This class contains information about a Windows NT log file on a client computer. This class is not included in a default hardware inventory operation.
Table C.30 NT Eventlog File Attribute Class (SMS_G_System_NT_EVENTLOG_FILE)
| Property (Bold if collected) | Data type | Example | Notes |
|---|---|---|---|
| Archive | uint32 | 1 | A Boolean that indicates that a file should be archived.
Values are: |
| Caption | string | "C:\\WINNT40\\ system32\\config\\ AppEvent.Evt" | Describes the object. Maximum length is 64 characters. |
| Compressed | uint32 | 1 | A Boolean that indicates that a file is compressed.
Values are: |
| CreationDate | datetime | See “Date and Time Formats” at the beginning of Appendix B. | Indicates a file’s creation date. |
| Description | string | "C:\\WINNT40\\ system32\\config\\ AppEvent.Evt" | Describes the object. |
| Encrypted | uint32 | 1 | A Boolean that indicates that a file is encrypted.
Values are: |
| Extension | string | "txt" | Indicates a file extension without a leading period.
Examples: txt, mof, and mdb |
| FileType | string | "EVT File" | Describes the file type indicated by the Extension property. |
| FSName | string | Indicates the scoping FileSystem’s name. Maximum length is 256 characters. | |
| GroupID | uint32 | 2 | Within one ResourceId (one SMS client), GroupID distinguishes one instance of a class from another. Objects with the same ResourceId and GroupID are “deltas” of one another, describing the same hardware inventory instance at different points in time. This is not a collectable property. |
| InstallDate | datetime | See “Date and Time Formats” at the beginning of Appendix B. | Indicates when the object was installed. The absence of a value does not indicate that the object is not installed. |
| LastAccessed | datetime | See “Date and Time Formats” at the beginning of Appendix B. | Indicates the time that the file was last accessed. |
| LastModified | datetime | See “Date and Time Formats” at the beginning of Appendix B. | Indicates the time that the file was last modified. |
| LogfileName | string | "Application" | |
| MaxFileSize | uint32 | Kilobytes. | |
| Name | string | "C:\\WINNT40\\ system32\\config\\ AppEvent.Evt" | Key. Defines the label that the object is known by. Maximum length is 256 characters. |
| NumberOfRecords | uint32 | 97 | |
| OverwriteOutDated | uint32 | ||
| OverWritePolicy | string | ||
| Path | string | "\\windows\\ system\\" | Indicates the path of the file, including leading and trailing backslashes. |
| Readable | uint32 | 0 | A Boolean that indicates that a file can be read.
Values are: |
| ResourceId | uint32 | 42 | Key. Inventory items with the same ResourceId were all discovered on the same SMS client. The ResourceId identifies the SMS client.
A ResourceId is an integer generated for the sake of SQL; it is not unique outside the site and should be used only for short-term querying purposes. It is not a collectable property. |
| RevisionID | uint32 | 1 | Objects with the same ResourceId and GroupID are deltas, differentiated from one another by RevisionID number. The highest number is the most recent update. This is not a collectable property. |
| Sources | string | ||
| Status | string | "OK" | Indicates the current status of the object.
Values are: Maximum length is 10 characters. |
| TimeStamp | datetime | See “Date and Time Formats” at the beginning of Appendix B. | Indicates when the information in this object was last revised. This is not a collectable property. |
| Writeable | uint32 | 1 | A Boolean that indicates that a file can be written.
Values are: |