4

I'm implementing an application that works similar to Windows Event Viewer. I mean that it monitors System Event Logs and Application Event logs with the help of EventLog and EventLogEntry classes.

Is it possible to obtain Application Event logs for particular process (for example Chrome)?

In the list of log entries I can find different Sources like "Winlogon", "WMI", "MSSQL$SQLEXPRESS" and so on, but not the name of particular app.

Agustin Meriles
  • 4,866
  • 3
  • 29
  • 44
Alex B.
  • 77
  • 3
  • 7

1 Answers1

1

Application name is not recorded in the event log entries. In fact, even the sources are not a reliable indicator, because you can write your own message with any source you want.

alex
  • 12,464
  • 3
  • 46
  • 67
  • 1
    So it seems to be impossible to monitor if some critical errors or warnings in third-party application happened, doesn't it? If I understand correctly it is possible only when this third-party app writes logs to Event Viewer itself. – Alex B. Mar 27 '13 at 15:23
  • Windows error reporting writes an event log entry, if application had a hard crash and "send error report to microsoft" appears. You can search that message for process name. However, many applications have their own error reporting tools that may not write anything to windows event log. – alex Mar 27 '13 at 16:15