Module win32evtlog

A module, encapsulating the Windows Win32 event log API.
The Evt* functions are only available on Vista and later. Attempting to call them on XP will result in the process exiting, rather than a python exception.

Methods

ReadEventLog
Reads some event log records. 

ClearEventLog
Clears the event log 

BackupEventLog
Backs up the event log 

CloseEventLog
Closes the eventlog 

DeregisterEventSource
Deregisters an Event Source 

NotifyChangeEventLog
Lets an application receive notification when an event is written to the event log file specified by the hEventLog parameter. When the event is written to the event log file, the function causes the event object specified by the hEvent parameter to become signaled. 

GetNumberOfEventLogRecords
Returns the number of event log records. 

GetOldestEventLogRecord
Returns the number of event log records. 

OpenEventLog
Opens an event log. 

RegisterEventSource
Registers an Event Source 

OpenBackupEventLog
Opens a previously saved event log. 

ReportEvent
Reports an event 

EvtOpenChannelEnum
Begins an enumeration of event channels 

EvtFormatMessage
Formats a message string. 

EvtNextChannelPath
Retrieves a channel path from an enumeration 

EvtOpenLog
Opens an event log or exported log archive 

EvtClearLog
Clears an event log and optionally exports events to an archive 

EvtExportLog
Exports events from a channel or log file 

EvtArchiveExportedLog
Localizes an exported event log file 

EvtGetExtendedStatus
Returns additional error info from last Evt* call 

EvtQuery
Opens a query over a log channel or exported log file 

EvtNext
Returns events from a query 

EvtSeek
Changes the current position in a result set 

EvtCreateRenderContext
Creates a render context 

EvtRender
Formats an event into XML text or a Python Dict of key/values 

EvtSubscribe
Requests notification for events 

EvtCreateBookmark
Creates a bookmark 

EvtUpdateBookmark
Repositions a bookmark to an event 

EvtGetChannelConfigProperty
Retreives channel configuration information 

EvtOpenChannelConfig
Opens channel configuration 

EvtOpenSession
Creates a session used to access the Event Log on another machine 

EvtOpenPublisherEnum
Begins an enumeration of event publishers 

EvtNextPublisherId
Returns the next publisher from an enumeration 

EvtOpenPublisherMetadata
Opens a publisher to retrieve properties using win32evtlog::EvtGetPublisherMetadataProperty 

EvtGetPublisherMetadataProperty
Retrieves a property from an event publisher 

EvtOpenEventMetadataEnum
Enumerates the events that a publisher provides 

EvtNextEventMetadata
Retrieves the next item from an event metadata enumeration 

EvtGetEventMetadataProperty
Retrieves a property from an event publisher 

EvtGetLogInfo
Retrieves log file or channel information 

EvtGetEventInfo
Retrieves information about the source of an event 

EvtGetObjectArraySize
Returns the size of an array of event objects 

EvtGetObjectArrayProperty
Retrieves an item from an object array