盒子论坛 v2.1

百度来的，不知道是不是你想要的：
uses
  Windows, SysUtils, EventLog;

procedure TForm1.ReadEventLog;
var
  EventLog: TEventLog;
  EventLogRec: TEventLogRecord;
  EventLogHandle: THandle;
begin
  EventLogHandle := OpenEventLog('', 'System'); // 打开系统事件日志
  if EventLogHandle = 0 then
    RaiseLastOSError;

  try
    EventLog := TEventLog.Create(nil);
    try
      EventLog.LogHandle := EventLogHandle;
      EventLog.ReadAllRecords;

      while EventLog.ReadNextRecord do
      begin
        EventLogRec := EventLog.EventLogRecord;
        // 输出事件日志记录到控制台
        Writeln('Entry Type: ', EventLogRec.EntryType);
        Writeln('Record Number: ', EventLogRec.RecordNumber);
        Writeln('Time Generated: ', EventLogRec.TimeGenerated);
        Writeln('Time Written: ', EventLogRec.TimeWritten);
        Writeln('Event ID: ', EventLogRec.EventID);
        Writeln('Event Type: ', EventLogRec.EventType);
        Writeln('Source Name: ', EventLogRec.SourceName);
        Writeln('Category: ', EventLogRec.Category);
        Writeln('Event User: ', EventLogRec.EventUserName);
        Writeln('Computer: ', EventLogRec.ComputerName);
        Writeln('Description: ', EventLogRec.EventData);
        Writeln;
      end;
    finally
      EventLog.Free;
    end;
  finally
    CloseEventLog(EventLogHandle); // 关闭事件日志句柄
  end;
end;
----------------------------------------------
-广袤璀璨的银河,永无止境的梦想(梦无止境游银河) 博客挂了……

信息

登陆以后才能回复