3.1.4.12 ElfrBackupELFA (Opnum 13)

The ElfrBackupELFA (Opnum 13) method instructs the server to back up the event log to a specified file name.<26>

 NTSTATUS ElfrBackupELFA(
   [in] IELF_HANDLE LogHandle,
   [in] PRPC_STRING BackupFileName
 );

LogHandle: Handle to an event log. This parameter is a server context handle, as specified in section 2.2.6. This handle MUST NOT be obtained via the ElfrOpenBELA (section 3.1.4.2) method or the ElfrOpenBELW (section 3.1.4.1) method.

BackupFileName: Provides an ANSI string (as specified in section 2.2.12) that points to an NT Object Path of a file (as specified in section 2.2.4.1), in which a current copy of the event log is to be placed. This MUST NOT be NULL or empty.

Return Values: The method MUST return STATUS_SUCCESS (0x00000000) on success; otherwise, it MUST return an implementation-based, nonzero NTSTATUS value specified in [MS-ERREF].

ElfrBackupELFA is identical to the ElfrBackupELFW (section 3.1.4.11) method except in the following case:

  • When BackUpFileName is an ANSI string.