46return new EventLogHandle();

174EventLogRecord eventInstance = new EventLogRecord(new EventLogHandle(_eventsBuffer[_currentIndex], true), _eventQuery.Session, _cachedMetadataInformation);

278EventLogRecord record = new EventLogRecord(new EventLogHandle(_eventsBuffer[i], true), _eventQuery.Session, cachedMetadataInformation);

1277return new EventLogHandle(val.Handle, true);

8internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtQuery(global::System.Diagnostics.Eventing.Reader.EventLogHandle session, string path, string query, int flags) 15global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 18global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 19global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __session_native__marshaller = new(); 68internal static partial bool EvtSeek(global::System.Diagnostics.Eventing.Reader.EventLogHandle resultSet, long position, global::System.Diagnostics.Eventing.Reader.EventLogHandle bookmark, int timeout, global::Microsoft.Win32.UnsafeNativeMethods.EvtSeekFlags flags) 78global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __bookmark_native__marshaller = new(); 79global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __resultSet_native__marshaller = new(); 119internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtSubscribe(global::System.Diagnostics.Eventing.Reader.EventLogHandle session, global::Microsoft.Win32.SafeHandles.SafeWaitHandle signalEvent, string path, string query, global::System.Diagnostics.Eventing.Reader.EventLogHandle bookmark, nint context, nint callback, int flags) 128global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 131global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 132global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __bookmark_native__marshaller = new(); 134global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __session_native__marshaller = new(); 189internal static partial bool EvtNext(global::System.Diagnostics.Eventing.Reader.EventLogHandle queryHandle, int eventSize, nint[] events, int timeout, int flags, ref int returned) 198global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __queryHandle_native__marshaller = new(); 238internal static partial bool EvtCancel(global::System.Diagnostics.Eventing.Reader.EventLogHandle handle) 247global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __handle_native__marshaller = new(); 310internal static partial bool EvtGetEventInfo(global::System.Diagnostics.Eventing.Reader.EventLogHandle eventHandle, global::Microsoft.Win32.UnsafeNativeMethods.EvtEventPropertyId propertyId, int bufferSize, nint bufferPtr, out int bufferUsed) 320global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __eventHandle_native__marshaller = new(); 359internal static partial bool EvtGetQueryInfo(global::System.Diagnostics.Eventing.Reader.EventLogHandle queryHandle, global::Microsoft.Win32.UnsafeNativeMethods.EvtQueryPropertyId propertyId, int bufferSize, nint buffer, ref int bufferRequired) 368global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __queryHandle_native__marshaller = new(); 407internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtOpenPublisherMetadata(global::System.Diagnostics.Eventing.Reader.EventLogHandle session, string publisherId, string logFilePath, int locale, int flags) 414global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 417global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 418global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __session_native__marshaller = new(); 467internal static partial bool EvtGetPublisherMetadataProperty(global::System.Diagnostics.Eventing.Reader.EventLogHandle publisherMetadataHandle, global::Microsoft.Win32.UnsafeNativeMethods.EvtPublisherMetadataPropertyId propertyId, int flags, int publisherMetadataPropertyBufferSize, nint publisherMetadataPropertyBuffer, out int publisherMetadataPropertyBufferUsed) 477global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __publisherMetadataHandle_native__marshaller = new(); 516internal static partial bool EvtGetObjectArraySize(global::System.Diagnostics.Eventing.Reader.EventLogHandle objectArray, out int objectArraySize) 526global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __objectArray_native__marshaller = new(); 565internal static partial bool EvtGetObjectArrayProperty(global::System.Diagnostics.Eventing.Reader.EventLogHandle objectArray, int propertyId, int arrayIndex, int flags, int propertyValueBufferSize, nint propertyValueBuffer, out int propertyValueBufferUsed) 575global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __objectArray_native__marshaller = new(); 614internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtOpenEventMetadataEnum(global::System.Diagnostics.Eventing.Reader.EventLogHandle publisherMetadata, int flags) 621global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 624global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 625global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __publisherMetadata_native__marshaller = new(); 671internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtNextEventMetadata(global::System.Diagnostics.Eventing.Reader.EventLogHandle eventMetadataEnum, int flags) 678global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 681global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 682global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __eventMetadataEnum_native__marshaller = new(); 728internal static partial bool EvtGetEventMetadataProperty(global::System.Diagnostics.Eventing.Reader.EventLogHandle eventMetadata, global::Microsoft.Win32.UnsafeNativeMethods.EvtEventMetadataPropertyId propertyId, int flags, int eventMetadataPropertyBufferSize, nint eventMetadataPropertyBuffer, out int eventMetadataPropertyBufferUsed) 738global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __eventMetadata_native__marshaller = new(); 777internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtOpenChannelEnum(global::System.Diagnostics.Eventing.Reader.EventLogHandle session, int flags) 784global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 787global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 788global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __session_native__marshaller = new(); 834internal static partial bool EvtNextChannelPath(global::System.Diagnostics.Eventing.Reader.EventLogHandle channelEnum, int channelPathBufferSize, char[] channelPathBuffer, out int channelPathBufferUsed) 844global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __channelEnum_native__marshaller = new(); 884internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtOpenPublisherEnum(global::System.Diagnostics.Eventing.Reader.EventLogHandle session, int flags) 891global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 894global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 895global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __session_native__marshaller = new(); 941internal static partial bool EvtNextPublisherId(global::System.Diagnostics.Eventing.Reader.EventLogHandle publisherEnum, int publisherIdBufferSize, char[] publisherIdBuffer, out int publisherIdBufferUsed) 951global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __publisherEnum_native__marshaller = new(); 991internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtOpenChannelConfig(global::System.Diagnostics.Eventing.Reader.EventLogHandle session, string channelPath, int flags) 998global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 1001global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 1002global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __session_native__marshaller = new(); 1050internal static partial bool EvtSaveChannelConfig(global::System.Diagnostics.Eventing.Reader.EventLogHandle channelConfig, int flags) 1059global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __channelConfig_native__marshaller = new(); 1096internal static partial bool EvtSetChannelConfigProperty(global::System.Diagnostics.Eventing.Reader.EventLogHandle channelConfig, global::Microsoft.Win32.UnsafeNativeMethods.EvtChannelConfigPropertyId propertyId, int flags, ref global::Microsoft.Win32.UnsafeNativeMethods.EvtVariant propertyValue) 1105global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __channelConfig_native__marshaller = new(); 1144internal static partial bool EvtGetChannelConfigProperty(global::System.Diagnostics.Eventing.Reader.EventLogHandle channelConfig, global::Microsoft.Win32.UnsafeNativeMethods.EvtChannelConfigPropertyId propertyId, int flags, int propertyValueBufferSize, nint propertyValueBuffer, out int propertyValueBufferUsed) 1154global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __channelConfig_native__marshaller = new(); 1193internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtOpenLog(global::System.Diagnostics.Eventing.Reader.EventLogHandle session, string path, global::System.Diagnostics.Eventing.Reader.PathType flags) 1200global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 1203global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 1204global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __session_native__marshaller = new(); 1252internal static partial bool EvtGetLogInfo(global::System.Diagnostics.Eventing.Reader.EventLogHandle log, global::Microsoft.Win32.UnsafeNativeMethods.EvtLogPropertyId propertyId, int propertyValueBufferSize, nint propertyValueBuffer, out int propertyValueBufferUsed) 1262global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __log_native__marshaller = new(); 1301internal static partial bool EvtExportLog(global::System.Diagnostics.Eventing.Reader.EventLogHandle session, string channelPath, string query, string targetFilePath, int flags) 1310global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __session_native__marshaller = new(); 1351internal static partial bool EvtArchiveExportedLog(global::System.Diagnostics.Eventing.Reader.EventLogHandle session, string logFilePath, int locale, int flags) 1360global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __session_native__marshaller = new(); 1399internal static partial bool EvtClearLog(global::System.Diagnostics.Eventing.Reader.EventLogHandle session, string channelPath, string targetFilePath, int flags) 1408global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __session_native__marshaller = new(); 1448internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtCreateRenderContext(int valuePathsCount, string[] valuePaths, global::Microsoft.Win32.UnsafeNativeMethods.EvtRenderContextFlags flags) 1455global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 1458global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 1529internal static partial bool EvtRender(global::System.Diagnostics.Eventing.Reader.EventLogHandle context, global::System.Diagnostics.Eventing.Reader.EventLogHandle eventHandle, global::Microsoft.Win32.UnsafeNativeMethods.EvtRenderFlags flags, int buffSize, char[] buffer, out int buffUsed, out int propCount) 1541global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __eventHandle_native__marshaller = new(); 1542global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __context_native__marshaller = new(); 1586internal static partial bool EvtRender(global::System.Diagnostics.Eventing.Reader.EventLogHandle context, global::System.Diagnostics.Eventing.Reader.EventLogHandle eventHandle, global::Microsoft.Win32.UnsafeNativeMethods.EvtRenderFlags flags, int buffSize, nint buffer, out int buffUsed, out int propCount) 1598global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __eventHandle_native__marshaller = new(); 1599global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __context_native__marshaller = new(); 1642internal static partial bool EvtFormatMessage(global::System.Diagnostics.Eventing.Reader.EventLogHandle publisherMetadataHandle, global::System.Diagnostics.Eventing.Reader.EventLogHandle eventHandle, uint messageId, int valueCount, global::Microsoft.Win32.UnsafeNativeMethods.EvtStringVariant[] values, global::Microsoft.Win32.UnsafeNativeMethods.EvtFormatMessageFlags flags, int bufferSize, global::System.Span<char> buffer, out int bufferUsed) 1657global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __eventHandle_native__marshaller = new(); 1658global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __publisherMetadataHandle_native__marshaller = new(); 1729internal static partial bool EvtFormatMessageBuffer(global::System.Diagnostics.Eventing.Reader.EventLogHandle publisherMetadataHandle, global::System.Diagnostics.Eventing.Reader.EventLogHandle eventHandle, uint messageId, int valueCount, nint values, global::Microsoft.Win32.UnsafeNativeMethods.EvtFormatMessageFlags flags, int bufferSize, nint buffer, out int bufferUsed) 1740global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __eventHandle_native__marshaller = new(); 1741global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __publisherMetadataHandle_native__marshaller = new(); 1783internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtOpenSession(global::Microsoft.Win32.UnsafeNativeMethods.EvtLoginClass loginClass, ref global::Microsoft.Win32.UnsafeNativeMethods.EvtRpcLogin login, int timeout, int flags) 1790global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 1793global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 1842internal static partial global::System.Diagnostics.Eventing.Reader.EventLogHandle EvtCreateBookmark(string bookmarkXml) 1848global::System.Diagnostics.Eventing.Reader.EventLogHandle __retVal = default; 1851global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedOut __retVal_native__marshaller = new(); 1892internal static partial bool EvtUpdateBookmark(global::System.Diagnostics.Eventing.Reader.EventLogHandle bookmark, global::System.Diagnostics.Eventing.Reader.EventLogHandle eventHandle) 1902global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __eventHandle_native__marshaller = new(); 1903global::System.Runtime.InteropServices.Marshalling.SafeHandleMarshaller<global::System.Diagnostics.Eventing.Reader.EventLogHandle>.ManagedToUnmanagedIn __bookmark_native__marshaller = new();

46private readonly EventLogHandle _handle = EventLogHandle.Zero;

42public static EventLogHandle Zero

16EventLogHandle logHandle = NativeWrapper.EvtOpenLog(session.Handle, channelName, pathType);

37internal EventLogHandle Handle { get; }

23private readonly EventLogHandle _handle; 102EventLogHandle bookmarkHandle = EventLogRecord.GetBookmarkHandleFromBookmark(bookmark); 225NativeWrapper.EvtSeek(_handle, offset, EventLogHandle.Zero, 0, UnsafeNativeMethods.EvtSeekFlags.EvtSeekRelativeToCurrent); 238using (EventLogHandle bookmarkHandle = EventLogRecord.GetBookmarkHandleFromBookmark(bookmark)) 251NativeWrapper.EvtSeek(_handle, offset, EventLogHandle.Zero, 0, UnsafeNativeMethods.EvtSeekFlags.EvtSeekRelativeToFirst); 257NativeWrapper.EvtSeek(_handle, offset, EventLogHandle.Zero, 0, UnsafeNativeMethods.EvtSeekFlags.EvtSeekRelativeToLast); 304EventLogHandle queryHandle = _handle;

34internal EventLogRecord(EventLogHandle handle, EventLogSession session, ProviderMetadataCachedInformation cachedMetadataInfo) 43internal EventLogHandle Handle 260using (EventLogHandle bookmarkHandle = NativeWrapper.EvtCreateBookmark(null)) 391return NativeWrapper.EvtRenderXml(EventLogHandle.Zero, Handle, renderBuffer); 407internal static EventLogHandle GetBookmarkHandleFromBookmark(EventBookmark? bookmark) 410return EventLogHandle.Zero; 411EventLogHandle handle = NativeWrapper.EvtCreateBookmark(bookmark.BookmarkXml);

44internal EventLogHandle renderContextHandleSystem = EventLogHandle.Zero; 45internal EventLogHandle renderContextHandleUser = EventLogHandle.Zero; 124internal EventLogHandle Handle { get; } = EventLogHandle.Zero; 167using (EventLogHandle ProviderEnum = NativeWrapper.EvtOpenProviderEnum(this.Handle, 0)) 190using (EventLogHandle channelEnum = NativeWrapper.EvtOpenChannelEnum(this.Handle, 0))

22private EventLogHandle? _handle; 182EventLogHandle bookmarkHandle = EventLogRecord.GetBookmarkHandleFromBookmark(_bookmark);

52public static EventLogHandle EvtQuery( 53EventLogHandle session, 58EventLogHandle handle = UnsafeNativeMethods.EvtQuery(session, path, query, flags); 70EventLogHandle resultSet, 72EventLogHandle bookmark, 83EventLogHandle queryHandle, 97public static void EvtCancel(EventLogHandle handle) 115public static EventLogHandle EvtOpenProviderMetadata( 116EventLogHandle session, 124EventLogHandle handle = UnsafeNativeMethods.EvtOpenPublisherMetadata(session, ProviderId, logFilePath, 0, flags); 136public static int EvtGetObjectArraySize(EventLogHandle objectArray) 146public static EventLogHandle EvtOpenEventMetadataEnum(EventLogHandle ProviderMetadata, int flags) 148EventLogHandle emEnumHandle = UnsafeNativeMethods.EvtOpenEventMetadataEnum(ProviderMetadata, flags); 160public static EventLogHandle? EvtNextEventMetadata(EventLogHandle eventMetadataEnum, int flags) 162EventLogHandle emHandle = UnsafeNativeMethods.EvtNextEventMetadata(eventMetadataEnum, flags); 176public static EventLogHandle EvtOpenChannelEnum(EventLogHandle session, int flags) 178EventLogHandle channelEnum = UnsafeNativeMethods.EvtOpenChannelEnum(session, flags); 189public static EventLogHandle EvtOpenProviderEnum(EventLogHandle session, int flags) 191EventLogHandle pubEnum = UnsafeNativeMethods.EvtOpenPublisherEnum(session, flags); 202public static EventLogHandle EvtOpenChannelConfig(EventLogHandle session, string channelPath, int flags) 204EventLogHandle handle = UnsafeNativeMethods.EvtOpenChannelConfig(session, channelPath, flags); 215public static void EvtSaveChannelConfig(EventLogHandle channelConfig, int flags) 223public static EventLogHandle EvtOpenLog(EventLogHandle session, string path, PathType flags) 225EventLogHandle logHandle = UnsafeNativeMethods.EvtOpenLog(session, path, flags); 237EventLogHandle session, 251EventLogHandle session, 264EventLogHandle session, 276public static EventLogHandle EvtCreateRenderContext( 281EventLogHandle renderContextHandleValues = UnsafeNativeMethods.EvtCreateRenderContext(valuePathsCount, valuePaths, flags); 293EventLogHandle context, 294EventLogHandle eventHandle, 323public static EventLogHandle EvtOpenSession(UnsafeNativeMethods.EvtLoginClass loginClass, ref UnsafeNativeMethods.EvtRpcLogin login, int timeout, int flags) 325EventLogHandle handle = UnsafeNativeMethods.EvtOpenSession(loginClass, ref login, timeout, flags); 332public static EventLogHandle EvtCreateBookmark(string? bookmarkXml) 334EventLogHandle handle = UnsafeNativeMethods.EvtCreateBookmark(bookmarkXml); 345public static void EvtUpdateBookmark(EventLogHandle bookmark, EventLogHandle eventHandle) 353public static object? EvtGetEventInfo(EventLogHandle handle, UnsafeNativeMethods.EvtEventPropertyId enumType) 386public static object? EvtGetQueryInfo(EventLogHandle handle, UnsafeNativeMethods.EvtQueryPropertyId enumType) 415public static object? EvtGetPublisherMetadataProperty(EventLogHandle pmHandle, UnsafeNativeMethods.EvtPublisherMetadataPropertyId thePropertyId) 445internal static EventLogHandle EvtGetPublisherMetadataPropertyHandle(EventLogHandle pmHandle, UnsafeNativeMethods.EvtPublisherMetadataPropertyId thePropertyId) 482public static string? EvtFormatMessage(EventLogHandle handle, uint msgId) 486bool status = UnsafeNativeMethods.EvtFormatMessage(handle, EventLogHandle.Zero, msgId, 0, null, UnsafeNativeMethods.EvtFormatMessageFlags.EvtFormatMessageId, 0, emptyBuffer, out bufferNeeded); 503status = UnsafeNativeMethods.EvtFormatMessage(handle, EventLogHandle.Zero, msgId, 0, null, UnsafeNativeMethods.EvtFormatMessageFlags.EvtFormatMessageId, bufferNeeded, buffer, out bufferNeeded); 524public static object? EvtGetObjectArrayProperty(EventLogHandle objArrayHandle, int index, int thePropertyId) 555public static object? EvtGetEventMetadataProperty(EventLogHandle handle, UnsafeNativeMethods.EvtEventMetadataPropertyId enumType) 585public static object? EvtGetChannelConfigProperty(EventLogHandle handle, UnsafeNativeMethods.EvtChannelConfigPropertyId enumType) 622public static void EvtSetChannelConfigProperty(EventLogHandle handle, UnsafeNativeMethods.EvtChannelConfigPropertyId enumType, object? val) 699public static string? EvtNextChannelPath(EventLogHandle handle, ref bool finish) 729public static string? EvtNextPublisherId(EventLogHandle handle, ref bool finish) 760public static object? EvtGetLogInfo(EventLogHandle handle, UnsafeNativeMethods.EvtLogPropertyId enumType) 790public static void EvtRenderBufferWithContextSystem(EventLogHandle contextHandle, EventLogHandle eventHandle, UnsafeNativeMethods.EvtRenderFlags flag, SystemProperties systemProperties) 890public static IList<object?> EvtRenderBufferWithContextUserOrValues(EventLogHandle contextHandle, EventLogHandle eventHandle) 934public static string? EvtFormatMessageRenderName(EventLogHandle pmHandle, EventLogHandle eventHandle, UnsafeNativeMethods.EvtFormatMessageFlags flag) 986public static IEnumerable<string> EvtFormatMessageRenderKeywords(EventLogHandle pmHandle, EventLogHandle eventHandle, UnsafeNativeMethods.EvtFormatMessageFlags flag) 1041public static string EvtRenderBookmark(EventLogHandle eventHandle) 1050bool status = UnsafeNativeMethods.EvtRender(EventLogHandle.Zero, eventHandle, flag, 0, IntPtr.Zero, out bufferNeeded, out propCount); 1059status = UnsafeNativeMethods.EvtRender(EventLogHandle.Zero, eventHandle, flag, bufferNeeded, buffer, out bufferNeeded, out propCount); 1074public static string? EvtFormatMessageFormatDescription(EventLogHandle handle, EventLogHandle eventHandle, string?[] values) 1272public static EventLogHandle ConvertToSafeHandle(UnsafeNativeMethods.EvtVariant val) 1275return EventLogHandle.Zero;

22private readonly EventLogHandle _handle = EventLogHandle.Zero; 24private EventLogHandle _defaultProviderHandle = EventLogHandle.Zero; 71internal EventLogHandle Handle 152EventLogHandle elHandle = EventLogHandle.Zero; 279internal object? GetProviderListProperty(EventLogHandle providerHandle, UnsafeNativeMethods.EvtPublisherMetadataPropertyId metadataProperty) 281EventLogHandle elHandle = EventLogHandle.Zero; 488EventLogHandle emEnumHandle = NativeWrapper.EvtOpenEventMetadataEnum(_handle, 0); 494EventLogHandle? emHandle = NativeWrapper.EvtNextEventMetadata(emEnumHandle, 0);

179public string? GetFormatDescription(string ProviderName, EventLogHandle eventHandle) 197public string? GetFormatDescription(string ProviderName, EventLogHandle eventHandle, string?[] values) 214public string? GetLevelDisplayName(string ProviderName, EventLogHandle eventHandle) 224public string? GetOpcodeDisplayName(string ProviderName, EventLogHandle eventHandle) 234public string? GetTaskDisplayName(string ProviderName, EventLogHandle eventHandle) 244public IEnumerable<string> GetKeywordDisplayNames(string ProviderName, EventLogHandle eventHandle)

454internal static partial EventLogHandle EvtQuery( 455EventLogHandle session, 464EventLogHandle resultSet, 466EventLogHandle bookmark, 471internal static partial EventLogHandle EvtSubscribe( 472EventLogHandle session, 476EventLogHandle bookmark, 484EventLogHandle queryHandle, 493internal static partial bool EvtCancel(EventLogHandle handle); 502EventLogHandle eventHandle, 511EventLogHandle queryHandle, 519internal static partial EventLogHandle EvtOpenPublisherMetadata( 520EventLogHandle session, 529EventLogHandle publisherMetadataHandle, 541EventLogHandle objectArray, 547EventLogHandle objectArray, 557internal static partial EventLogHandle EvtOpenEventMetadataEnum( 558EventLogHandle publisherMetadata, 562internal static partial EventLogHandle EvtNextEventMetadata( 563EventLogHandle eventMetadataEnum, 569EventLogHandle eventMetadata, 579internal static partial EventLogHandle EvtOpenChannelEnum( 580EventLogHandle session, 586EventLogHandle channelEnum, 592internal static partial EventLogHandle EvtOpenPublisherEnum( 593EventLogHandle session, 599EventLogHandle publisherEnum, 605internal static partial EventLogHandle EvtOpenChannelConfig( 606EventLogHandle session, 613EventLogHandle channelConfig, 619EventLogHandle channelConfig, 627EventLogHandle channelConfig, 637internal static partial EventLogHandle EvtOpenLog( 638EventLogHandle session, 645EventLogHandle log, 656EventLogHandle session, 665EventLogHandle session, 673EventLogHandle session, 680internal static partial EventLogHandle EvtCreateRenderContext( 689EventLogHandle context, 690EventLogHandle eventHandle, 700EventLogHandle context, 701EventLogHandle eventHandle, 768EventLogHandle publisherMetadataHandle, 769EventLogHandle eventHandle, 781EventLogHandle publisherMetadataHandle, 782EventLogHandle eventHandle, 793internal static partial EventLogHandle EvtOpenSession( 801internal static partial EventLogHandle EvtCreateBookmark( 807EventLogHandle bookmark, 808EventLogHandle eventHandle);