User Data type: string Access type: Read-only User name of the logged-on user when the event occurred. If the user name cannot be determined, this will be NULL. Remarks Optimizing Search Queries The way an event log query is constructed can have a huge impact on how long it takes WMI to process the query and return the requested information. This is not necessarily true of other managed objects. F
![Win32\_NTLogEvent class](https://cdn-ak-scissors.b.st-hatena.com/image/square/d6e4cb632c7025e9f5e05fd314fbf6dcd6144e8d/height=288;version=1;width=512/https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fmedia%2Fopen-graph-image.png)