Export (0) Print
Expand All

3.1.4.6.3 Canceling Clear or Export Methods

Any calls to the EvtRpcClearLog (Opnum 6) (section 3.1.4.16), EvtRpcExportLog (Opnum 7) (section 3.1.4.17), and EvtRpcLocalizeExportLog (Opnum 8) (section 3.1.4.18) methods can be canceled by using a CONTEXT_HANDLE_OPERATION_CONTROL handle. Normally, the CONTEXT_HANDLE_OPERATION_CONTROL handle used for these functions is obtained via the EvtRpcRegisterControllableOperation (Opnum 4) (section 3.1.4.35) method.

There is a single type of CONTEXT_HANDLE_OPERATION_CONTROL handle. A handle obtained by the EvtRpcRegisterRemoteSubscription (Opnum 0) (section 3.1.4.8) method or the EvtRpcRegisterLogQuery (Opnum 5) (section 3.1.4.12) method can be used to cancel the EvtRpcClearLog (Opnum 6) (section 3.1.4.16), EvtRpcExportLog (Opnum 7) (section 3.1.4.17), and EvtRpcLocalizeExportLog (Opnum 8) (section 3.1.4.18) methods. There is no restriction on how many methods a CONTEXT_HANDLE_OPERATION_CONTROL handle can control. One handle can be used to cancel any number of calls.

 
Show:
© 2014 Microsoft