Analysis and Evaluation of the Windows Event Log - Bill Buchanan

CO42019 – Project 4
Displaying the registry value
The following code will display the current start-up settings for the event log.
using System;
using System.Collections.Generic;
using System.Text;
using Microsoft.Win32;
namespace ConsoleApplication2
{
class Program
{
static void Main(string[] args)
{
RegistryKey key =
Registry.LocalMachine.OpenSubKey("System\\CurrentControlSet\\Services\\EventLog");
if (key.GetValue("Start") != null)
{
// The value exists;
Console.WriteLine((int)key.GetValue("Start"));
}
Console.ReadLine();
}
}
}
The registry value has the following 3 meanings:
2 = Automatic
3 = Manual
4 = Disabled
Project – Week 5.doc Page 6 of 9