4.12.8. Windows event logging service
Prev 4.12. MSRPC interfaces introduced in Windows Vista Next

4.12.8. Windows event logging service

The IEventService interface is the RPC interface used to communicate with the Windows event logging service service.

The interface is used over a dynamic TCP endpoint, registered in the endpoint mapper database, as shown below: 


[...]

IfId: f6beaff7-1e19-4fbb-9f8f-b89e2018337c version 1.0
Annotation: Event log TCPIP
UUID: 00000000-0000-0000-0000-000000000000
Binding: ncacn_np:127.0.0.1[\\pipe\\eventlog]

IfId: f6beaff7-1e19-4fbb-9f8f-b89e2018337c version 1.0
Annotation: Event log TCPIP
UUID: 00000000-0000-0000-0000-000000000000
Binding: ncacn_ip_tcp:127.0.0.1[49153]

[...]

For more information about the Windows Event Log API, see the documentation in the Microsoft Windows SDK.

Table 4.129. IEventService operations

InterfaceOperation numberOperation nameWindows API
f6beaff7-1e19-4fbb-9f8f-b89e2018337c v1.0: IEventService   
 0x00EvtRpcRegisterRemoteSubscription 
 0x01EvtRpcUpdateRemoteSubscription 
 0x02EvtRpcRemoteSubscriptionNextAsync 
 0x03EvtRpcRemoteSubscriptionNext 
 0x04EvtRpcRemoteSubscriptionWaitAsync 
 0x05EvtRpcRegisterLogQuery 
 0x06EvtRpcClearLog 
 0x07EvtRpcExportLog 
 0x08EvtRpcLocalizeExportLog 
 0x09EvtRpcMessageRender 
 0x0aEvtRpcMessageRenderDefault 
 0x0bEvtRpcQueryNext 
 0x0cEvtRpcQuerySeek 
 0x0dEvtRpcClose 
 0x0eEvtRpcAssertConfig 
 0x0fEvtRpcRetractConfig 
 0x10EvtRpcOpenLogHandle 
 0x11EvtRpcGetLogFileInfo 
 0x12EvtRpcGetChannelList 
 0x13EvtRpcGetChannelConfig 
 0x14EvtRpcPutChannelConfig 
 0x15EvtRpcGetPublisherList 
 0x16EvtRpcGetPublisherMetadata 
 0x17EvtRpcGetPublisherResourceMetadata 
 0x18EvtRpcGetEventMetadataEnum 
 0x19EvtRpcGetNextEventMetadata 
Prev Up Next
4.12.7. Windows event collector service Home 4.12.9. Windows Firewall