4 eventlog interface definition
6 import
"lsa.idl", "security.idl";
8 [ uuid("82273fdc-e32a-18c3-3f78-827929dc23ea"),
10 pointer_default(unique),
11 helpstring("Event Logger")
15 EVENTLOG_SEQUENTIAL_READ
= 0x0001,
16 EVENTLOG_SEEK_READ
= 0x0002,
17 EVENTLOG_FORWARDS_READ
= 0x0004,
18 EVENTLOG_BACKWARDS_READ
= 0x0008
22 EVENTLOG_SUCCESS
= 0x0000,
23 EVENTLOG_ERROR_TYPE
= 0x0001,
24 EVENTLOG_WARNING_TYPE
= 0x0002,
25 EVENTLOG_INFORMATION_TYPE
= 0x0004,
26 EVENTLOG_AUDIT_SUCCESS
= 0x0008,
27 EVENTLOG_AUDIT_FAILURE
= 0x0010
33 } eventlog_OpenUnknown0
;
35 typedef [public] struct {
39 uint32 time_generated
;
43 uint16 num_of_strings
;
44 uint16 event_category
;
45 uint16 reserved_flags
;
46 uint32 closing_record_number
;
53 nstring computer_name
;
54 nstring strings
[num_of_strings
];
60 NTSTATUS eventlog_ClearEventLogW
(
61 [in] policy_handle
*handle,
62 [in,unique] lsa_String
*unknown
67 NTSTATUS eventlog_BackupEventLogW
();
71 NTSTATUS eventlog_CloseEventLog
(
72 [in,out] policy_handle
*handle
77 NTSTATUS eventlog_DeregisterEventSource
();
81 NTSTATUS eventlog_GetNumRecords
(
82 [in] policy_handle
*handle,
83 [out,ref] uint32
*number
88 NTSTATUS eventlog_GetOldestRecord
();
92 NTSTATUS eventlog_ChangeNotify
();
96 NTSTATUS eventlog_OpenEventLogW
(
97 [in,unique] eventlog_OpenUnknown0
*unknown0
,
98 [in] lsa_String logname
,
99 [in] lsa_String servername
,
100 [in] uint32 unknown2
,
101 [in] uint32 unknown3
,
102 [out] policy_handle
*handle
107 NTSTATUS eventlog_RegisterEventSourceW
();
111 NTSTATUS eventlog_OpenBackupEventLogW
();
115 NTSTATUS eventlog_ReadEventLogW
(
116 [in] policy_handle
*handle,
119 [in] uint32 number_of_bytes
,
120 [out,size_is(number_of_bytes
)] uint8
*data
,
121 [out,ref] uint32
*sent_size
,
122 [out,ref] uint32
*real_size
127 NTSTATUS eventlog_ReportEventW
();
131 NTSTATUS eventlog_ClearEventLogA
();
135 NTSTATUS eventlog_BackupEventLogA
();
139 NTSTATUS eventlog_OpenEventLogA
();
143 NTSTATUS eventlog_RegisterEventSourceA
();
147 NTSTATUS eventlog_OpenBackupEventLogA
();
151 NTSTATUS eventlog_ReadEventLogA
();
155 NTSTATUS eventlog_ReportEventA
();
159 NTSTATUS eventlog_RegisterClusterSvc
();
163 NTSTATUS eventlog_DeregisterClusterSvc
();
167 NTSTATUS eventlog_WriteClusterEvents
();
171 NTSTATUS eventlog_GetLogIntormation
();
175 NTSTATUS eventlog_FlushEventLog
(
176 [in] policy_handle
*handle