SuccessAuditEvent class

The parent class from which all success audit event trace classes are derived.

The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties.

Syntax

[Dynamic, EventType(80), EventLevel(4), EventVersion(1), EventTypeName("SuccessAuditEvent")]
class SuccessAuditEvent : AuditEvent
{
  uint8   SECURITY_DESCRIPTOR[];
  uint64  TIME_CREATED;
  string  EventTime;
  string  EventID;
  sint64  SequenceNumber;
  sint64  Occurrence;
  sint32  EventCode;
  sint32  EventDetailCode;
  string  EventMessage;
  string  ApplicationDomain;
  string  TrustLevel;
  string  ApplicationVirtualPath;
  string  ApplicationPath;
  string  MachineName;
  string  CustomEventDetails;
  string  SecurityDescriptor = "O:BAG:BAD:(A;;0x10000001;;;S-1-5-11)";
  sint32  ProcessID;
  string  ProcessName;
  string  AccountName;
  string  RequestUrl;
  string  RequestPath;
  string  UserHostAddress;
  string  UserName;
  boolean UserAuthenticated;
  string  UserAuthenticationType;
  string  RequestThreadAccountName;
};

Members

The SuccessAuditEvent class has these types of members:

• Properties

Properties

The SuccessAuditEvent class has these properties.

AccountName

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (3), StringTermination ("NullTerminated"), format ("w")

The account name.

ApplicationDomain

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (8), StringTermination ("NullTerminated"), format ("w")

The application domain.

ApplicationPath

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (11), StringTermination ("NullTerminated"), format ("w")

The application path.

ApplicationVirtualPath

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (10), StringTermination ("NullTerminated"), format ("w")

The application virtual path.

CustomEventDetails

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (13), StringTermination ("NullTerminated"), format ("w")

Custom event details.

EventCode

Data type: sint32

Access type: Read-only

Qualifiers: WmiDataId (5)

The event code.

EventDetailCode

Data type: sint32

Access type: Read-only

Qualifiers: WmiDataId (6)

The event detail code.

EventID

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (2), StringTermination ("NullTerminated"), format ("w")

The identifier of the event.

EventMessage

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (7), StringTermination ("NullTerminated"), format ("w")

The message that describes the event.

EventTime

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (1), StringTermination ("NullTerminated"), format ("w")

The time the event occurred.

MachineName

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (12), StringTermination ("NullTerminated"), format ("w")

The name of the machine.

Occurrence

Data type: sint64

Access type: Read-only

Qualifiers: WmiDataId (4)

The nth occurrence of the event.

ProcessID

Data type: sint32

Access type: Read-only

Qualifiers: WmiDataId (1)

The process identifier.

ProcessName

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (2), StringTermination ("NullTerminated"), format ("w")

The name of the process.

RequestPath

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (2), StringTermination ("NullTerminated"), format ("w")

The path of the request.

RequestThreadAccountName

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (7), StringTermination ("NullTerminated"), format ("w")

The name of the account that requested the thread.

RequestUrl

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (1), StringTermination ("NullTerminated"), format ("w")

The URL of the request.

SECURITY_DESCRIPTOR

Data type: uint8 array

Access type: Read-only

Descriptor used by the event provider to determine which users can receive the event. This property is inherited from __Event. For more information about constants used to set this security descriptor, see WMI Security Constants.

SecurityDescriptor

Data type: string

Access type: Read-only

Descriptor used by the event provider to determine which users can receive the event.

SequenceNumber

Data type: sint64

Access type: Read-only

Qualifiers: WmiDataId (3)

The event sequence number.

TIME_CREATED

Data type: uint64

Access type: Read-only

Unique value that indicates the time at which the event was generated. This is a 64-bit value that represents the number of 100-nanosecond intervals after January 1, 1601. The information is in the Coordinated Universal Times (UTC) format. This property is inherited from __Event.

For more information about using uint64 values in scripts, see Scripting in WMI.

TrustLevel

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (9), StringTermination ("NullTerminated"), format ("w")

The level of code access security (CAS) that is applied to the application.

UserAuthenticated

Data type: boolean

Access type: Read-only

Qualifiers: WmiDataId (5)

Is the user authenticated.

UserAuthenticationType

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (6), StringTermination ("NullTerminated"), format ("w")

The type of user authentication.

UserHostAddress

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (3), StringTermination ("NullTerminated"), format ("w")

The user host address.

UserName

Data type: string

Access type: Read-only

Qualifiers: WmiDataId (4), StringTermination ("NullTerminated"), format ("w")

The user name.

Requirements

Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008
Namespace	Root\aspnet
MOF	AspNet.mof
DLL	MSCoree.dll