SuccessAuditEvent class

The parent class from which all success audit event trace classes are derived.

The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties.

Syntax

[Dynamic, EventType(80), EventLevel(4), EventVersion(1), EventTypeName("SuccessAuditEvent")]
class SuccessAuditEvent : AuditEvent
{
  uint8   SECURITY_DESCRIPTOR[];
  uint64  TIME_CREATED;
  string  EventTime;
  string  EventID;
  sint64  SequenceNumber;
  sint64  Occurrence;
  sint32  EventCode;
  sint32  EventDetailCode;
  string  EventMessage;
  string  ApplicationDomain;
  string  TrustLevel;
  string  ApplicationVirtualPath;
  string  ApplicationPath;
  string  MachineName;
  string  CustomEventDetails;
  string  SecurityDescriptor = "O:BAG:BAD:(A;;0x10000001;;;S-1-5-11)";
  sint32  ProcessID;
  string  ProcessName;
  string  AccountName;
  string  RequestUrl;
  string  RequestPath;
  string  UserHostAddress;
  string  UserName;
  boolean UserAuthenticated;
  string  UserAuthenticationType;
  string  RequestThreadAccountName;
};

Members

The SuccessAuditEvent class has these types of members:

Properties

The SuccessAuditEvent class has these properties.

AccountName
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (3), StringTermination ("NullTerminated"), format ("w")

The account name.

ApplicationDomain
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (8), StringTermination ("NullTerminated"), format ("w")

The application domain.

ApplicationPath
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (11), StringTermination ("NullTerminated"), format ("w")

The application path.

ApplicationVirtualPath
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (10), StringTermination ("NullTerminated"), format ("w")

The application virtual path.

CustomEventDetails
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (13), StringTermination ("NullTerminated"), format ("w")

Custom event details.

EventCode
Data type: sint32
Access type: Read-only
Qualifiers: WmiDataId (5)

The event code.

EventDetailCode
Data type: sint32
Access type: Read-only
Qualifiers: WmiDataId (6)

The event detail code.

EventID
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (2), StringTermination ("NullTerminated"), format ("w")

The identifier of the event.

EventMessage
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (7), StringTermination ("NullTerminated"), format ("w")

The message that describes the event.

EventTime
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (1), StringTermination ("NullTerminated"), format ("w")

The time the event occurred.

MachineName
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (12), StringTermination ("NullTerminated"), format ("w")

The name of the machine.

Occurrence
Data type: sint64
Access type: Read-only
Qualifiers: WmiDataId (4)

The nth occurrence of the event.

ProcessID
Data type: sint32
Access type: Read-only
Qualifiers: WmiDataId (1)

The process identifier.

ProcessName
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (2), StringTermination ("NullTerminated"), format ("w")

The name of the process.

RequestPath
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (2), StringTermination ("NullTerminated"), format ("w")

The path of the request.

RequestThreadAccountName
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (7), StringTermination ("NullTerminated"), format ("w")

The name of the account that requested the thread.

RequestUrl
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (1), StringTermination ("NullTerminated"), format ("w")

The URL of the request.

SECURITY_DESCRIPTOR
Data type: uint8 array
Access type: Read-only

Descriptor used by the event provider to determine which users can receive the event. This property is inherited from __Event. For more information about constants used to set this security descriptor, see WMI Security Constants.

SecurityDescriptor
Data type: string
Access type: Read-only

Descriptor used by the event provider to determine which users can receive the event.

SequenceNumber
Data type: sint64
Access type: Read-only
Qualifiers: WmiDataId (3)

The event sequence number.

TIME_CREATED
Data type: uint64
Access type: Read-only

Unique value that indicates the time at which the event was generated. This is a 64-bit value that represents the number of 100-nanosecond intervals after January 1, 1601. The information is in the Coordinated Universal Times (UTC) format. This property is inherited from __Event.

For more information about using uint64 values in scripts, see Scripting in WMI.

TrustLevel
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (9), StringTermination ("NullTerminated"), format ("w")

The level of code access security (CAS) that is applied to the application.

UserAuthenticated
Data type: boolean
Access type: Read-only
Qualifiers: WmiDataId (5)

Is the user authenticated.

UserAuthenticationType
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (6), StringTermination ("NullTerminated"), format ("w")

The type of user authentication.

UserHostAddress
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (3), StringTermination ("NullTerminated"), format ("w")

The user host address.

UserName
Data type: string
Access type: Read-only
Qualifiers: WmiDataId (4), StringTermination ("NullTerminated"), format ("w")

The user name.

Requirements

Minimum supported client

Windows Vista

Minimum supported server

Windows Server 2008

Namespace

Root\aspnet

MOF

AspNet.mof

DLL

MSCoree.dll

 

 

Show: