SPAuditEntry.EventSource property

A value that indicates whether the event occurred as a result of user action in the SharePoint Foundation user interface (UI) or programmatically.

Namespace:  Microsoft.SharePoint
Assembly:  Microsoft.SharePoint (in Microsoft.SharePoint.dll)

public SPAuditEventSource EventSource { get; }

Property value

Type: Microsoft.SharePoint.SPAuditEventSource
An SPAuditEventSource value that specifies whether the event was caused by code that uses the SharePoint Foundation object model (specifically, one of the WriteAuditEvent methods) or by a user through the UI of the SharePoint Foundation deployment.

If the value of EventSource is ObjectModel, the SourceName property can identify the application that called WriteAuditEvent.

One purpose of this property is to ensure that a rogue developer cannot programmatically create audit entries that appear to have been created by user action in the UI.