Windows Event Log Functions

Windows Event Log defines the following functions that you can use to get events from a channel or event log and to get the metadata for a provider and the events that it generates.

Function	Description
EVT_SUBSCRIBE_CALLBACK	Implement this callback if you call the EvtSubscribe function to receive events that match your query.
EvtArchiveExportedLog	Adds localized strings to the events in the specified log file.
EvtCancel	Cancels all pending operations on a handle.
EvtClearLog	Removes all events from the specified channel and writes them to the target log file.
EvtClose	Closes an open handle.
EvtCreateBookmark	Creates a bookmark that identifies an event in a channel.
EvtCreateRenderContext	Creates a context that specifies the information in the event that you want to render.
EvtExportLog	Copies events from the specified channel or log file and writes them to the target log file.
EvtFormatMessage	Formats a message string.
EvtGetChannelConfigProperty	Gets the specified channel configuration property.
EvtGetEventInfo	Gets information that identifies the structured XML query that selected the event and the channel or log file from which it came.
EvtGetEventMetadataProperty	Gets the specified event metadata property.
EvtGetExtendedStatus	Gets a text message that contains the extended error information for the current error.
EvtGetLogInfo	Gets information about a channel or log file.
EvtGetObjectArrayProperty	Gets a provider metadata property from the specified object in the array.
EvtGetObjectArraySize	Gets the number of elements in the array of objects.
EvtGetPublisherMetadataProperty	Gets the specified provider metadata property.
EvtGetQueryInfo	Gets information about a query that you ran that identifies the list of channels or log files that the query attempted to access and a list of return codes that indicates the success or failure of each access.
EvtNext	Gets the next event from the query or subscription results.
EvtNextChannelPath	Gets a channel name from the enumerator.
EvtNextEventMetadata	Gets an event definition from the enumerator.
EvtNextPublisherId	Gets the identifier of a provider from the enumerator.
EvtOpenChannelConfig	Gets a handle that you use to read or modify a channel's configuration property.
EvtOpenChannelEnum	Gets a handle that you use to enumerate the list of channels that are registered on the computer.
EvtOpenEventMetadataEnum	Gets a handle that you use to enumerate the list of events that the provider defines.
EvtOpenLog	Gets a handle to a channel or log file that you can then use to get information about the channel or log file.
EvtOpenPublisherEnum	Gets a handle that you use to enumerate the list of registered providers on the computer.
EvtOpenPublisherMetadata	Gets a handle that you use to read the specified provider's metadata.
EvtOpenSession	Establishes a connection to a remote computer that you can use when calling the other Windows Event Log functions.
EvtQuery	Runs a query to retrieve events from a channel or log file that match the specified query criteria.
EvtRender	Renders an XML fragment based on the rendering context that you specify.
EvtSaveChannelConfig	Saves the changes made to a channel's configuration.
EvtSeek	Seeks to a specific event in a query result set.
EvtSetChannelConfigProperty	Sets the specified configuration property of a channel.
EvtSubscribe	Creates a subscription that will receive current and future events from a channel or log file that match the specified query criteria.
EvtUpdateBookmark	Updates the bookmark with information that identifies the specified event.