Share via

2.2.4 EVENTLOG_FULL_INFORMATION

  • Article

The EVENTLOG_FULL_INFORMATION structure is used by the ElfrGetLogInformation (section 3.1.4.20) method to indicate whether an event log is full or not.

 typedef struct _EVENTLOG_FULL_INFORMATION {
   unsigned long dwFull;
 } EVENTLOG_FULL_INFORMATION;

dwFull: If the event log is not full, dwFull MUST be set to zero. If the event log is full, dwFull MUST be set to 1.