ManagementEventWatcher TargetInstance Properties List?

Posted on 2009-04-28
Last Modified: 2012-05-06

 I'm looking for a complete list, specifically 'Keywords' as found in Windows Event Viewer Security logs.  

Question by:pointeman
    LVL 96

    Expert Comment

    by:Bob Learned
    Huh, wha...?

    Accepted Solution

    Answer: No 'Keywords' property exists in ' - Win32_NTLogEvent '

    Win32_NTLogEvent Property Names: (alphabetical order)
    * Catagory
    * CatagoryString
    * ComputerName
    * Data
    * EventCode
    * EventIdentifier
    * EventType
    * InsertionStrings
    * Logfile
    * Message
    * RecordNumber
    * SourceName
    * TimeGenerated
    * TimeWritten
    * Type
    * User

    using System;
    using System.Collections.Generic;
    using System.Text;
    using System.Management;

    namespace ManagementBaseObject_Properties_Probe
    class Program
    static void Main(string[] args)
    // Get the WMI class
    ManagementClass processClass = new ManagementClass("Win32_NTLogEvent");
    processClass.Options.UseAmendedQualifiers = true;
    // Get the properties in the class
    PropertyDataCollection properties = processClass.Properties;
    // display the properties
    Console.WriteLine("Win32_NTLogEvent Property Names: ");
    foreach (PropertyData property in properties)

    LVL 96

    Expert Comment

    by:Bob Learned
    I still don't understand what you were asking for.  What is the operating system?  Windows XP doesn't have any "Keywords"...  I thought you were looking for a property on the TargetInstance class, and that didn't make any sense either...

    Author Comment

    Open the Event Viewer on 2000, xp, vista computer and double-click an event in any log. There is a category named 'Keywords'. It made sense to me that 'Keywords' would be a property, but as it turns out the 'TargentInstance.Type' is the actual column I needed. It will usually contain 'audit success or audit failure. Anyway, sorry for the confusion....

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Summary: Persistence is the capability of an application to store the state of objects and recover it when necessary. This article compares the two common types of serialization in aspects of data access, readability, and runtime cost. A ready-to…
    We all know that functional code is the leg that any good program stands on when it comes right down to it, however, if your program lacks a good user interface your product may not have the appeal needed to keep your customers happy. This issue can…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now