Class Advapi32Util.EventLogRecord

  • Enclosing class:
    Advapi32Util

    public static class Advapi32Util.EventLogRecord
    extends Object
    An event log record.
    • Constructor Detail

      • EventLogRecord

        public EventLogRecord​(Pointer pevlr)
    • Method Detail

      • getInstanceId

        public int getInstanceId()
        The Instance ID, a resource identifier that corresponds to a string definition in the message resource file of the event source. The Event ID is the Instance ID with the top two bits masked off.
        Returns:
        An integer representing the 32-bit Instance ID.
      • getEventId

        @Deprecated
        public int getEventId()
        Deprecated.
        As of 5.4.0, replaced by getInstanceId(). The Event ID displayed in the Windows Event Viewer corresponds to getStatusCode() for system-generated events.
      • getSource

        public String getSource()
        Event source.
        Returns:
        String.
      • getStatusCode

        public int getStatusCode()
        Status code, the rightmost 16 bits of the Instance ID. Corresponds to the Event ID field in the Windows Event Viewer for system-generated events.
        Returns:
        An integer representing the low 16-bits of the Instance ID.
      • getRecordNumber

        public int getRecordNumber()
        Record number of the record. This value can be used with the EVENTLOG_SEEK_READ flag in the ReadEventLog function to begin reading at a specified record.
        Returns:
        Integer.
      • getLength

        public int getLength()
        Record length, with data.
        Returns:
        Number of bytes in the record including data.
      • getStrings

        public String[] getStrings()
        Strings associated with this event.
        Returns:
        Array of strings or null.
      • getData

        public byte[] getData()
        Raw data associated with the record.
        Returns:
        Array of bytes or null.