Windows Event Collector

Overview of the Windows Event Collector technology.

To develop Windows Event Collector, you need these headers:

• evcoll.h

For programming guidance for this technology, see:

• Windows Event Collector

Enumerations

EC_SUBSCRIPTION_CONFIGURATION_MODE Specifies different configuration modes that change the default settings for a subscription.
EC_SUBSCRIPTION_CONTENT_FORMAT Specifies how events will be rendered on the computer that sends the events before the events are sent to the event collector computer.
EC_SUBSCRIPTION_CREDENTIALS_TYPE Specifies the type of credentials to use when communicating with event sources.
EC_SUBSCRIPTION_DELIVERY_MODE Defines values that indicate how events are delivered in a subscription.
EC_SUBSCRIPTION_PROPERTY_ID Defines values to identify event subscription properties used for subscription configuration.
EC_SUBSCRIPTION_RUNTIME_STATUS_ACTIVE_STATUS Specifies the status of a subscription or an event source with respect to a subscription.
EC_SUBSCRIPTION_RUNTIME_STATUS_INFO_ID The EC_SUBSCRIPTION_RUNTIME_STATUS_INFO_ID enumeration specifies the values used to get the status of a subscription or the status of a particular event source with respect to a subscription.
EC_SUBSCRIPTION_TYPE Specifies the type of subscription to use (a source initiated or collector initiated subscription).
EC_VARIANT_TYPE The EC_VARIANT_TYPE enumeration defines the values that specify the data types that are used in the Windows Event Collector functions.

Functions

EcClose Closes a handle received from other Event Collector functions.
EcDeleteSubscription Deletes an existing subscription.
EcEnumNextSubscription Continues the enumeration of the subscriptions registered on the local machine.
EcGetObjectArrayProperty Retrieves property values for the event sources of a subscription.
EcGetObjectArraySize Retrieves the number of indexes of the array of property values for the event sources of a subscription.
EcGetSubscriptionProperty Retrieves a property value from a subscription object.
EcGetSubscriptionRunTimeStatus Retrieves the run time status information for an event source of a subscription or the subscription itself.
EcInsertObjectArrayElement Inserts an empty object into an array of property values for the event sources of a subscription.
EcOpenSubscription Opens an existing subscription or creates a new subscription.
EcOpenSubscriptionEnum Creates a subscription enumerator to enumerate all registered subscriptions on the local machine.
EcRemoveObjectArrayElement Removes an element from an array of objects that contain property values for the event sources of a subscription.
EcRetrySubscription Retries connecting to the event source of a subscription that is not connected.
EcSaveSubscription Saves subscription configuration information.
EcSetObjectArrayProperty Sets a property value in an array of property values for the event sources of a subscription.
EcSetSubscriptionProperty Sets new values or updates existing values of a subscription.

Structures

EC_VARIANT Contains event collector data (subscription data) or property values.