• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1259
  • Last Modified:

Monitoring Event log of a remote machine

I have code that monitors Event log on my PC and when an event is written I get notified, this code was from CodeProject, can't remember the exact url

Does anyone know if it is possible to monitor events from a remote machine?  and if so code example/url

  • 3
  • 2
1 Solution

EventLog class (System.Diagnostics) has MachineName property that allows you to monitor the remote machine event log if you have the necessary rights. For example:

EventLog lg = new EventLog();
lg.Log = "System";
lg.MachineName = "COMPUTER";
lg.EntryWritten +=new EntryWrittenEventHandler(lg_EntryWritten);
lg.EnableRaisingEvents = true;

private void lg_EntryWritten(object sender, EntryWrittenEventArgs e)
      Console.WriteLine("new entry");

A more complete sample:
gbzhhuAuthor Commented:

the code I had was from the same URL and worked OK on my PC.  Perhaps I was just missing the MachineName property setting.  I will give it a shot tomorrow when I get to work

If that works fine, my next task is to listen for multiple machines.  If you have ideas about this please post a comment and if that also works I will have another 500 points ready to dish out

gbzhhuAuthor Commented:

Setting the ComputerName doesn't work.  It results on this error

 Cannot monitor Event log. The log may exist on a remote computer

You're right. You can read event logs on remote computers, but you cannot receive notifications for entries written on remote computers.
There is a small note on the article below, that specify this.

 I'll let you now if I find another solution (other than using a timer that gets the number of entries and if this is increased, reads the last ones)..
gbzhhuAuthor Commented:

I have to close this question as we both know there is no direct answer but rather some possible workarounds.  You will get grade A for your contribution since there is no better solution than your suggestions.  Thanks for your input, particularly your link to MS site to show that we can't monitor remote server logs, which, to be honest IMNO should be allowed provided you have the correct permissions to the server

Thanks again

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now