EventInfo Properties

Win32_NTLogEvent: Value of the lower 16-bits of the EventIdentifier property. It is present to match the value displayed in the Windows Event Viewer.

Win32_NTLogEvent: List of the insertion strings that accompanied the report of the Windows event.

Win32_NTLogEvent: Name of Windows event log file. Together with RecordNumber, this is used to uniquely identify an instance of this class.

Win32_NTLogEvent: Event message as it appears in the Windows event log. This is a standard message with zero or more insertion strings supplied by the source of the Windows event. The insertion strings are inserted into the standard message in a predefined format. If there are no insertion strings or there is a problem inserting the insertion strings, only the standard message will be present in this field.

Win32_NTLogEvent: Identifies the event within the Windows event log file. This is specific to the log file and is used together with the log file name to uniquely identify an instance of this class.

Win32_NTLogEvent: Name of the source (application, service, driver, or subsystem) that generated the entry. It is used, together with EventIdentifier to uniquely identify a Windows event type.

Win32_NTLogEvent: The time when the event is generated.

Win32_NTLogEvent: Type of event. This is an enumerated string. It is preferable to use the EventType property rather than the Type property.