Home Reference WMI Reference root default NTEventLogEventConsumer


Logs events into NT event log, see Win32 SDK documentation for more complete descriptions

Quick Start


Most WMI properties are read-only. You can only read values but not change them. Few properties are also writeable. You can assign new values to those properties.

Writeable properties are marked with this icon:   


Data type UInt16

Specifies the event category. This is source-specific information.


Data type UInt8


Data type UInt32

The event identifier specifies the message that goes with this event as an entry in the message file associated with the event source.


Data type UInt32

Specifies the type of event being logged

$EventType_ReturnValue = 
    8='Audit Success'
   16='Audit Failure'


Data type String

Strings to be inserted into the event text.


Data type String


Data type UInt32


Data type String

A unique identifier for this instance


Data type String

The NameOfRawDataProperty property is the name of the property in the event which contains a UserSID in string or array of bytes format. This will become the lpUserSid param in the ReportEvent API function.


Data type String

The NameOfUserSIDProperty is the name of a property in the event which contains an array of bytes, or a string. This will become the lpRawData param in ReportEvent API function.


Data type UInt32

Number of strings to be inserted into the event text.


Data type String

The source name must be a subkey of a logfile entry under the EventLog key in the registry.


Data type String

Universal Naming Convention (UNC) name of the server on which this operation is to be performed. If NULL, the operation is performed on the local computer.



Help and Questions

  Community Content

You are cordially invited to add knowledge to this page. If you have sample code or additional information related to this WMI class, please share it. Use the comment form to send your information. We will edit and incorparate it into the reference library. Thank you!

Please do not use the comment form to submit questions. If you have questions or need assistance, visit our free forum: Help me with WMI.

Content last updated: 2013-12-27 12:32:12 (UTC).