Data acquisition from the EventLog table in Vista

EventLog table data. The common method is to use WMI .

XPAndVistaInEventLogThe table is very bad.Other:

1 . Use WMI The retrieved data, XP Of Record Yespress Time Most recently Far , And Vista However Pass .
You may encounter This way Is the customer User Some data is required to be sorted according to certain requirements. Of
. Net Of Implementation No Description Very Simple . List Class All solutions Problem .
C/C ++ Of Words You need to extract the data and put it in Chain The table is sorted by a certain format.
Because Is WMI Yes WQL Language Sentence, This language Sentence: SQL Language The subset of a sentence, which does not provide updates, sorting, and segmentation. Group .

2. XP Internal Each One EventLog China site WMI The retrieved data Time Yestouch Send this Event Hour System Unified time ( UTC Time + Hour Poor), saved Event No Sending Raw Change . While Vista Changed Into , Event In Time is UTC Time , Once used User Change Change System Unified Of Hour After the difference, Then Connect Pass Management tools Event The Time Will follow Hour Zone Change And Change But Actual Stored EventLog The table is saved only. UTC Time .
Vista Of This way Change Change , More Post But Pair Yu I Developers Come Description , Extracted Time also Yes Into Or directly Display Display UTC Time , Use User Or accept .