WqlEventQuery.HavingCondition Property

 
System_CAPS_noteNote

The .NET API Reference documentation has a new home. Visit the .NET API Browser on docs.microsoft.com to see the new experience.

Gets or sets the condition to be applied to the aggregation of events, based on the number of events received.

Namespace:   System.Management
Assembly:  System.Management (in System.Management.dll)

public string HavingCondition { get; set; }

Property Value

Type: System.String

Returns a String value containing the condition applied to the aggregation of events, based on the number of events received.

Setting this property value overrides any previous value stored in the object. The query string is rebuilt to reflect the new grouping condition.

Null, if no aggregation or no condition should be applied; otherwise, a condition of the form "NumberOfEvents <operator> <value>".

Full trust for the immediate caller. This member cannot be used by partially trusted code. For more information, see Using Libraries from Partially Trusted Code.

The following example initializes a new WqlEventQuery and displays the event query string.

using System;
using System.Management;

public class EventSample 
{
    public static void Main(string[] args) 
    {
        WqlEventQuery query = new WqlEventQuery();
        query.EventClassName = "__InstanceCreationEvent";
        query.Condition = "TargetInstance ISA 'Win32_NTLogEvent'";
        query.GroupWithinInterval = new TimeSpan(0, 0, 10);
        System.Collections.Specialized.StringCollection collection =
            new System.Collections.Specialized.StringCollection();
        collection.Add("TargetInstance.SourceName");
        query.GroupByPropertyList = collection;
        query.HavingCondition = "NumberOfEvents > 25";

        Console.WriteLine(query.QueryString);
        return;
    }
}

.NET Framework
Available since 1.1
Return to top
Show: