c# - 如何监听 Microsoft-Windows-NetworkProfile/操作日志中的事件？

Question

我正在尝试监听 Microsoft-Windows-NetworkProfile/Operational 日志中的事件。我可以收听主要的 Windows 日志，例如使用此代码的应用程序日志:

public static void SubscribeToLogEvents(string logName, EntryWrittenEventHandler customEventHandler)
{
    EventLog log = new EventLog();
    log.Log = logName;
    //when an entry is written to an event log on the local computer, customEventHandler is fired 
    log.EntryWritten += customEventHandler;
    //Set a value indicating EventLog receives 
    //System.Diagnostics.EventLog.EntryWritten event notifications. 
    log.EnableRaisingEvents = true;
} 

static void EventLogEntryWritten(object sender, EntryWrittenEventArgs currentEvent)
{
    var log = (EventLog)sender;
    Console.WriteLine("Event Raised: |Log:{0}|Source:{1}|EventID:{2}|", log.LogDisplayName, currentEvent.Entry.Source, currentEvent.Entry.EventID);

}

如果我使用以下内容，我可以实时查看应用程序日志中发生的事件:

SubscribeToLogEvents("Application", OnEntryWritten);

不过，我要的事件都在这里:

如何收听此日志？如果我尝试这样做:

SubscribeToLogEvents("Microsoft-Windows-NetworkProfile/Operational", OnEntryWritten);

我收到一条错误消息“未找到日志”。

Answer 1

很晚了，但这是我在寻找答案时找到的第一篇文章。所以对于一开始发现这个的人来说:

private void AttachWatcher() {
    EventLogQuery logQuery = new EventLogQuery("Microsoft-Windows-NetworkProfile/Operational", PathType.LogName, "*[System[(EventID = 10000)]]");
    EventLogWatcher logWatcher = new EventLogWatcher(logQuery);
    logWatcher.EventRecordWritten += new EventHandler<EventRecordWrittenEventArgs>(EventWritten);
    logWatcher.Enabled = true;
}

private void EventWritten(Object obj, EventRecordWrittenEventArgs arg) {
    //Do stuff
}