EventLog.Entries Property

Gets the contents of the event log.

Namespace: System.Diagnostics
Assembly: System (in system.dll)

property EventLogEntryCollection^ Entries {
	EventLogEntryCollection^ get ();
/** @property */
public EventLogEntryCollection get_Entries ()

public function get Entries () : EventLogEntryCollection

Property Value

An EventLogEntryCollection holding the entries in the event log. Each entry is associated with an instance of the EventLogEntry class.

Use the Entries member when reading from the event log.

Because the property is read-only, you cannot modify an entry or write to the log using Entries. Instead, specify a Source and call WriteEntry to write a new log entry. You can use Entries to count the number of entries in the event log, and view each EventLogEntry in the collection. Use the indexed Item member to retrieve information about a specific entry, such as Message, Category, TimeWritten, or EntryType.

It is not necessary to specify a Source when only reading from a log. You can specify only the Log name and MachineName (server computer name) properties for the EventLog instance. In either case, the Entries member is automatically populated with the event log's list of entries. You can select the appropriate index for an item in this list to read individual entries.

An important distinction between reading and writing log entries is that it is not necessary to explicitly call a read method. After the Log and MachineName are specified, the Entries property is automatically populated. If you change the value of the Log or MachineName property, the Entries property is repopulated the next time you read it.


You are not required to specify the MachineName if you are connecting to a log. If you do not specify the MachineName, the local computer, ".", is assumed.

The following example reads entries in the event log, "MyNewLog", on the local computer.

#using <System.dll>

using namespace System;
using namespace System::Diagnostics;
int main()
   EventLog^ myLog = gcnew EventLog;
   myLog->Log = "MyNewLog";
   System::Collections::IEnumerator^ myEnum = myLog->Entries->GetEnumerator();
   while ( myEnum->MoveNext() )
      EventLogEntry^ entry = safe_cast<EventLogEntry^>(myEnum->Current);
      Console::WriteLine( "\tEntry: {0}", entry->Message );

import System.*;
import System.Diagnostics.*;
import System.Collections.*;

class MySample
    public static void main(String[] args)
        EventLog myLog = new EventLog();
        EventLogEntry entry;
        IEnumerator objEnum = myLog.get_Entries().GetEnumerator();
        while (objEnum.MoveNext()) {
            entry = (EventLogEntry)objEnum.get_Current();
            Console.WriteLine("\tEntry: " + entry.get_Message());
    } //main
} //MySample

Windows 98, Windows 2000 SP4, Windows Server 2003, Windows XP Media Center Edition, Windows XP Professional x64 Edition, Windows XP SP2, Windows XP Starter Edition

The .NET Framework does not support all versions of every platform. For a list of the supported versions, see System Requirements.

.NET Framework

Supported in: 2.0, 1.1, 1.0