This documentation is archived and is not being maintained.

EventRecord Class

Defines the properties of an event instance for an event that is received from an EventLogReader object. The event properties provide information about the event such as the name of the computer where the event was logged and the time the event was created. This class is an abstract class. The EventLogRecord class implements this class.


Namespace:  System.Diagnostics.Eventing.Reader
Assembly:  System.Core (in System.Core.dll)

[HostProtectionAttribute(SecurityAction.LinkDemand, MayLeakOnAbort = true)]
public abstract class EventRecord : IDisposable

The EventRecord type exposes the following members.

Protected methodEventRecordInitializes a new instance of the EventRecord class.

Public propertyActivityIdGets the globally unique identifier (GUID) for the activity in process for which the event is involved. This allows consumers to group related activities.
Public propertyBookmarkGets a placeholder (bookmark) that corresponds to this event. This can be used as a placeholder in a stream of events.
Public propertyIdGets the identifier for this event. All events with this identifier value represent the same type of event.
Public propertyKeywordsGets the keyword mask of the event. Get the value of the KeywordsDisplayNames property to get the name of the keywords used in this mask.
Public propertyKeywordsDisplayNamesGets the display names of the keywords used in the keyword mask for this event.
Public propertyLevelGets the level of the event. The level signifies the severity of the event. For the name of the level, get the value of the LevelDisplayName property.
Public propertyLevelDisplayNameGets the display name of the level for this event.
Public propertyLogNameGets the name of the event log where this event is logged.
Public propertyMachineNameGets the name of the computer on which this event was logged.
Public propertyOpcodeGets the opcode of the event. The opcode defines a numeric value that identifies the activity or a point within an activity that the application was performing when it raised the event. For the name of the opcode, get the value of the OpcodeDisplayName property.
Public propertyOpcodeDisplayNameGets the display name of the opcode for this event.
Public propertyProcessIdGets the process identifier for the event provider that logged this event.
Public propertyPropertiesGets the user-supplied properties of the event.
Public propertyProviderIdGets the globally unique identifier (GUID) of the event provider that published this event.
Public propertyProviderNameGets the name of the event provider that published this event.
Public propertyQualifiersGets qualifier numbers that are used for event identification.
Public propertyRecordIdGets the event record identifier of the event in the log.
Public propertyRelatedActivityIdGets a globally unique identifier (GUID) for a related activity in a process for which an event is involved.
Public propertyTaskGets a task identifier for a portion of an application or a component that publishes an event. A task is a 16-bit value with 16 top values reserved. This type allows any value between 0x0000 and 0xffef to be used. To obtain the task name, get the value of the TaskDisplayName property.
Public propertyTaskDisplayNameGets the display name of the task for the event.
Public propertyThreadIdGets the thread identifier for the thread that the event provider is running in.
Public propertyTimeCreatedGets the time, in DateTime format, that the event was created.
Public propertyUserIdGets the security descriptor of the user whose context is used to publish the event.
Public propertyVersionGets the version number for the event.

Public methodDispose()Releases all the resources used by this object.
Protected methodDispose(Boolean)Releases the unmanaged resources used by this object, and optionally releases the managed resources.
Public methodEquals(Object)Determines whether the specified Object is equal to the current Object. (Inherited from Object.)
Protected methodFinalizeAllows an object to try to free resources and perform other cleanup operations before it is reclaimed by garbage collection. (Inherited from Object.)
Public methodFormatDescription()Gets the event message in the current locale.
Public methodFormatDescription(IEnumerable<Object>)Gets the event message, replacing variables in the message with the specified values.
Public methodGetHashCodeServes as a hash function for a particular type. (Inherited from Object.)
Public methodGetTypeGets the Type of the current instance. (Inherited from Object.)
Protected methodMemberwiseCloneCreates a shallow copy of the current Object. (Inherited from Object.)
Public methodToStringReturns a string that represents the current object. (Inherited from Object.)
Public methodToXmlGets the XML representation of the event. All of the event properties are represented in the event XML. The XML conforms to the event schema.


The HostProtectionAttribute attribute applied to this type or member has the following Resources property value: MayLeakOnAbort. The HostProtectionAttribute does not affect desktop applications (which are typically started by double-clicking an icon, typing a command, or entering a URL in a browser). For more information, see the HostProtectionAttribute class or SQL Server Programming and Host Protection Attributes.

.NET Framework

Supported in: 4, 3.5

.NET Framework Client Profile

Supported in: 4, 3.5 SP1

Windows 7, Windows Vista SP1 or later, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later)

The .NET Framework does not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.

Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.