EventRecord EventRecord EventRecord EventRecord Class


Defines the properties of an event instance for an event that is received from an EventLogReader object. The event properties provide information about the event such as the name of the computer where the event was logged and the time the event was created. This class is an abstract class. The EventLogRecord class implements this class.

public ref class EventRecord abstract : IDisposable
public abstract class EventRecord : IDisposable
type EventRecord = class
    interface IDisposable
Public MustInherit Class EventRecord
Implements IDisposable


For example code using this class, see How To: Query for Events or How To: Access and Read Event Information.


EventRecord() EventRecord() EventRecord() EventRecord()

Initializes a new instance of the EventRecord class.


ActivityId ActivityId ActivityId ActivityId

Gets the globally unique identifier (GUID) for the activity in process for which the event is involved. This allows consumers to group related activities.

Bookmark Bookmark Bookmark Bookmark

Gets a placeholder (bookmark) that corresponds to this event. This can be used as a placeholder in a stream of events.

Id Id Id Id

Gets the identifier for this event. All events with this identifier value represent the same type of event.

Keywords Keywords Keywords Keywords

Gets the keyword mask of the event. Get the value of the KeywordsDisplayNames property to get the name of the keywords used in this mask.

KeywordsDisplayNames KeywordsDisplayNames KeywordsDisplayNames KeywordsDisplayNames

Gets the display names of the keywords used in the keyword mask for this event.

Level Level Level Level

Gets the level of the event. The level signifies the severity of the event. For the name of the level, get the value of the LevelDisplayName property.

LevelDisplayName LevelDisplayName LevelDisplayName LevelDisplayName

Gets the display name of the level for this event.

LogName LogName LogName LogName

Gets the name of the event log where this event is logged.

MachineName MachineName MachineName MachineName

Gets the name of the computer on which this event was logged.

Opcode Opcode Opcode Opcode

Gets the opcode of the event. The opcode defines a numeric value that identifies the activity or a point within an activity that the application was performing when it raised the event. For the name of the opcode, get the value of the OpcodeDisplayName property.

OpcodeDisplayName OpcodeDisplayName OpcodeDisplayName OpcodeDisplayName

Gets the display name of the opcode for this event.

ProcessId ProcessId ProcessId ProcessId

Gets the process identifier for the event provider that logged this event.

Properties Properties Properties Properties

Gets the user-supplied properties of the event.

ProviderId ProviderId ProviderId ProviderId

Gets the globally unique identifier (GUID) of the event provider that published this event.

ProviderName ProviderName ProviderName ProviderName

Gets the name of the event provider that published this event.

Qualifiers Qualifiers Qualifiers Qualifiers

Gets qualifier numbers that are used for event identification.

RecordId RecordId RecordId RecordId

Gets the event record identifier of the event in the log.

RelatedActivityId RelatedActivityId RelatedActivityId RelatedActivityId

Gets a globally unique identifier (GUID) for a related activity in a process for which an event is involved.

Task Task Task Task

Gets a task identifier for a portion of an application or a component that publishes an event. A task is a 16-bit value with 16 top values reserved. This type allows any value between 0x0000 and 0xffef to be used. To obtain the task name, get the value of the TaskDisplayName property.

TaskDisplayName TaskDisplayName TaskDisplayName TaskDisplayName

Gets the display name of the task for the event.

ThreadId ThreadId ThreadId ThreadId

Gets the thread identifier for the thread that the event provider is running in.

TimeCreated TimeCreated TimeCreated TimeCreated

Gets the time, in DateTime format, that the event was created.

UserId UserId UserId UserId

Gets the security descriptor of the user whose context is used to publish the event.

Version Version Version Version

Gets the version number for the event.


Dispose() Dispose() Dispose() Dispose()

Releases all the resources used by this object.

Dispose(Boolean) Dispose(Boolean) Dispose(Boolean) Dispose(Boolean)

Releases the unmanaged resources used by this object, and optionally releases the managed resources.

Equals(Object) Equals(Object) Equals(Object) Equals(Object)

Determines whether the specified object is equal to the current object.

(Inherited from Object)
FormatDescription() FormatDescription() FormatDescription() FormatDescription()

Gets the event message in the current locale.

FormatDescription(IEnumerable<Object>) FormatDescription(IEnumerable<Object>) FormatDescription(IEnumerable<Object>) FormatDescription(IEnumerable<Object>)

Gets the event message, replacing variables in the message with the specified values.

GetHashCode() GetHashCode() GetHashCode() GetHashCode()

Serves as the default hash function.

(Inherited from Object)
GetType() GetType() GetType() GetType()

Gets the Type of the current instance.

(Inherited from Object)
MemberwiseClone() MemberwiseClone() MemberwiseClone() MemberwiseClone()

Creates a shallow copy of the current Object.

(Inherited from Object)
ToString() ToString() ToString() ToString()

Returns a string that represents the current object.

(Inherited from Object)
ToXml() ToXml() ToXml() ToXml()

Gets the XML representation of the event. All of the event properties are represented in the event XML. The XML conforms to the event schema.

Applies to

See also