WqlEventQuery.Condition Property
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Gets or sets the condition to be applied to events of the specified class.
public:
property System::String ^ Condition { System::String ^ get(); void set(System::String ^ value); };
public string Condition { get; set; }
member this.Condition : string with get, set
Public Property Condition As String
Property Value
Returns a String value containing the condition or conditions in the event query.
Examples
The following example initializes a new WqlEventQuery and displays the event query string.
using System;
using System.Management;
public class EventSample
{
public static void Main(string[] args)
{
WqlEventQuery query = new WqlEventQuery();
query.EventClassName = "__InstanceCreationEvent";
query.Condition = "TargetInstance ISA 'Win32_NTLogEvent'";
query.GroupWithinInterval = new TimeSpan(0, 0, 10);
System.Collections.Specialized.StringCollection collection =
new System.Collections.Specialized.StringCollection();
collection.Add("TargetInstance.SourceName");
query.GroupByPropertyList = collection;
query.HavingCondition = "NumberOfEvents > 25";
Console.WriteLine(query.QueryString);
return;
}
}
Imports System.Management
Public Class EventSample
Public Overloads Shared Function _
Main(ByVal args() As String) As Integer
Dim query As New WqlEventQuery
query.EventClassName = "__InstanceCreationEvent"
query.Condition = "TargetInstance ISA 'Win32_NTLogEvent'"
query.GroupWithinInterval = New TimeSpan(0, 0, 10)
Dim collection As New System.Collections.Specialized. _
StringCollection
collection.Add("TargetInstance.SourceName")
query.GroupByPropertyList = collection
query.HavingCondition = "NumberOfEvents > 25"
MessageBox.Show(query.QueryString)
End Function 'Main
End Class
Remarks
Setting this property value overrides any previous value stored in the object. The query string is rebuilt to reflect the new condition.
Property Value
The condition is represented as a string, containing one or more clauses of the form: <propName> <operator> <value> combined with logical operators. <propName> must represent a property defined on the event class specified in this query.
.NET Framework Security
Full trust for the immediate caller. This member cannot be used by partially trusted code. For more information, see Using Libraries from Partially Trusted Code.