4.12.8. Windows event logging service

The IEventService interface is the RPC interface used to communicate with the Windows event logging service service.

The interface is used over a dynamic TCP endpoint, registered in the endpoint mapper database, as shown below:


[...]

IfId: f6beaff7-1e19-4fbb-9f8f-b89e2018337c version 1.0
Annotation: Event log TCPIP
UUID: 00000000-0000-0000-0000-000000000000
Binding: ncacn_np:127.0.0.1[\\pipe\\eventlog]

IfId: f6beaff7-1e19-4fbb-9f8f-b89e2018337c version 1.0
Annotation: Event log TCPIP
UUID: 00000000-0000-0000-0000-000000000000
Binding: ncacn_ip_tcp:127.0.0.1[49153]

[...]

For more information about the Windows Event Log API, see the documentation in the Microsoft Windows SDK.

Table 4.129. IEventService operations

InterfaceOperation numberOperation nameWindows API
f6beaff7-1e19-4fbb-9f8f-b89e2018337c v1.0: IEventService   
 0x00EvtRpcRegisterRemoteSubscription 
 0x01EvtRpcUpdateRemoteSubscription 
 0x02EvtRpcRemoteSubscriptionNextAsync 
 0x03EvtRpcRemoteSubscriptionNext 
 0x04EvtRpcRemoteSubscriptionWaitAsync 
 0x05EvtRpcRegisterLogQuery 
 0x06EvtRpcClearLog 
 0x07EvtRpcExportLog 
 0x08EvtRpcLocalizeExportLog 
 0x09EvtRpcMessageRender 
 0x0aEvtRpcMessageRenderDefault 
 0x0bEvtRpcQueryNext 
 0x0cEvtRpcQuerySeek 
 0x0dEvtRpcClose 
 0x0eEvtRpcAssertConfig 
 0x0fEvtRpcRetractConfig 
 0x10EvtRpcOpenLogHandle 
 0x11EvtRpcGetLogFileInfo 
 0x12EvtRpcGetChannelList 
 0x13EvtRpcGetChannelConfig 
 0x14EvtRpcPutChannelConfig 
 0x15EvtRpcGetPublisherList 
 0x16EvtRpcGetPublisherMetadata 
 0x17EvtRpcGetPublisherResourceMetadata 
 0x18EvtRpcGetEventMetadataEnum 
 0x19EvtRpcGetNextEventMetadata