Sumit Kumawat

Sumit Kumawat

  • NA
  • 454
  • 405.8k

How to get all properties of event viewer file(.evtx)?

Oct 4 2017 1:03 AM
Hi All
 
I am writing a Text file which is containing all properties of .Evtx file.
 
While retiring the properties of event viewer file (.evtx) sometimes some properties values are coming as a null. for example below properties:
LevelDisplayName
TaskDisplayName
EventID
 
I am getting null values for them sometimes.
 
So I want to ask is there any other properties which have same values so that I can read values.
 
Thanks
 
What I have tried:
 
I tried to search all properties while debugging but not able to find.

Answers (2)