Event Logging Operations

In the following table are the five operations that can be performed on the event logs.

Operation Function
Backup BackupEventLog
Clear ClearEventLog
Query GetOldestEventLogRecord, GetNumberOfEventLogRecords
Read ReadEventLog
Write ReportEvent

The OpenEventLog, OpenBackupEventLog, RegisterEventSource, DeregisterEventSource, and CloseEventLog functions also open and close event log handles; this provides an object-oriented model for the function set, as well as some performance gain when performing multiple operations on the logs.

The OpenEventLog and ReportEvent functions take an optional server name as a parameter so that the operations can be performed on the remote server. OpenEventLog should be used for reading or performing some administrative operation (backup, clear, query) on the log, and RegisterEventSource should be used for writing to logs.