is it possible to read from saved event log files (*.evtx) using system.diagnostics.eventlog?

[jlynds]

I would like to read from saved windows event log files (*.evtx) using C#. These files were created by saving the "application event log" on remote servers to files which are then retrieved for local analysis.

I'm trying to use system.diagnostics.eventlog while I can view the saved event log using event viewer (the saved event log appears under a "saved logs" folder) I can't seem to read from it using system.diagnostics.eventlog. The constructor for the eventlog object accepts a log name. This seems to be the displayed name of the log. It won't accept a filename.

I can read from other event logs displayed under the "windows logs" and "applications and services logs" in event viewer.

Is there a way to read from saved event log files using C#?



Continue reading...