Reference: Read
Author: Ellen Siever, Stephen Spainhour & Nathan Patwardhan
Date: 1999-07-02T01:59:21Z

#

| Chapter 19 Win32 Modules and Extensions |

## Read

    $log->Read(flags, offset, \%eventinfo)

Reads an entry from the event log and returns the information in the eventinfo hash. offset specifies the record number you want to start at in the log. flags sets options for how you want to read the log, which can be any combination of the following:

`EVENTLOG_FORWARDS_READ`

  Eventlog is read in forward chronological order.

`EVENTLOG_BACKWARDS_READ`

  Eventlog is read in reverse chronological order.

`EVENTLOG_SEEK_READ`

  The read begins at the record specified by the `$RecordOffset` parameter. Must also specify `EVENT_LOG_FORWARDS_READ` or `EVENTLOG_BACKWARDS_READ`.

`EVENTLOG_SEQUENTIAL_READ`

  The read continues sequentially from the last `read` call.

The final argument is the output object for the event read. \ventinfo is a reference to a hash that contains keys for each part of the event description. This same structure is used when you report new events to the event log using the `Report` method. The eventinfo hash looks like this:

>     %event = (
>         EventID             => val,
>         EventType           => val,
>         Category            => val,
>         ClosingRecordNumber => val,
>         Source              => val,
>         Computer            => val,
>         Strings             => val,
>         Data                => val,
>     );

Reference: Backup |  | Reference: Report