locked
Event Log initiative callback with event parameter RRS feed

  • Question

  • hello ,everyone, i have a requirement in project. 

    i want to monitor event log, if have a new event, i will recive message, that include event parameters.

    seem as  etw, i search the Notify api, as:

    HANDLE Handle = OpenEventLogA(NULL, "Security");
    HANDLE hWriteEvent = CreateEventA(NULL, TRUE, FALSE, "mymy");
    NotifyChangeEventLog(Handle, hWriteEvent);
    WaitForSingleObject(hWriteEvent,-1);

    but this is a notify event, no callback, no event parameter, i known traverse by ReadEventLog, but i do not use it, because the performance is too low.

    have a functions, like CALLBACK Notify(void* eventlog), if have a new event log happen, the function can be called

    Tuesday, July 18, 2017 6:22 AM

All replies

  • Hi,

    According to your description, I know you encountered a development issue.

    I would recommend you to ask for help from MSDN forum. They are more professional on development.

    MSDN forum:

    https://social.msdn.microsoft.com/Forums/en-US/home

    Bests,

    Joy.


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by Joy-Qiao Monday, July 31, 2017 7:18 AM
    Wednesday, July 19, 2017 10:50 AM