The RegisterEventSource function returns a handle that can be used with the ReportEvent function to log an event.
Any source name can be used; it will be carried in the event log record so that Event Viewer can use it for filtering.
HANDLE RegisterEventSource(
LPCTSTR lpUNCServerName, |
// server name for source |
LPCTSTR lpSourceName |
// source name for registered handle |
); |
HKEY_LOCAL_MACHINE System CurrentControlSet Services EventLog Application WinApp Security System
If the source name cannot be found, the event logging service uses the Application logfile with no message files for the event identifier or category.
If the function succeeds, the return value is a handle that can be used with the ReportEvent function.
If the function fails, the return value is NULL. To get extended error information, call GetLastError.