The AUDIT_ENTRY structure contains audit entry information about specified servers.
typedef struct _AUDIT_ENTRY {
DWORD ae_len;
DWORD ae_reserved;
DWORD ae_time;
DWORD ae_type;
DWORD ae_data_offset;
DWORD ae_data_size;
} AUDIT_ENTRY, *PAUDIT_ENTRY, *LPAUDIT_ENTRY;
Members
ae_len
Specifies the length of the audit entry. Both have the same value. This element is included at the beginning and at the end of the audit entry to enable both backward and forward scanning of the log.
ae_reserved
Reserved.
ae_time
Specifies when the audit entry was generated. The value is stored as the number of seconds elapsed since 00:00:00, January 1, 1970.
ae_type
Specifies the type of audit entry. Type values from 0x0000 through 0x07FF are reserved. OEMs and other application programmers can reserve values from 0x0800 through 0xFFFF.
ae_data_offset
Specifies the byte offset from the beginning of the audit entry to the beginning of the variable-length portion (ae_data) of the audit entry.
ae_data_size
Specifies the variable-length portion of the audit entry; it differs depending on the type of entry specified by ae_type. The information begins at ae_data_offset bytes from the top of the audit entry.
See Also