EventLogEntryCollection Class
Defines size and enumerators for a collection of EventLogEntry instances.
Assembly: System (in System.dll)
The EventLogEntryCollection type exposes the following members.
| Name | Description | |
|---|---|---|
![]() | Count | Gets the number of entries in the event log (that is, the number of elements in the EventLogEntry collection). |
![]() | Item | Gets an entry in the event log, based on an index that starts at 0 (zero). |
| Name | Description | |
|---|---|---|
![]() | CopyTo | Copies the elements of the EventLogEntryCollection to an array of EventLogEntry instances, starting at a particular array index. |
![]() | Equals(Object) | Determines whether the specified Object is equal to the current Object. (Inherited from Object.) |
![]() | Finalize | Allows an object to try to free resources and perform other cleanup operations before it is reclaimed by garbage collection. (Inherited from Object.) |
![]() | GetEnumerator | Supports a simple iteration over the EventLogEntryCollection object. |
![]() | GetHashCode | Serves as a hash function for a particular type. (Inherited from Object.) |
![]() | GetType | Gets the Type of the current instance. (Inherited from Object.) |
![]() | MemberwiseClone | Creates a shallow copy of the current Object. (Inherited from Object.) |
![]() | ToString | Returns a string that represents the current object. (Inherited from Object.) |
| Name | Description | |
|---|---|---|
![]() | AsParallel | Enables parallelization of a query. (Defined by ParallelEnumerable.) |
![]() | AsQueryable | Converts an IEnumerable to an IQueryable. (Defined by Queryable.) |
![]() | Cast<TResult> | Casts the elements of an IEnumerable to the specified type. (Defined by Enumerable.) |
![]() | OfType<TResult> | Filters the elements of an IEnumerable based on a specified type. (Defined by Enumerable.) |
| Name | Description | |
|---|---|---|
![]() ![]() | ICollection::CopyTo | Infrastructure. Copies the elements of the collection to an Array, starting at a particular Array index. |
![]() ![]() | ICollection::IsSynchronized | Infrastructure. Gets a value that indicates whether access to the EventLogEntryCollection is synchronized (thread-safe). |
![]() ![]() | ICollection::SyncRoot | Infrastructure. Gets an object that can be used to synchronize access to the EventLogEntryCollection object. |
Use the EventLogEntryCollection class when reading the entries associated with an EventLog instance. The Entries property of the EventLog class is a collection of all the entries in the event log.
Because new entries are appended to the existing list, stepping through the collection enables you to access the entries that were created after you originally created the EventLogEntryCollection. However, after you view the entire list, it is not updated with new entries.
The following example demonstrates how to obtain event log information from an EventLogEntryCollection object.
#using <System.dll> using namespace System; using namespace System::Collections; using namespace System::Diagnostics; int main() { try { String^ myLogName = "MyNewLog"; // Check if the source exists. if ( !EventLog::SourceExists( "MySource" ) ) { //Create source. EventLog::CreateEventSource( "MySource", myLogName ); Console::WriteLine( "Creating EventSource" ); } else myLogName = EventLog::LogNameFromSourceName( "MySource", "." ); // Get the EventLog associated if the source exists. // Create an EventLog instance and assign its source. EventLog^ myEventLog2 = gcnew EventLog; myEventLog2->Source = "MySource"; // Write an informational entry to the event log. myEventLog2->WriteEntry( "Successfully created a new Entry in the Log" ); myEventLog2->Close(); // Create a new EventLog Object*. EventLog^ myEventLog1 = gcnew EventLog; myEventLog1->Log = myLogName; // Obtain the Log Entries of S"MyNewLog". EventLogEntryCollection^ myEventLogEntryCollection = myEventLog1->Entries; myEventLog1->Close(); Console::WriteLine( "The number of entries in 'MyNewLog' = {0}", myEventLogEntryCollection->Count ); // Display the 'Message' property of EventLogEntry. for ( int i = 0; i < myEventLogEntryCollection->Count; i++ ) { Console::WriteLine( "The Message of the EventLog is : {0}", myEventLogEntryCollection[ i ]->Message ); } // Copy the EventLog entries to Array of type EventLogEntry. array<EventLogEntry^>^myEventLogEntryArray = gcnew array<EventLogEntry^>(myEventLogEntryCollection->Count); myEventLogEntryCollection->CopyTo( myEventLogEntryArray, 0 ); IEnumerator^ myEnumerator = myEventLogEntryArray->GetEnumerator(); while ( myEnumerator->MoveNext() ) { EventLogEntry^ myEventLogEntry = safe_cast<EventLogEntry^>(myEnumerator->Current); Console::WriteLine( "The LocalTime the Event is generated is {0}", myEventLogEntry->TimeGenerated ); } } catch ( Exception^ e ) { Console::WriteLine( "Exception: {0}", e->Message ); } }
Windows 7, Windows Vista SP1 or later, Windows XP SP3, Windows XP SP2 x64 Edition, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later), Windows Server 2003 SP2
The .NET Framework does not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.

