WebSuccessAuditEvent Class
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Provides information about successful security events.
public ref class WebSuccessAuditEvent : System::Web::Management::WebAuditEvent
public class WebSuccessAuditEvent : System.Web.Management.WebAuditEvent
type WebSuccessAuditEvent = class
inherit WebAuditEvent
Public Class WebSuccessAuditEvent
Inherits WebAuditEvent
- Inheritance
- Derived
Examples
The following code example shows how to derive from the WebSuccessAuditEvent class to create a custom audit event.
using System;
using System.Text;
using System.Web;
using System.Web.Management;
namespace SamplesAspNet
{
// Implements a custom WebSuccessAuditEvent class.
public class SampleWebSuccessAuditEvent :
System.Web.Management.WebSuccessAuditEvent
{
private string customCreatedMsg, customRaisedMsg;
// Invoked in case of events identified only by their event code.
public SampleWebSuccessAuditEvent(string msg,
object eventSource, int eventCode)
:
base(msg, eventSource, eventCode)
{
// Perform custom initialization.
customCreatedMsg =
string.Format("Event created at: {0}",
DateTime.Now.TimeOfDay.ToString());
}
// Invoked in case of events identified by their event code.and
// event detailed code.
public SampleWebSuccessAuditEvent(string msg, object eventSource,
int eventCode, int detailedCode)
:
base(msg, eventSource, eventCode, detailedCode)
{
// Perform custom initialization.
customCreatedMsg =
string.Format("Event created at: {0}",
DateTime.Now.TimeOfDay.ToString());
}
// Raises the SampleWebSuccessAuditEvent.
public override void Raise()
{
// Perform custom processing.
customRaisedMsg =
string.Format("Event raised at: {0}",
DateTime.Now.TimeOfDay.ToString());
// Raise the event.
WebBaseEvent.Raise(this);
}
// Obtains the current thread information.
public WebRequestInformation GetRequestInformation()
{
// No customization allowed.
return RequestInformation;
}
//Formats Web request event information.
//This method is invoked indirectly by the provider using one of the
//overloaded ToString methods.
public override void FormatCustomEventDetails(WebEventFormatter formatter)
{
base.FormatCustomEventDetails(formatter);
// Add custom data.
formatter.AppendLine("");
formatter.IndentationLevel += 1;
formatter.AppendLine(
"******** SampleWebSuccessAuditEvent Start ********");
formatter.AppendLine(string.Format("Request path: {0}",
RequestInformation.RequestPath));
formatter.AppendLine(string.Format("Request Url: {0}",
RequestInformation.RequestUrl));
// Display custom event timing.
formatter.AppendLine(customCreatedMsg);
formatter.AppendLine(customRaisedMsg);
formatter.AppendLine(
"******** SampleWebSuccessAuditEvent End ********");
formatter.IndentationLevel -= 1;
}
}
}
Imports System.Text
Imports System.Web
Imports System.Web.Management
' Implements a custom WebSuccessAuditEvent class.
Public Class SampleWebSuccessAuditEvent
Inherits System.Web.Management.WebSuccessAuditEvent
Private customCreatedMsg, customRaisedMsg As String
' Invoked in case of events identified only by their event code.
Public Sub New(ByVal msg As String, _
ByVal eventSource As Object, ByVal eventCode As Integer)
MyBase.New(msg, eventSource, eventCode)
' Perform custom initialization.
customCreatedMsg = String.Format("Event created at: {0}", _
DateTime.Now.TimeOfDay.ToString())
End Sub
' Invoked in case of events identified by their event code.and
' event detailed code.
Public Sub New(ByVal msg As String, ByVal eventSource As Object, _
ByVal eventCode As Integer, ByVal detailedCode As Integer)
MyBase.New(msg, EventSource, eventCode, detailedCode)
' Perform custom initialization.
customCreatedMsg = String.Format("Event created at: {0}", _
DateTime.Now.TimeOfDay.ToString())
End Sub
' Raises the SampleWebSuccessAuditEvent.
Public Overrides Sub Raise()
' Perform custom processing.
customRaisedMsg = String.Format("Event raised at: {0}", _
DateTime.Now.TimeOfDay.ToString())
' Raise the event.
WebBaseEvent.Raise(Me)
End Sub
' Obtains the current thread information.
Public Function GetRequestInformation() As WebRequestInformation
' No customization allowed.
Return RequestInformation
End Function 'GetRequestInformation
'Formats Web request event information.
'This method is invoked indirectly by the provider using one of the
'overloaded ToString methods.
Public Overrides Sub FormatCustomEventDetails(ByVal formatter _
As WebEventFormatter)
MyBase.FormatCustomEventDetails(formatter)
' Add custom data.
formatter.AppendLine("")
formatter.IndentationLevel += 1
formatter.AppendLine("**SampleWebSuccessAuditEvent Start **")
formatter.AppendLine(String.Format("Request path: {0}", _
RequestInformation.RequestPath))
formatter.AppendLine(String.Format("Request Url: {0}", _
RequestInformation.RequestUrl))
' Display custom event timing.
formatter.AppendLine(customCreatedMsg)
formatter.AppendLine(customRaisedMsg)
formatter.AppendLine("** SampleWebSuccessAuditEvent End **")
formatter.IndentationLevel -= 1
End Sub
End Class
The following example is an excerpt of the configuration file that enables ASP.NET health monitoring to use the event.
<healthMonitoring
..enabled="true"
..heartBeatInterval="0">
<providers>
<add name="EventLogProvider"
type="System.Web.Management.EventLogWebEventProvider,
System.Web,Version=2.0.3600.0,Culture=neutral,
PublicKeyToken=b03f5f7f11d50a3a"/>
</providers>
<eventMappings>
<add name="SampleWebSuccessAuditEvent"
type="SamplesAspNet.SampleWebSuccessAuditEvent,
websuccessauditevent,Version=1.0.1663.31140,
Culture=neutral,
PublicKeyToken=0d1fa0f69d94de96,
processorArchitecture=MSIL"/>
</eventMappings>
<rules>
<add name="Custom Failure Audit Default"
eventName=" SampleWebFailureAuditEvent "
provider="EventLogProvider"
profile="Default"/>
</rules>
</healthMonitoring>
Remarks
ASP.NET health monitoring allows production and operations staff to manage deployed Web applications. The System.Web.Management namespace contains the health event types responsible for packaging application health-status data and the provider types responsible for processing this data. It also contains supporting types that help during the management of health events.
The WebSuccessAuditEvent class is used when a successful security-related operation occurs. An example of this is a successful URL authorization for a Web request.
The following list describes the features for which events of type WebSuccessAuditEvent are raised by ASP.NET:
File Authorization. Successful conditions are audited. File authorization is only attempted by ASP.NET when a Windows Identity is associated with the request. The related event audit code is AuditFileAuthorizationSuccess.
URL Authorization. It signifies access of a URL resource for which authorization is granted. Successful conditions are audited. The related event audit code is AuditUrlAuthorizationSuccess.
Other security conditions. The following is a list of the related event codes:
When a WebSuccessAuditEvent is raised, ASP.NET health monitoring increments the related Audit Success Events Raised performance counter and then checks the healthMonitoring
configuration to determine whether any providers subscribe to the event. If providers subscribe to the event, ASP.NET dispatches the event to them for processing.
Note
To view the Audit Success Event Raised performance counter in System Monitor (PerfMon), in the Add Counters window select ASP.NET from the Performance object drop-down list, select the Audit Success Event Raised performance counter, and click the Add button. For more information, see Monitoring ASP.NET Application Performance.
Because success audits represent an expected condition, you may not want to subscribe to them. You can subscribe to them in order to provide access auditing for the site.
Note
In most cases you will be able to use the ASP.NET health-monitoring types as implemented, and you will control the health-monitoring system by specifying values in the healthMonitoring
configuration section. You can also derive from the health-monitoring types to create your own custom events and providers. For an example of deriving from the WebSuccessAuditEvent class, see the example provided in this topic.
Constructors
WebSuccessAuditEvent(String, Object, Int32) |
Initializes a new instance of the WebSuccessAuditEvent class using the supplied parameters. |
WebSuccessAuditEvent(String, Object, Int32, Int32) |
Initializes a new instance of the WebSuccessAuditEvent class using the supplied parameters. |
Properties
EventCode |
Gets the code value associated with the event. (Inherited from WebBaseEvent) |
EventDetailCode |
Gets the event detail code. (Inherited from WebBaseEvent) |
EventID |
Gets the identifier associated with the event. (Inherited from WebBaseEvent) |
EventOccurrence |
Gets a counter that represents the number of times the event has occurred. (Inherited from WebBaseEvent) |
EventSequence |
Gets the number of times the event has been raised by the application. (Inherited from WebBaseEvent) |
EventSource |
Gets the object that raises the event. (Inherited from WebBaseEvent) |
EventTime |
Gets the time when the event was raised. (Inherited from WebBaseEvent) |
EventTimeUtc |
Gets the time when the event was raised. (Inherited from WebBaseEvent) |
Message |
Gets the message that describes the event. (Inherited from WebBaseEvent) |
ProcessInformation |
Gets information about the ASP.NET application-hosting process. (Inherited from WebManagementEvent) |
RequestInformation |
Get the information associated with the Web request. (Inherited from WebAuditEvent) |
Methods
Equals(Object) |
Determines whether the specified object is equal to the current object. (Inherited from Object) |
FormatCustomEventDetails(WebEventFormatter) |
Provides standard formatting of the event information. (Inherited from WebBaseEvent) |
GetHashCode() |
Serves as the default hash function. (Inherited from Object) |
GetType() |
Gets the Type of the current instance. (Inherited from Object) |
IncrementPerfCounters() |
Increments the Audit Success Events Raised performance counter. |
MemberwiseClone() |
Creates a shallow copy of the current Object. (Inherited from Object) |
Raise() |
Raises an event by notifying any configured provider that the event has occurred. (Inherited from WebBaseEvent) |
ToString() |
Formats event information for display purposes. (Inherited from WebBaseEvent) |
ToString(Boolean, Boolean) |
Formats event information for display purposes. (Inherited from WebBaseEvent) |