eventlog java_哪种方法更适合在C＃中读取Windows事件日志？ WMI或EventLog

我知道这是在原帖后很久，但我希望这对于像我这样发现EventLog类太慢的未来搜索者来说是有用的 . 以下是一些代码，用于演示搜索最新的系统启动事件：

EventLog ev = new EventLog()

{

Log = "System"

};

SystemSession sess;

DateTime t1 = DateTime.Now;

DateTime t2 = DateTime.Now;

DateTime fromDate = DateTime.Now.AddDays(-30);

TimeSpan t;

int i, j=0;

t1 = DateTime.Now;

for (i = ev.Entries.Count - 1; i >= 0; i--)

{

if (ev.Entries[i].TimeGenerated < fromDate) break;

if (ev.Entries[i].InstanceId == 12)

{

//do something ...

break;

}

}

t2 = DateTime.Now;

t = new TimeSpan(t2.Ticks - t1.Ticks);

string duration = String.Format("After {0} iterations, elapsed time = {2}",

ev.Entries.Count - i,

t.ToString("c"));

如果你只想要最新的条目，我的机器上的代码花了0.28秒，而使用EventLog类代替for()循环则为7.11秒：

var entry = (from EventLogEntry e in ev.Entries

where (e.InstanceId == 12)

&& e.TimeGenerated >= fromDate

orderby e.TimeGenerated

select e).LastOrDefault();

希望能帮助到你 .