Source name when writing to event viewer C#

Question

How do you change the source name when writing to the event viewer in C# language?

Currently have this

string cs = "Application";

            if (!EventLog.SourceExists(cs))
            EventLog.CreateEventSource(cs, "ReceiveDaily");
            EventLog.WriteEntry(cs, message.Message, EventLogEntryType.Error);

If I change CS to anything else, I see a Security-Kerberos (0x7) popping up at my event viewer It writes the error in the errorlog when I put "Application" though. But then the source is "Application", which isn't a very good description from where it comes ...

Thanks in advance.

You need to run your app in admin mode to create an event source. — Phil, Mar 07 '12 at 12:36

score 1 · Answer 1 · edited May 23 '17 at 12:12

1

You will need to run your app in admin mode.

You can do this from explorer by right clicking on your app and selecting 'Run as administrator'.

Alternatively you could add a manifest to your app so that it automatically requests admin privileges when run.

The final (and worst from a security point of view) option is to disable UAC via the control panel.

edited May 23 '17 at 12:12

Community

1
1

answered Mar 07 '12 at 12:44

Phil

42,255
9
100
100

score 1 · Accepted Answer · answered Mar 07 '12 at 12:51

1

As @Phil mentions, I don't think that you can dynamically create event sources unless you are running in admin mode.

However, if you know the set of sources that your application needs, then you can pre-install them using a System.Diagnostics.EventLogInstaller and InstallUtil.exe. These sources will then be available to use by your application.

This has a good example of setting up the installer.

answered Mar 07 '12 at 12:51

Davin Tryon

66,517
15
143
132

Which file do you run in admin mode then from the explorer? The coding file? – Dashzapp Mar 07 '12 at 12:57
I mean, can you debug as admin? Or should I publish it first? – Dashzapp Mar 07 '12 at 12:59
You compile then installer, the run installutil from an admin command prompt with the compiled all as the first argument. – Davin Tryon Mar 07 '12 at 13:24

Source name when writing to event viewer C#

2 Answers2

Linked