NT_STATUS_EVENTLOG_FILE_CHANGED
NT_STATUS_EVENTLOG_FILE_CHANGED},
ERRHRD, ERRgeneral, NT_STATUS_EVENTLOG_FILE_CHANGED}, {