由网友(最是奢侈少年梦)分享简介：我试图用EventLogQuery类查询事件日志。我也跟着在 HTTP所示的例子：/ /msdn.microsoft.com/en-us/library/bb671200%28v=vs.90%29.aspx#Y0 。I'm trying to use the EventLogQuery class to query...

我试图用EventLogQuery类查询事件日志。我也跟着在 HTTP所示的例子：/ /msdn.microsoft.com/en-us/library/bb671200%28v=vs.90%29.aspx#Y0 。

I'm trying to use the EventLogQuery class to query the eventlog. I followed the example shown on http://msdn.microsoft.com/en-us/library/bb671200%28v=vs.90%29.aspx#Y0.

我已经搜索谷歌一吨，但无法找到与@SystemTime不硬codeD中有没有问题。

I've searched Google a ton but can't find any queries with the @SystemTime not hard-coded in there.

有谁知道DateTime格式，我需要用这个？一切我试过到目前为止已返回无效查询的例外。

Does anyone know the DateTime format I need to use for this? Everything I've tried so far has returned "Invalid Query" exceptions.

推荐答案

EventLogQuery使用XML格式来查询事件日志。 你可以找到查询XML 架构这里。

EventLogQuery uses an XML format to query the event log. You can find the schema for the query XML here.

在选择元素的文本是一个XPath EX pression评估对事件的XML序列化。

The text of the Select element is an XPath expression evaluated against the XML serialization of events.

您可以找到事件XML 架构这里。

You can find the schema for the event XML here.

href="http://msdn.microsoft.com/en-us/library/aa385211.aspx"> TimeCreated元素有型的