Edit

Share via

EVT_EXPORTLOG_FLAGS enumeration (winevt.h)

  • Article

Defines values that indicate whether the events come from a channel or log file.

Syntax

typedef enum _EVT_EXPORTLOG_FLAGS {
  EvtExportLogChannelPath = 0x1,
  EvtExportLogFilePath = 0x2,
  EvtExportLogTolerateQueryErrors = 0x1000,
  EvtExportLogOverwrite = 0x2000
} EVT_EXPORTLOG_FLAGS;

Constants

 
EvtExportLogChannelPath
Value: 0x1
The source of the events is a channel.
EvtExportLogFilePath
Value: 0x2
The source of the events is a previously exported log file.
EvtExportLogTolerateQueryErrors
Value: 0x1000
Export events even if part of the query generates an error (is not well formed). The service validates the syntax of the XPath query to determine whether it is well formed. If the validation fails, the service parses the XPath into individual expressions. It builds a new XPath beginning with the leftmost expression. The service validates the expression and if it is valid, the service adds the next expression to the XPath. The service repeats this process until it finds the expression that is failing. It then uses the valid expressions as the XPath query (which means that you may not get the events that you expected). If no part of the XPath is valid, the EvtExportLog call fails.
EvtExportLogOverwrite
Value: 0x2000

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2008 [desktop apps only]
Header winevt.h

See also

EvtExportLog