3.1.4.6.2 Canceling Queries

  • Article

The CONTEXT_HANDLE_OPERATION_CONTROL handle is obtained at the same time a CONTEXT_HANDLE_LOG_QUERY handle is obtained by calling the EvtRpcRegisterLogQuery (Opnum 5) (section 3.1.4.12) method. Any calls to the EvtRpcQueryNext (Opnum 11) method or the EvtRpcQuerySeek (Opnum 12) (section 3.1.4.14) method by using the CONTEXT_HANDLE_LOG_QUERY handle can be canceled by using the CONTEXT_HANDLE_OPERATION_CONTROL handle in a call to the EvtRpcCancel (section 3.1.4.34) method.