2017-01-12 11 views
0

現在の問題は、これらのEventlogqueriesの構文がわかりません。私は私の過去1週間のすべてのイベントを与えるクエリをしたいEventLogReader filter作成されたTimeDateによるEventLogQuery

private Result<List<AssetManagementEventlogDTO>> GetEvents() 
    { 
     var eventList = new List<AssetManagementEventlogDTO>(); 
     string queryString = " *"; 
     SecureString pw = new SecureString(); 
     foreach (char c in Password) 
     { 
      pw.AppendChar(c); 
     } 
     EventLogSession session = new EventLogSession(
      IP,        // Remote Computer 
      Domain,         // Domain 
      Username,        // Username 
      pw, 
      SessionAuthentication.Default); 

     EventLogQuery query = new EventLogQuery("Security", PathType.FilePath, queryString); 
     query.Session = session; 
     GetEventlog(query, eventList, AssetManagementEventlogType.Security); 
     query = new EventLogQuery("Application", PathType.FilePath, queryString); 
     query.Session = session; 
     GetEventlog(query, eventList, AssetManagementEventlogType.Application); 
     query = new EventLogQuery("System", PathType.FilePath, queryString); 
     query.Session = session; 
     GetEventlog(query, eventList, AssetManagementEventlogType.System); 
     return Result<List<AssetManagementEventlogDTO>>.AsSuccess(eventList); 
    } 

答えて

0

私はそれが働いている今、どのような構文得OK:

 var daysAgo7 = DateTime.Now.AddDays(-7); 
     string queryString = $"*[System/TimeCreated/@SystemTime >= '{daysAgo7.ToString("yyyy-MM-dd")}T00:00:00.000000000K']"; 
関連する問題