Struct EventLog 

pub struct EventLog;

Public entry point.

EventLog is a zero-sized handle namespace; every method opens its own EVT_HANDLE and returns an iterator that owns and closes it on drop.

Implementations

impl EventLog

pub fn query( channel: &str, xpath: &str, direction: QueryDirection, ) -> Result<Box<dyn Iterator<Item = Result<Event>>>>

Open a channel with an XPath filter and stream matching events.

channel is the log name (e.g. "Application", "Security", "System"). xpath is a structured-query fragment or "*" for everything.

Security channel access requires membership in Event Log Readers or Administrators.