PdhReadRawLogRecord function (pdh.h)
Reads the information in the specified binary trace log file.
PDH_FUNCTION PdhReadRawLogRecord( [in] PDH_HLOG hLog, [in] FILETIME ftRecord, [out] PPDH_RAW_LOG_RECORD pRawLogRecord, [in] LPDWORD pdwBufferLength );
Time stamp of the record to be read. If the time stamp does not match a record in the log file, the function returns the record that has a time stamp closest to (but not greater than) the given time stamp.
Caller-allocated buffer that receives a PDH_RAW_LOG_RECORD structure; the structure contains the log file record information. Set to NULL if pdwBufferLength is zero.
Size of the pRawLogRecord buffer, in TCHARs. If zero on input, the function returns PDH_MORE_DATA and sets this parameter to the required buffer size. If the buffer is larger than the required size, the function sets this parameter to the actual size of the buffer that was used. If the specified size on input is greater than zero but less than the required size, you should not rely on the returned size to reallocate the buffer.
If the function succeeds, it returns ERROR_SUCCESS.
||A parameter is not valid. For example, on some releases you could receive this error if the specified size on input is greater than zero but less than the required size.|
||The pRawLogRecord buffer is too small to contain the path elements. This return value is expected if pdwBufferLength is zero on input. If the specified size on input is greater than zero but less than the required size, you should not rely on the returned size to reallocate the buffer.|
||Unable to allocate memory in order to complete the function.|
You should call this function twice, the first time to get the required buffer size (set pRawLogRecord to NULL and pdwBufferLength to 0), and the second time to get the data.
|Minimum supported client||Windows XP [desktop apps only]|
|Minimum supported server||Windows Server 2003 [desktop apps only]|