EventLog.SourceExists Method (String, String)
Determines whether an event source is registered on a specified computer.
Assembly: System (in System.dll)
- Type: System.String
The name of the event source.
- Type: System.String
The name the computer on which to look, or "." for the local computer.
Return ValueType: System.Boolean
true if the event source is registered on the given computer; otherwise, false.
Use this method to determine whether an event source exists on the computer specified by the machineName parameter. If you want to determine whether a log exists on the specified computer, use Exists.
Because this method accesses the registry, you must have the appropriate registry permissions on the given server; otherwise, a SecurityException will be thrown.
To search for an event source in Windows Vista and later or Windows Server 2003, you must have administrative privileges.
The reason for this requirement is that all event logs, including security, must be searched to determine whether the event source is unique. Starting with Windows Vista, users do not have permission to access the security log; therefore, a SecurityException is thrown.
Starting with Windows Vista, User Account Control (UAC) determines the privileges of a user. If you are a member of the Built-in Administrators group, you are assigned two run-time access tokens: a standard user access token and an administrator access token. By default, you are in the standard user role. To execute the code that accesses performance counters, you must first elevate your privileges from standard user to administrator. You can do this when you start an application by right-clicking the application icon and indicating that you want to run as an administrator.
A service that is executing under the LocalSystem account does not have the privileges required to execute this method. The solution is to check whether the event source exists in the ServiceInstaller, and if it does not exist, to create the source in the installer.
Because you cannot give a new source the name of an existing source on the same computer, use this method before attempting to call CreateEventSource to ensure that a source with the name specified by source does not already exist on the computer. The source and machineName parameters are not case sensitive.