Read from the event Viewer

[d33a]

Hello,

I have a small question.
I am using asp .net 2.0 and i am trying to read from the event viewer and display in a console the users that have logged on the computer, first and last logon/logout hour.
I am not getting verry far:
this is what i wrote so far:

EventLog myNewLog = new EventLog();
myNewLog.Log = "Security";
foreach (EventLogEntry entry in myNewLog.Entries)
{
EventLog.GetEventLogs();
Console.WriteLine("\tEntry:" + entry.Message);

}

// if (EventLogEntryType.SuccessAudit && ) -> the type has to be SuccessAudit, the Category has to be Logon/Logoff but i can't find eventlog.category or something like that.

Can anyone help me please?

[kenobewan]

Here is an article that may give you a start:
Build a Really Useful ASP.NET Exception Engine

[d33a]

ok, so i did it, after a vacation :)
my only problem is that i want to ignore the Logon Type 7(from the eventLogEntry Message) because that means the workstation was unlocked/locked. Does anybody have any idea (except the parsing of the string, doesn't help me because the event log with the id 551 doesn't have a Logon Type in the message).

This is the function that does the search

public static ArrayList EventLogSearch(string username, DateTime myLastEntryInText, Boolean firstRun)
{
ArrayList intrari = new ArrayList();
EventLog myNewLog = new EventLog();
myNewLog.Log = "Security";
foreach (EventLogEntry entry in myNewLog.Entries)
{
if (firstRun == false)
{
if (

entry.UserName.Equals(username) &&
entry.TimeGenerated.Date > myLastEntryInText.Date &&
entry.TimeGenerated.Date != DateTime.Today &&
(entry.InstanceId.Equals(528) || entry.InstanceId.Equals(551) || entry.InstanceId.Equals(538))
)
{
if (!(intrari.Count == 0 && entry.InstanceId.Equals(551)))
intrari.Add(entry.TimeGenerated.ToString());
Console.WriteLine(entry.EntryType.ToString());
}
}
else
{
if (
entry.UserName.Equals(username) &&
entry.TimeGenerated.Date == myLastEntryInText.Date &&
(entry.InstanceId.Equals(528) || entry.InstanceId.Equals(551) || entry.InstanceId.Equals(538))
)
{
// If the first event is logoff then ignore
if (!(intrari.Count == 0 && entry.InstanceId.Equals(538)))
{
intrari.Add(entry.TimeGenerated.ToString());

}
}
}
}
return intrari;
}