Share via

2.2.4.13 POLICY_AUDIT_FULL_QUERY_INFO

  • Article

The POLICY_AUDIT_FULL_QUERY_INFO structure is used to query information about the state of the audit log on the server. The following structure corresponds to the PolicyAuditFullQueryInformation information class.

This information class is obsolete and exists for backward compatibility purposes only.

 typedef struct _POLICY_AUDIT_FULL_QUERY_INFO {
   unsigned char ShutDownOnFull;
   unsigned char LogIsFull;
 } POLICY_AUDIT_FULL_QUERY_INFO,
  *PPOLICY_AUDIT_FULL_QUERY_INFO;

ShutDownOnFull: This field indicates whether the system MUST shut down when the event log is full.

LogIsFull: This field indicates whether the event log is full or not.