測試

using System;
using System.Diagnostics;

namespace WindowsConsoleApp
{
    //測試
    public class EnventLogHelper
    {
        private EventLog log;

        public EnventLogHelper()
        {
            log = new EventLog();//默認寫應用程序日誌
        }
        public EnventLogHelper(string name)
        {
            log 
 
= new EventLog(name);//指定寫入的分類，用戶自定義則新建分組。系統保留//"Application"應用程序, "Security"安全, "System"系統
            //或者可以用 log.Log = "Security";指定
        }



        public void WriteToApp()
        {
            try
            {

                log.Source = "我的應用程序";//日誌來源
                log.WriteEntry("處理信息1", EventLogEntryType.Information);//
 
日誌類型
                log.WriteEntry("處理信息2", EventLogEntryType.Information);
                throw new System.IO.FileNotFoundException("readme.txt文件未找到");
            }
            catch (System.IO.FileNotFoundException exception)
            {
                log.WriteEntry(exception.Message, EventLogEntryType.Error);

            }
        }

        
 
public void ReadLog()
        {
            EventLogEntryCollection eventLogEntryCollection = log.Entries;//獲取日誌collection
            foreach (EventLogEntry entry in eventLogEntryCollection)
            {
                
                string info = string.Empty;

                info += "【類型】：" + entry.EntryType.ToString() + ";";
                info += "【日期】" + entry.TimeGenerated.ToLongDateString() + ";";
                info += "【時間】" + entry.TimeGenerated.ToLongTimeString() + ";";

                info += "【計算機】" + entry.MachineName + "【來源】" + entry.Source + "【詳細信息】" + entry.Message + "【】";
                //
                Console.WriteLine(info);

            }
        }


    }
}

資源：

https://referencesource.microsoft.com/#System/services/monitoring/system/diagnosticts/EventLog.cs

https://msdn.microsoft.com/zh-cn/library/system.diagnostics.eventlog(v=vs.110).aspx

深入解密.NET（Windows事件日誌）