eventlog.h File Reference

#include <stdio.h>
#include <windows.h>
#include <netevent.h>
#include <lpctypes.h>
#include <lpcfuncs.h>
#include <rtlfuncs.h>
#include <obfuncs.h>
#include <iofuncs.h>
#include <debug.h>
#include "eventlogrpc_s.h"

Go to the source code of this file.

Data Structures
struct	PIO_ERROR_LPC
struct	PEVENTLOGHEADER
struct	PEVENTLOGEOF
struct	PEVENT_OFFSET_INFO
struct	PLOGFILE
struct	PEVENTSOURCE
struct	PLOGHANDLE
Defines
#define	NDEBUG
#define	WIN32_NO_STATUS
#define	MAJORVER   1
#define	MINORVER   1
#define	LOGFILE_SIGNATURE   0x654c664c
#define	ELF_LOGFILE_HEADER_DIRTY   1
#define	ELF_LOGFILE_HEADER_WRAP   2
#define	ELF_LOGFILE_LOGFULL_WRITTEN   4
#define	ELF_LOGFILE_ARCHIVE_SET   8
#define	LOG_HANDLE_BACKUP_FILE   1
Functions
VOID	LogfListInitialize (VOID)
PLOGFILE	LogfListHead (VOID)
INT	LogfListItemCount (VOID)
PLOGFILE	LogfListItemByIndex (INT Index)
PLOGFILE	LogfListItemByName (WCHAR *Name)
INT	LogfListItemIndexByName (WCHAR *Name)
VOID	LogfListAddItem (PLOGFILE Item)
VOID	LogfListRemoveItem (PLOGFILE Item)
DWORD	LogfReadEvent (PLOGFILE LogFile, DWORD Flags, DWORD *RecordNumber, DWORD BufSize, PBYTE Buffer, DWORD *BytesRead, DWORD *BytesNeeded, BOOL Ansi)
BOOL	LogfWriteData (PLOGFILE LogFile, DWORD BufSize, PBYTE Buffer)
NTSTATUS	LogfClearFile (PLOGFILE LogFile, PUNICODE_STRING BackupFileName)
NTSTATUS	LogfBackupFile (PLOGFILE LogFile, PUNICODE_STRING BackupFileName)
NTSTATUS	LogfCreate (PLOGFILE *Logfile, WCHAR *LogName, PUNICODE_STRING FileName, BOOL Permanent, BOOL Backup)
VOID	LogfClose (PLOGFILE LogFile, BOOL ForceClose)
VOID	LogfCloseAll (VOID)
DWORD	LogfGetOldestRecord (PLOGFILE LogFile)
DWORD	LogfGetCurrentRecord (PLOGFILE LogFile)
ULONG	LogfOffsetByNumber (PLOGFILE LogFile, DWORD RecordNumber)
BOOL	LogfAddOffsetInformation (PLOGFILE LogFile, ULONG ulNumber, ULONG ulOffset)
BOOL	LogfDeleteOffsetInformation (PLOGFILE LogFile, ULONG ulNumber)
PBYTE	LogfAllocAndBuildNewRecord (LPDWORD lpRecSize, DWORD dwRecordNumber, WORD wType, WORD wCategory, DWORD dwEventId, LPCWSTR SourceName, LPCWSTR ComputerName, DWORD dwSidLength, PSID lpUserSid, WORD wNumStrings, WCHAR *lpStrings, DWORD dwDataSize, LPVOID lpRawData)
VOID	LogfReportEvent (WORD wType, WORD wCategory, DWORD dwEventId, WORD wNumStrings, WCHAR *lpStrings, DWORD dwDataSize, LPVOID lpRawData)
VOID	PRINT_HEADER (PEVENTLOGHEADER header)
VOID	PRINT_RECORD (PEVENTLOGRECORD pRec)
VOID	EventTimeToSystemTime (DWORD EventTime, SYSTEMTIME *SystemTime)
VOID	SystemTimeToEventTime (SYSTEMTIME *pSystemTime, DWORD *pEventTime)
VOID	InitEventSourceList (VOID)
BOOL	LoadEventSources (HKEY hKey, PLOGFILE pLogFile)
PEVENTSOURCE	GetEventSourceByName (LPCWSTR Name)
NTSTATUS WINAPI	PortThreadRoutine (PVOID Param)
NTSTATUS	InitLogPort (VOID)
NTSTATUS	ProcessPortMessage (VOID)
DWORD WINAPI	RpcThreadRoutine (LPVOID lpParameter)
static __inline void	LogfFreeRecord (LPVOID Rec)
Variables
HANDLE	MyHeap