That data has to be allocated by the user before initialization. The members are exposed so that they can be used independently of the functions defined in this module, e.g. to call ReportEvent
directly.
Note that log_event(), log_event_blob(), and v_log_event() consider this structure as read-only data. Therefore you may safely make a copy of the structure and use that instead of the original.
Data Fields | |
HANDLE | log |
As returned from SetEventSource. | |
PSID | sid |
As returned from GetEventSid. | |
HMODULE | msg |
Handle of loaded messages. Used for cleanup. | |
HGLOBAL | res |
Resource handle of loaded messages. Used for cleanup. | |
log_message_table * | table |
Pointer to MESSAGETABLE binary data for the Format language. | |
int | last_category |
Number of categories. | |
int | category |
Category passed to log_init(). |
|
Number of categories. This is read at initialization time from the first MESSAGETABLE index entry. |
|
Pointer to MESSAGETABLE binary data for the Format language. This is the pointer obtained from LockResource. |