This documentation is archived and is not being maintained.

WebFailureAuditEvent Class

Provides information about security failures.

Namespace:  System.Web.Management
Assembly:  System.Web (in System.Web.dll)

<AspNetHostingPermissionAttribute(SecurityAction.InheritanceDemand, Level := AspNetHostingPermissionLevel.Minimal)> _
<AspNetHostingPermissionAttribute(SecurityAction.LinkDemand, Level := AspNetHostingPermissionLevel.Minimal)> _
Public Class WebFailureAuditEvent _
	Inherits WebAuditEvent
Dim instance As WebFailureAuditEvent

ASP.NET health monitoring allows production and operations staff to manage deployed Web applications. The System.Web.Management namespace contains the health event types responsible for packaging application health-status data and the provider types responsible for processing this data. It also contains supporting types that help during the management of health events.

The WebFailureAuditEvent class is used when a security operation fails. An example of this is a failed URL authorization for a Web request.

By default, ASP.NET is configured to raise the WebFailureAuditEvent event for the following features:

When a WebFailureAuditEvent event is raised, ASP.NET health monitoring increments the related Audit Failure Events Raised performance counter and then checks the healthMonitoring configuration section to determine whether any providers subscribe to the event. If providers subscribe to the event, ASP.NET dispatches the event to them for processing.


To view the Audit Failure Events Raised performance counter in System Monitor (PerfMon), in the Add Counters window, select ASP.NET from the Performance object drop-down list, select the Audit Failure Events Raised performance counter, and click the Add button. For more information, see Using the System Monitor (PerfMon) with ASP.NET Applications in the IIS documentation on MSDN.


In most cases you will be able to use the ASP.NET health-monitoring types as implemented, and you will control the health-monitoring system by specifying values in the healthMonitoring configuration section. You can also derive from the health-monitoring types to create your own custom events and providers. For an example of deriving from the WebFailureAuditEvent class, see the Example section.

Notes to Inheritors:

When formatting your custom event information for display, override the FormatCustomEventDetails method rather than the ToString method. This will avoid overwriting or tampering with sensitive system information.

The following code example demonstrates how to derive from the WebFailureAuditEvent class to create a custom audit event.

Imports System
Imports System.Text
Imports System.Web
Imports System.Web.Management

' Implements a custom WebFailureAuditEvent class.  

Public Class SampleWebFailureAuditEvent
    Inherits System.Web.Management.WebFailureAuditEvent
    Private customCreatedMsg, customRaisedMsg As String 

    ' Invoked in case of events identified only by their event code. 
    Public Sub New(ByVal msg As String, _
    ByVal eventSource As Object, ByVal eventCode As Integer)
        MyBase.New(msg, eventSource, eventCode)
        ' Perform custom initialization.
        customCreatedMsg = String.Format("Event created at: {0}", _

    End Sub 'New 

    ' Invoked in case of events identified by their event code and  
    ' event detailed code. 
    Public Sub New(ByVal msg As String, ByVal eventSource As Object, _
    ByVal eventCode As Integer, ByVal detailedCode As Integer)
        MyBase.New(msg, eventSource, eventCode, detailedCode)
        ' Perform custom initialization.
        customCreatedMsg = String.Format("Event created at: {0}", _

    End Sub 'New 

    ' Raises the SampleWebFailureAuditEvent. 
    Public Overrides Sub Raise() 
        ' Perform custom processing.
        customRaisedMsg = String.Format("Event raised at: {0}", _

        ' Raise the event.

    End Sub 'Raise

    ' Obtains the current thread information. 
    Public Function GetRequestInformation() As WebRequestInformation 
        ' No customization is allowed. 
        Return RequestInformation

    End Function 'GetRequestInformation

    'Formats Web request event information. 
    'This method is invoked indirectly by the provider  
    'using one of the overloaded ToString methods. 
    Public Overrides Sub FormatCustomEventDetails(ByVal formatter _
    As WebEventFormatter)

        ' Add custom data.

        formatter.IndentationLevel += 1
        formatter.AppendLine("******** SampleWebFailureAuditEvent Start ********")
        formatter.AppendLine(String.Format("Request path: {0}", _
        formatter.AppendLine(String.Format("Request Url: {0}", _

        ' Display custom event timing.

        formatter.AppendLine("******** SampleWebFailureAuditEvent End ********")

        formatter.IndentationLevel -= 1

    End Sub 'FormatCustomEventDetails 

End Class 'SampleWebFailureAuditEvent

The following configuration excerpt shows how to enable ASP.NET to use the WebFailureAuditEvent event.

<add name="EventLogProvider" 

<add  name="SampleWebFailureAuditEvent" 

<add name="Custom Failure Audit Default"
eventName=" SampleWebFailureAuditEvent "


Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.

Windows 7, Windows Vista, Windows XP SP2, Windows XP Media Center Edition, Windows XP Professional x64 Edition, Windows XP Starter Edition, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003, Windows Server 2000 SP4, Windows Millennium Edition, Windows 98

The .NET Framework and .NET Compact Framework do not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.

.NET Framework

Supported in: 3.5, 3.0, 2.0