AUDIT_ENTRY
The AUDIT_ENTRY
structure contains audit entry information about specified servers.
typedef struct _AUDIT_ENTRY {
DWORD ae_len;
DWORD ae_reserved;
DWORD ae_time;
DWORD ae_type;
DWORD ae_data_offset;
DWORD ae_data_size;
} AUDIT_ENTRY, *PAUDIT_ENTRY, *LPAUDIT_ENTRY;
Members
ae_len
Specifies the
length of the audit entry. Both have the same value. This element is included
at the beginning and at the end of the audit entry to enable both backward and
forward scanning of the log.
ae_reserved
Reserved.
ae_time
Specifies
when the audit entry was generated. The value is stored as the number of
seconds elapsed since 00:00:00, January 1, 1970.
ae_type
Specifies the
type of audit entry. Type values from 0x0000 through 0x07FF are reserved. OEMs
and other application programmers can reserve values from 0x0800 through
0xFFFF.
ae_data_offset
Specifies the
byte offset from the beginning of the audit entry to the beginning of the
variable-length portion (ae_data) of the audit entry.
ae_data_size
Specifies the
variable-length portion of the audit entry; it differs depending on the type of
entry specified by ae_type. The information begins at ae_data_offset bytes from
the top of the audit entry.
See Also