Files
marlersoft-win32json/api/System.EventLog.json
T
2026-02-06 20:10:43 -07:00

1471 lines
61 KiB
JSON

{
"Constants":[{
"Name":"EVT_VARIANT_TYPE_MASK"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":127
,"Attrs":[]
},{
"Name":"EVT_VARIANT_TYPE_ARRAY"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":128
,"Attrs":[]
},{
"Name":"EVT_READ_ACCESS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":1
,"Attrs":[]
},{
"Name":"EVT_WRITE_ACCESS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":2
,"Attrs":[]
},{
"Name":"EVT_CLEAR_ACCESS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":4
,"Attrs":[]
},{
"Name":"EVT_ALL_ACCESS"
,"Type":{"Kind":"Native","Name":"UInt32"}
,"ValueType":"UInt32"
,"Value":7
,"Attrs":[]
}],
"Types":[{
"Name":"REPORT_EVENT_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EVENTLOG_SUCCESS","Value":0}
,{"Name":"EVENTLOG_AUDIT_FAILURE","Value":16}
,{"Name":"EVENTLOG_AUDIT_SUCCESS","Value":8}
,{"Name":"EVENTLOG_ERROR_TYPE","Value":1}
,{"Name":"EVENTLOG_INFORMATION_TYPE","Value":4}
,{"Name":"EVENTLOG_WARNING_TYPE","Value":2}
]
,"IntegerBase":"UInt16"
},{
"Name":"READ_EVENT_LOG_READ_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EVENTLOG_SEEK_READ","Value":2}
,{"Name":"EVENTLOG_SEQUENTIAL_READ","Value":1}
]
,"IntegerBase":"UInt32"
},{
"Name":"EventLogHandle"
,"Architectures":[]
,"Platform":null
,"Kind":"NativeTypedef"
,"AlsoUsableFor":null
,"Def":{"Kind":"Native","Name":"IntPtr"}
,"FreeFunc":"CloseEventLog"
,"InvalidHandleValue":0
},{
"Name":"EventSourceHandle"
,"Architectures":[]
,"Platform":null
,"Kind":"NativeTypedef"
,"AlsoUsableFor":null
,"Def":{"Kind":"Native","Name":"IntPtr"}
,"FreeFunc":"DeregisterEventSource"
,"InvalidHandleValue":0
},{
"Name":"EVT_VARIANT_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtVarTypeNull","Value":0}
,{"Name":"EvtVarTypeString","Value":1}
,{"Name":"EvtVarTypeAnsiString","Value":2}
,{"Name":"EvtVarTypeSByte","Value":3}
,{"Name":"EvtVarTypeByte","Value":4}
,{"Name":"EvtVarTypeInt16","Value":5}
,{"Name":"EvtVarTypeUInt16","Value":6}
,{"Name":"EvtVarTypeInt32","Value":7}
,{"Name":"EvtVarTypeUInt32","Value":8}
,{"Name":"EvtVarTypeInt64","Value":9}
,{"Name":"EvtVarTypeUInt64","Value":10}
,{"Name":"EvtVarTypeSingle","Value":11}
,{"Name":"EvtVarTypeDouble","Value":12}
,{"Name":"EvtVarTypeBoolean","Value":13}
,{"Name":"EvtVarTypeBinary","Value":14}
,{"Name":"EvtVarTypeGuid","Value":15}
,{"Name":"EvtVarTypeSizeT","Value":16}
,{"Name":"EvtVarTypeFileTime","Value":17}
,{"Name":"EvtVarTypeSysTime","Value":18}
,{"Name":"EvtVarTypeSid","Value":19}
,{"Name":"EvtVarTypeHexInt32","Value":20}
,{"Name":"EvtVarTypeHexInt64","Value":21}
,{"Name":"EvtVarTypeEvtHandle","Value":32}
,{"Name":"EvtVarTypeEvtXml","Value":35}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_VARIANT"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Fields":[
{"Name":"Anonymous","Type":{"Kind":"ApiRef","Name":"_Anonymous_e__Union","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":[]}
,{"Name":"Count","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Type","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_Anonymous_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Fields":[
{"Name":"BooleanVal","Type":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"SByteVal","Type":{"Kind":"Native","Name":"SByte"},"Attrs":[]}
,{"Name":"Int16Val","Type":{"Kind":"Native","Name":"Int16"},"Attrs":[]}
,{"Name":"Int32Val","Type":{"Kind":"Native","Name":"Int32"},"Attrs":[]}
,{"Name":"Int64Val","Type":{"Kind":"Native","Name":"Int64"},"Attrs":[]}
,{"Name":"ByteVal","Type":{"Kind":"Native","Name":"Byte"},"Attrs":[]}
,{"Name":"UInt16Val","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"UInt32Val","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"UInt64Val","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"SingleVal","Type":{"Kind":"Native","Name":"Single"},"Attrs":[]}
,{"Name":"DoubleVal","Type":{"Kind":"Native","Name":"Double"},"Attrs":[]}
,{"Name":"FileTimeVal","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":[]}
,{"Name":"SysTimeVal","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"SYSTEMTIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
,{"Name":"GuidVal","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":[]}
,{"Name":"StringVal","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Const"]}
,{"Name":"AnsiStringVal","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Const"]}
,{"Name":"BinaryVal","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]}
,{"Name":"SidVal","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"SizeTVal","Type":{"Kind":"Native","Name":"UIntPtr"},"Attrs":[]}
,{"Name":"BooleanArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
,{"Name":"SByteArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"SByte"}},"Attrs":[]}
,{"Name":"Int16Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Int16"}},"Attrs":[]}
,{"Name":"Int32Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Int32"}},"Attrs":[]}
,{"Name":"Int64Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Int64"}},"Attrs":[]}
,{"Name":"ByteArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Byte"}},"Attrs":[]}
,{"Name":"UInt16Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt16"}},"Attrs":[]}
,{"Name":"UInt32Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":[]}
,{"Name":"UInt64Arr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt64"}},"Attrs":[]}
,{"Name":"SingleArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Single"}},"Attrs":[]}
,{"Name":"DoubleArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Double"}},"Attrs":[]}
,{"Name":"FileTimeArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"FILETIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
,{"Name":"SysTimeArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"SYSTEMTIME","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
,{"Name":"GuidArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Guid"}},"Attrs":[]}
,{"Name":"StringArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
,{"Name":"AnsiStringArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
,{"Name":"SidArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
,{"Name":"SizeTArr","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UIntPtr"}},"Attrs":[]}
,{"Name":"EvtHandleVal","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":[]}
,{"Name":"XmlVal","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["Const"]}
,{"Name":"XmlValArr","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"EVT_LOGIN_CLASS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtRpcLogin","Value":1}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_RPC_LOGIN_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtRpcLoginAuthDefault","Value":0}
,{"Name":"EvtRpcLoginAuthNegotiate","Value":1}
,{"Name":"EvtRpcLoginAuthKerberos","Value":2}
,{"Name":"EvtRpcLoginAuthNTLM","Value":3}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_RPC_LOGIN"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Fields":[
{"Name":"Server","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"User","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"Domain","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"Password","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVT_QUERY_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtQueryChannelPath","Value":1}
,{"Name":"EvtQueryFilePath","Value":2}
,{"Name":"EvtQueryForwardDirection","Value":256}
,{"Name":"EvtQueryReverseDirection","Value":512}
,{"Name":"EvtQueryTolerateQueryErrors","Value":4096}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_SEEK_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtSeekRelativeToFirst","Value":1}
,{"Name":"EvtSeekRelativeToLast","Value":2}
,{"Name":"EvtSeekRelativeToCurrent","Value":3}
,{"Name":"EvtSeekRelativeToBookmark","Value":4}
,{"Name":"EvtSeekOriginMask","Value":7}
,{"Name":"EvtSeekStrict","Value":65536}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_SUBSCRIBE_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtSubscribeToFutureEvents","Value":1}
,{"Name":"EvtSubscribeStartAtOldestRecord","Value":2}
,{"Name":"EvtSubscribeStartAfterBookmark","Value":3}
,{"Name":"EvtSubscribeOriginMask","Value":3}
,{"Name":"EvtSubscribeTolerateQueryErrors","Value":4096}
,{"Name":"EvtSubscribeStrict","Value":65536}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_SUBSCRIBE_NOTIFY_ACTION"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtSubscribeActionError","Value":0}
,{"Name":"EvtSubscribeActionDeliver","Value":1}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_SUBSCRIBE_CALLBACK"
,"Architectures":[]
,"Platform":null
,"Kind":"FunctionPointer"
,"SetLastError":false
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Attrs":[]
,"Params":[
{"Name":"Action","Type":{"Kind":"ApiRef","Name":"EVT_SUBSCRIBE_NOTIFY_ACTION","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"UserContext","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Optional"]}
,{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
]
},{
"Name":"EVT_SYSTEM_PROPERTY_ID"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtSystemProviderName","Value":0}
,{"Name":"EvtSystemProviderGuid","Value":1}
,{"Name":"EvtSystemEventID","Value":2}
,{"Name":"EvtSystemQualifiers","Value":3}
,{"Name":"EvtSystemLevel","Value":4}
,{"Name":"EvtSystemTask","Value":5}
,{"Name":"EvtSystemOpcode","Value":6}
,{"Name":"EvtSystemKeywords","Value":7}
,{"Name":"EvtSystemTimeCreated","Value":8}
,{"Name":"EvtSystemEventRecordId","Value":9}
,{"Name":"EvtSystemActivityID","Value":10}
,{"Name":"EvtSystemRelatedActivityID","Value":11}
,{"Name":"EvtSystemProcessID","Value":12}
,{"Name":"EvtSystemThreadID","Value":13}
,{"Name":"EvtSystemChannel","Value":14}
,{"Name":"EvtSystemComputer","Value":15}
,{"Name":"EvtSystemUserID","Value":16}
,{"Name":"EvtSystemVersion","Value":17}
,{"Name":"EvtSystemPropertyIdEND","Value":18}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_RENDER_CONTEXT_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtRenderContextValues","Value":0}
,{"Name":"EvtRenderContextSystem","Value":1}
,{"Name":"EvtRenderContextUser","Value":2}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_RENDER_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtRenderEventValues","Value":0}
,{"Name":"EvtRenderEventXml","Value":1}
,{"Name":"EvtRenderBookmark","Value":2}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_FORMAT_MESSAGE_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtFormatMessageEvent","Value":1}
,{"Name":"EvtFormatMessageLevel","Value":2}
,{"Name":"EvtFormatMessageTask","Value":3}
,{"Name":"EvtFormatMessageOpcode","Value":4}
,{"Name":"EvtFormatMessageKeyword","Value":5}
,{"Name":"EvtFormatMessageChannel","Value":6}
,{"Name":"EvtFormatMessageProvider","Value":7}
,{"Name":"EvtFormatMessageId","Value":8}
,{"Name":"EvtFormatMessageXml","Value":9}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_OPEN_LOG_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtOpenChannelPath","Value":1}
,{"Name":"EvtOpenFilePath","Value":2}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_LOG_PROPERTY_ID"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtLogCreationTime","Value":0}
,{"Name":"EvtLogLastAccessTime","Value":1}
,{"Name":"EvtLogLastWriteTime","Value":2}
,{"Name":"EvtLogFileSize","Value":3}
,{"Name":"EvtLogAttributes","Value":4}
,{"Name":"EvtLogNumberOfLogRecords","Value":5}
,{"Name":"EvtLogOldestRecordNumber","Value":6}
,{"Name":"EvtLogFull","Value":7}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_EXPORTLOG_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtExportLogChannelPath","Value":1}
,{"Name":"EvtExportLogFilePath","Value":2}
,{"Name":"EvtExportLogTolerateQueryErrors","Value":4096}
,{"Name":"EvtExportLogOverwrite","Value":8192}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_CHANNEL_CONFIG_PROPERTY_ID"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtChannelConfigEnabled","Value":0}
,{"Name":"EvtChannelConfigIsolation","Value":1}
,{"Name":"EvtChannelConfigType","Value":2}
,{"Name":"EvtChannelConfigOwningPublisher","Value":3}
,{"Name":"EvtChannelConfigClassicEventlog","Value":4}
,{"Name":"EvtChannelConfigAccess","Value":5}
,{"Name":"EvtChannelLoggingConfigRetention","Value":6}
,{"Name":"EvtChannelLoggingConfigAutoBackup","Value":7}
,{"Name":"EvtChannelLoggingConfigMaxSize","Value":8}
,{"Name":"EvtChannelLoggingConfigLogFilePath","Value":9}
,{"Name":"EvtChannelPublishingConfigLevel","Value":10}
,{"Name":"EvtChannelPublishingConfigKeywords","Value":11}
,{"Name":"EvtChannelPublishingConfigControlGuid","Value":12}
,{"Name":"EvtChannelPublishingConfigBufferSize","Value":13}
,{"Name":"EvtChannelPublishingConfigMinBuffers","Value":14}
,{"Name":"EvtChannelPublishingConfigMaxBuffers","Value":15}
,{"Name":"EvtChannelPublishingConfigLatency","Value":16}
,{"Name":"EvtChannelPublishingConfigClockType","Value":17}
,{"Name":"EvtChannelPublishingConfigSidType","Value":18}
,{"Name":"EvtChannelPublisherList","Value":19}
,{"Name":"EvtChannelPublishingConfigFileMax","Value":20}
,{"Name":"EvtChannelConfigPropertyIdEND","Value":21}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_CHANNEL_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtChannelTypeAdmin","Value":0}
,{"Name":"EvtChannelTypeOperational","Value":1}
,{"Name":"EvtChannelTypeAnalytic","Value":2}
,{"Name":"EvtChannelTypeDebug","Value":3}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_CHANNEL_ISOLATION_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtChannelIsolationTypeApplication","Value":0}
,{"Name":"EvtChannelIsolationTypeSystem","Value":1}
,{"Name":"EvtChannelIsolationTypeCustom","Value":2}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_CHANNEL_CLOCK_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtChannelClockTypeSystemTime","Value":0}
,{"Name":"EvtChannelClockTypeQPC","Value":1}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_CHANNEL_SID_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtChannelSidTypeNone","Value":0}
,{"Name":"EvtChannelSidTypePublishing","Value":1}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_CHANNEL_REFERENCE_FLAGS"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtChannelReferenceImported","Value":1}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_PUBLISHER_METADATA_PROPERTY_ID"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtPublisherMetadataPublisherGuid","Value":0}
,{"Name":"EvtPublisherMetadataResourceFilePath","Value":1}
,{"Name":"EvtPublisherMetadataParameterFilePath","Value":2}
,{"Name":"EvtPublisherMetadataMessageFilePath","Value":3}
,{"Name":"EvtPublisherMetadataHelpLink","Value":4}
,{"Name":"EvtPublisherMetadataPublisherMessageID","Value":5}
,{"Name":"EvtPublisherMetadataChannelReferences","Value":6}
,{"Name":"EvtPublisherMetadataChannelReferencePath","Value":7}
,{"Name":"EvtPublisherMetadataChannelReferenceIndex","Value":8}
,{"Name":"EvtPublisherMetadataChannelReferenceID","Value":9}
,{"Name":"EvtPublisherMetadataChannelReferenceFlags","Value":10}
,{"Name":"EvtPublisherMetadataChannelReferenceMessageID","Value":11}
,{"Name":"EvtPublisherMetadataLevels","Value":12}
,{"Name":"EvtPublisherMetadataLevelName","Value":13}
,{"Name":"EvtPublisherMetadataLevelValue","Value":14}
,{"Name":"EvtPublisherMetadataLevelMessageID","Value":15}
,{"Name":"EvtPublisherMetadataTasks","Value":16}
,{"Name":"EvtPublisherMetadataTaskName","Value":17}
,{"Name":"EvtPublisherMetadataTaskEventGuid","Value":18}
,{"Name":"EvtPublisherMetadataTaskValue","Value":19}
,{"Name":"EvtPublisherMetadataTaskMessageID","Value":20}
,{"Name":"EvtPublisherMetadataOpcodes","Value":21}
,{"Name":"EvtPublisherMetadataOpcodeName","Value":22}
,{"Name":"EvtPublisherMetadataOpcodeValue","Value":23}
,{"Name":"EvtPublisherMetadataOpcodeMessageID","Value":24}
,{"Name":"EvtPublisherMetadataKeywords","Value":25}
,{"Name":"EvtPublisherMetadataKeywordName","Value":26}
,{"Name":"EvtPublisherMetadataKeywordValue","Value":27}
,{"Name":"EvtPublisherMetadataKeywordMessageID","Value":28}
,{"Name":"EvtPublisherMetadataPropertyIdEND","Value":29}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_EVENT_METADATA_PROPERTY_ID"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EventMetadataEventID","Value":0}
,{"Name":"EventMetadataEventVersion","Value":1}
,{"Name":"EventMetadataEventChannel","Value":2}
,{"Name":"EventMetadataEventLevel","Value":3}
,{"Name":"EventMetadataEventOpcode","Value":4}
,{"Name":"EventMetadataEventTask","Value":5}
,{"Name":"EventMetadataEventKeyword","Value":6}
,{"Name":"EventMetadataEventMessageID","Value":7}
,{"Name":"EventMetadataEventTemplate","Value":8}
,{"Name":"EvtEventMetadataPropertyIdEND","Value":9}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_QUERY_PROPERTY_ID"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtQueryNames","Value":0}
,{"Name":"EvtQueryStatuses","Value":1}
,{"Name":"EvtQueryPropertyIdEND","Value":2}
]
,"IntegerBase":"Int32"
},{
"Name":"EVT_EVENT_PROPERTY_ID"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"EvtEventQueryIDs","Value":0}
,{"Name":"EvtEventPath","Value":1}
,{"Name":"EvtEventPropertyIdEND","Value":2}
]
,"IntegerBase":"Int32"
},{
"Name":"EVENTLOGRECORD"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Fields":[
{"Name":"Length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"Reserved","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"RecordNumber","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"TimeGenerated","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"TimeWritten","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventID","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"EventType","Type":{"Kind":"ApiRef","Name":"REPORT_EVENT_TYPE","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":[]}
,{"Name":"NumStrings","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"EventCategory","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"ReservedFlags","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":[]}
,{"Name":"ClosingRecordNumber","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"StringOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"UserSidLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"UserSidOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"DataLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"DataOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENTSFORLOGFILE"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Fields":[
{"Name":"ulSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"szLogicalLogFile","Type":{"Kind":"Array","Shape":{"Size":256},"Child":{"Kind":"Native","Name":"Char"}},"Attrs":[]}
,{"Name":"ulNumRecords","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"pEventLogRecords","Type":{"Kind":"Array","Shape":null,"Child":{"Kind":"ApiRef","Name":"EVENTLOGRECORD","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"EVENTLOG_FULL_INFORMATION"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Fields":[
{"Name":"dwFull","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
]
,"NestedTypes":[]
}],
"Functions":[{
"Name":"EvtOpenSession"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"LoginClass","Type":{"Kind":"ApiRef","Name":"EVT_LOGIN_CLASS","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"Login","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]}
,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In","Reserved"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In","Reserved"]}
]
},{
"Name":"EvtClose"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Object","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
]
},{
"Name":"EvtCancel"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Object","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
]
},{
"Name":"EvtGetExtendedStatus"
,"SetLastError":false
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"UInt32"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Buffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":0,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]}
,{"Name":"BufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtQuery"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"Path","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Query","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtNext"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ResultSet","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"EventsSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Events","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"IntPtr"}},"Attrs":["Out"]}
,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Returned","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["In","Out"]}
]
},{
"Name":"EvtSeek"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ResultSet","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"Position","Type":{"Kind":"Native","Name":"Int64"},"Attrs":["In"]}
,{"Name":"Bookmark","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"Timeout","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In","Reserved"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtSubscribe"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"SignalEvent","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional"]}
,{"Name":"ChannelPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Query","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Bookmark","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"Context","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Optional"]}
,{"Name":"Callback","Type":{"Kind":"ApiRef","Name":"EVT_SUBSCRIBE_CALLBACK","TargetKind":"FunctionPointer","Api":"System.EventLog","Parents":[]},"Attrs":["Optional"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtCreateRenderContext"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ValuePathsCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"ValuePaths","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":0,"Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtRender"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Context","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"Fragment","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
,{"Name":"BufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
,{"Name":"PropertyCount","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtFormatMessage"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"PublisherMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"MessageId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"ValueCount","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Values","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":3,"Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"BufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Buffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":6,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]}
,{"Name":"BufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtOpenLog"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"Path","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtGetLogInfo"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Log","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_LOG_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]}
,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtClearLog"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"ChannelPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"TargetFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtExportLog"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"Path","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Query","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"TargetFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtArchiveExportedLog"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"LogFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"Locale","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtOpenChannelEnum"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtNextChannelPath"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ChannelEnum","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"ChannelPathBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"ChannelPathBuffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]}
,{"Name":"ChannelPathBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtOpenChannelConfig"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"ChannelPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtSaveChannelConfig"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ChannelConfig","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtSetChannelConfigProperty"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ChannelConfig","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_CHANNEL_CONFIG_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PropertyValue","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["In"]}
]
},{
"Name":"EvtGetChannelConfigProperty"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ChannelConfig","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_CHANNEL_CONFIG_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtOpenPublisherEnum"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtNextPublisherId"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"PublisherEnum","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"PublisherIdBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PublisherIdBuffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Char"}},"Attrs":["Out","Optional"]}
,{"Name":"PublisherIdBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtOpenPublisherMetadata"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Session","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In","Optional"]}
,{"Name":"PublisherId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"LogFilePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"Locale","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtGetPublisherMetadataProperty"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"PublisherMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_PUBLISHER_METADATA_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PublisherMetadataPropertyBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PublisherMetadataPropertyBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
,{"Name":"PublisherMetadataPropertyBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtOpenEventMetadataEnum"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"PublisherMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtNextEventMetadata"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"EventMetadataEnum","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
]
},{
"Name":"EvtGetEventMetadataProperty"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"EventMetadata","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_EVENT_METADATA_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"EventMetadataPropertyBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"EventMetadataPropertyBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3},"Optional"]}
,{"Name":"EventMetadataPropertyBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtGetObjectArraySize"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ObjectArray","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"ObjectArraySize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtGetObjectArrayProperty"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"ObjectArray","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"PropertyId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"ArrayIndex","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"Flags","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4},"Optional"]}
,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtGetQueryInfo"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"QueryOrSubscription","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_QUERY_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]}
,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"EvtCreateBookmark"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"Native","Name":"IntPtr"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"BookmarkXml","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
]
},{
"Name":"EvtUpdateBookmark"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Bookmark","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
]
},{
"Name":"EvtGetEventInfo"
,"SetLastError":true
,"DllImport":"wevtapi"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows6.0.6000"
,"Attrs":[]
,"Params":[
{"Name":"Event","Type":{"Kind":"Native","Name":"IntPtr"},"Attrs":["In"]}
,{"Name":"PropertyId","Type":{"Kind":"ApiRef","Name":"EVT_EVENT_PROPERTY_ID","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"PropertyValueBufferSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"PropertyValueBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"EVT_VARIANT","TargetKind":"Default","Api":"System.EventLog","Parents":[]}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":2},"Optional"]}
,{"Name":"PropertyValueBufferUsed","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"ClearEventLogA"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
]
},{
"Name":"ClearEventLogW"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
]
},{
"Name":"BackupEventLogA"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
]
},{
"Name":"BackupEventLogW"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"lpBackupFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
]
},{
"Name":"CloseEventLog"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"DeregisterEventSource"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"NotifyChangeEventLog"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"hEvent","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"GetNumberOfEventLogRecords"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"NumberOfRecords","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"GetOldestEventLogRecord"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"OldestRecord","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"OpenEventLogA"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
]
},{
"Name":"OpenEventLogW"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
]
},{
"Name":"RegisterEventSourceA"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
]
},{
"Name":"RegisterEventSourceW"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"lpSourceName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
]
},{
"Name":"OpenBackupEventLogA"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"lpFileName","Type":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
]
},{
"Name":"OpenBackupEventLogW"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"lpUNCServerName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"lpFileName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
]
},{
"Name":"ReadEventLogA"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"dwReadFlags","Type":{"Kind":"ApiRef","Name":"READ_EVENT_LOG_READ_FLAGS","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"dwRecordOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"lpBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4}]}
,{"Name":"nNumberOfBytesToRead","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"pnBytesRead","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
,{"Name":"pnMinNumberOfBytesNeeded","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"ReadEventLogW"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"dwReadFlags","Type":{"Kind":"ApiRef","Name":"READ_EVENT_LOG_READ_FLAGS","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"dwRecordOffset","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"lpBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":4}]}
,{"Name":"nNumberOfBytesToRead","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"pnBytesRead","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
,{"Name":"pnMinNumberOfBytesNeeded","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"ReportEventA"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"wType","Type":{"Kind":"ApiRef","Name":"REPORT_EVENT_TYPE","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"wCategory","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
,{"Name":"dwEventID","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"lpUserSid","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional"]}
,{"Name":"wNumStrings","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
,{"Name":"dwDataSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"lpStrings","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":5,"Child":{"Kind":"ApiRef","Name":"PSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"lpRawData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":6},"Optional"]}
]
},{
"Name":"ReportEventW"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventSourceHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"wType","Type":{"Kind":"ApiRef","Name":"REPORT_EVENT_TYPE","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"wCategory","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
,{"Name":"dwEventID","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"lpUserSid","Type":{"Kind":"ApiRef","Name":"PSID","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional"]}
,{"Name":"wNumStrings","Type":{"Kind":"Native","Name":"UInt16"},"Attrs":["In"]}
,{"Name":"dwDataSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"lpStrings","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":5,"Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["In","Optional"]}
,{"Name":"lpRawData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":6},"Optional"]}
]
},{
"Name":"GetEventLogInformation"
,"SetLastError":true
,"DllImport":"ADVAPI32"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows5.0"
,"Attrs":[]
,"Params":[
{"Name":"hEventLog","Type":{"Kind":"ApiRef","Name":"EventLogHandle","TargetKind":"Default","Api":"System.EventLog","Parents":[]},"Attrs":["In"]}
,{"Name":"dwInfoLevel","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"lpBuffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["Out",{"Kind":"MemorySize","BytesParamIndex":3}]}
,{"Name":"cbBufSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"pcbBytesNeeded","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
}],
"UnicodeAliases":[
"ClearEventLog"
,"BackupEventLog"
,"OpenEventLog"
,"RegisterEventSource"
,"OpenBackupEventLog"
,"ReadEventLog"
,"ReportEvent"
]
}