisplayName'Event Identifier'
EventIdentifier property is in 2 classes of ROOT\CIMV2\ms_409 and in 2 namespaces
EventType property
CIMTYPE'uint8'
Description'The Type property specifies the type of event.'
DisplayName'Type Event'
Values['Success', 'Error', 'Warning', 'Information', 'Security Audit Success', 'Security Audit Failure']
EventType property is in 5 classes of ROOT\CIMV2\ms_409 and in 14 namespaces
InsertionStrings property
CIMTYPE'string'
Description'The insertion strings that accompanied the report of the NT event.'
DisplayName'Insertion Strings'
InsertionStrings property is in 2 classes of ROOT\CIMV2\ms_409 and in 2 namespaces
Logfile property
CIMTYPE'string'
Description'The name of NT Eventlog logfile. This is used together with the RecordNumber to uniquely identify an instance of this class.'
DisplayName'Log File'
keyTrue
Logfile property is in 2 classes of ROOT\CIMV2\ms_409 and in 4 namespaces
Message property
CIMTYPE'string'
Description'The event message as it appears in the NT Eventlog. This is a standard message with zero or more insertion strings supplied by the source of the NT event. The insertion strings are inserted into the standard message in a predefined format. If there are no insertion strings or there is a problem inserting the insertion strings, only the standard message will be present in this field.'
DisplayName'Message'
Message property is in 5 classes of ROOT\CIMV2\ms_409 and in 142 namespaces
RecordNumber property
CIMTYPE'uint32'
Description'Identifies the event within the NT Eventlog logfile. This is specific to the logfile and is used together with the logfile name to uniquely identify an instance of this class.'
DisplayName'Record Number'
keyTrue
RecordNumber property is in 2 classes of ROOT\CIMV2\ms_409 and in 2 namespaces
SourceName property
CIMTYPE'string'
Description'The variable-length null-terminated string specifying the name of the source (application, service, driver, subsystem) that generated the entry. It is used, together with the EventIdentifier, to uniquely identify an NT event type.'
DisplayName'Source Name'
SourceName property is in 3 classes of ROOT\CIMV2\ms_409 and in 10 namespaces
TimeGenerated property
CIMTYPE'datetime'
Description'Specifies the time at which the source generated the event.'
DisplayName'Time Generated'
TimeGenerated property is in 3 classes of ROOT\CIMV2\ms_409 and in 2 namespaces
TimeWritten property
CIMTYPE'datetime'
Description'Specifies the time at which the event was written to the logfile.'
DisplayName'Time Written'
TimeWritten property is in 1 class (Win32_NTLogEvent) of ROOT\CIMV2\ms_409 and in 2 namespaces
Type property
CIMTYPE'string'
Description'Specifies the type of event. This is an enumerated string'
DisplayName'Type'
Values['Success', 'Error', 'Warning', 'Information', 'Audit Success', 'Audit Failure']
Type property is in 18 classes of ROOT\CIMV2\ms_409 and in 142 namespaces
User property
CIMTYPE'string'
Description'The user name of the logged on user when the event ocurred. If the user name cannot be determined this will be NULL'
DisplayName'User Name'
User property is in 44 classes of ROOT\CIMV2\ms_409 and in 6 namespaces

Win32_NTLogEvent Qualifiers

NameValueToInstanceToSubclassOverridableAmendedLocal
AMENDMENTTrue
Description'This class is used to translate instances from the NT Eventlog.'
DisplayName'NT Log Events'
LOCALE1033

Win32_NTLogEvent System properties

NameValueOriginCIMTypeLocalArray
__PATH'\\.\ROOT\CIMV2\ms_409:Win32_NTLogEvent'___SYSTEM8
__NAMESPACE'ROOT\CIMV2\ms_409'___SYSTEM8
__SERVER'.'___SYSTEM8
__DERIVATION[]___SYSTEM8
__PROPERTY_COUNT16___SYSTEM3
__RELPATH'Win32_NTLogEvent'___SYSTEM8
__DYNASTY'Win32_NTLogEvent'___SYSTEM8
__SUPERCLASSnull___SYSTEM8
__CLASS'Win32_NTLogEvent'___SYSTEM8
__GENUS1___SYSTEM3

Similar Classes to Win32_NTLogEvent

Number of classes:73
Class nameChildsPropertiesMethodsClass
Instances
Child
Instances
AbstractSingleton
__AggregateEvent020----
__ClassCreationEvent030---
__ClassDeletionEvent030---
__ClassModificationEvent040---
__ClassOperationEvent330---
__ConsumerFailureEvent070---
__Event520---
__EventConsumer030---
__EventConsumerProviderRegistration020----
__EventDroppedEvent340---
__EventFilter060----
__EventGenerator100---
__EventProviderRegistration020----
__EventQueueOverflowEvent050---
__ExtrinsicEvent1120---
__InstanceCreationEvent030---
__InstanceDeletionEvent030---
__InstanceModificationEvent040---
__InstanceOperationEvent430---
__MethodInvocationEvent060---
__NamespaceCreationEvent030---
__NamespaceDeletionEvent030---
__NamespaceModificationEvent040---
__NamespaceOperationEvent330---
__QOSFailureEvent060---
__SystemEvent120---
__TimerEvent040---
Msft_WmiProvider_ComServerLoadOperationEvent0150---
Msft_WmiProvider_ComServerLoadOperationFailureEvent0160---
Msft_WmiProvider_CreateClassEnumAsyncEvent_Post0140---
Msft_WmiProvider_CreateClassEnumAsyncEvent_Pre0110---
Msft_WmiProvider_CreateInstanceEnumAsyncEvent_Post0140---
Msft_WmiProvider_CreateInstanceEnumAsyncEvent_Pre0110---
Msft_WmiProvider_DeleteClassAsyncEvent_Post0140---
Msft_WmiProvider_DeleteClassAsyncEvent_Pre0110---
Msft_WmiProvider_DeleteInstanceAsyncEvent_Post0140---
Msft_WmiProvider_DeleteInstanceAsyncEvent_Pre0110---
Msft_WmiProvider_ExecMethodAsyncEvent_Post0160---
Msft_WmiProvider_ExecMethodAsyncEvent_Pre0130---
Msft_WmiProvider_ExecQueryAsyncEvent_Post0150---
Msft_WmiProvider_ExecQueryAsyncEvent_Pre0120---
Msft_WmiProvider_GetObjectAsyncEvent_Post0140---
Msft_WmiProvider_GetObjectAsyncEvent_Pre0110---
Msft_WmiProvider_InitializationOperationEvent090---
Msft_WmiProvider_InitializationOperationFailureEvent0100---
Msft_WmiProvider_LoadOperationEvent0170---
Msft_WmiProvider_LoadOperationFailureEvent0180---
Msft_WmiProvider_OperationEvent990---
Msft_WmiProvider_OperationEvent_Post1390---
Msft_WmiProvider_OperationEvent_Pre1390---
Msft_WmiProvider_ProvideEvents_Post0110---
Msft_WmiProvider_ProvideEvents_Pre0100---
Msft_WmiProvider_PutClassAsyncEvent_Post0140---
Msft_WmiProvider_PutClassAsyncEvent_Pre0110---
Msft_WmiProvider_PutInstanceAsyncEvent_Post0140---
Msft_WmiProvider_PutInstanceAsyncEvent_Pre0110---
Msft_WmiProvider_UnLoadOperationEvent090---
MSFT_WmiSelfEvent120---
Win32_ComputerShutdownEvent040---
Win32_ComputerSystemEvent130---
Win32_DeviceChangeEvent230---
Win32_FileScreenEvent0150---
Win32_IP4RouteTableEvent020---
Win32_NTEventlogFile03916----
Win32_NTLogEventComputer020----
Win32_NTLogEventLog020----
Win32_NTLogEventUser020----
Win32_PowerManagementEvent040---
Win32_QuotaEvent0230---
Win32_RdvProvisioningChangeEvent030---
Win32_SessionBrokerTargetEvent020---
Win32_SystemConfigurationChangeEvent030---
Win32_VolumeChangeEvent040---
comments powered by Disqus
WUtils.com