search for: eventlog_sequential_read

...9;'s really just iterating backwards through the current event log backwards. Look at this sample below. The first record is correct. Then another event happens, but instead of the latest record, I get an *earlier* record. Thinking about the flags that are set, EVENTLOG_BACKWARDS_READ | EVENTLOG_SEQUENTIAL_READ in the read_last_event() function, it makes sense. It will read backwards sequentially. C:\eclipse\workspace\win32-eventlog>irb irb(main):001:0> require ''win32/eventlog'' => true irb(main):002:0> include Win32 => Object irb(main):003:0> EventLog.open(''...