Putting XML Data into the Windows Event Log

Question

Hello: I have noticed that there is some way to insert XML into the windows event log (and not by just stuffing it into the description). The effect is that you get just your description message in the General view (windows Vista), and you can see your XML data in the Details View (If you select the "Friendly" radio button, it appears under the "Event Data" node, and if you select the XML view, you get to see the XML.

I had thought that the rawData byte array in the EventLog.WriteEntry() method would allow me to do this, so I tried stuffing output of an XMLWriter into it. That put data into the event log, but it is viewed as binary instead of XML. Has anyone done this?

Answer 1

Unless I am mistaken, in order to write xml to the Crimson/Vista event log you will have create and register a manifest that will give you the appropriate channels and events. Then you have to compile the manifest using the Message Compiler (mc.exe) in the WindowsSDK.

Then if you want to log from C# you will want to create a managed provider to wrap the event logging API. This is a little harder because you will have to use PInvoke to get at the API.

There are blog posts on how to do this whole process here.

Answer 2

You have a sample in Windows SDK (ver 6.1) called EventProvider.
Its a C# provider (needs Vista and up to work) that uses the new Event log API (AKA crimson).
This sample show how to add custom data (amount other things).