2.2.4 EVENTLOG_FULL_INFORMATION
The EVENTLOG_FULL_INFORMATION structure is used by the ElfrGetLogInformation (section 3.1.4.20) method to indicate whether an event log is full or not.
-
typedef struct _EVENTLOG_FULL_INFORMATION { unsigned long dwFull; } EVENTLOG_FULL_INFORMATION;
dwFull: If the event log is not full, dwFull MUST be set to zero. If the event log is full, dwFull MUST be set to 1.