FSCTL_READ_USN_JOURNAL IOCTL (winioctl.h)

Retrieves the set of update sequence number (USN) change journal records between two specified USN values.

BOOL 
WINAPI 
DeviceIoControl( (HANDLE)       hDevice,         // handle to volume
                 (DWORD) FSCTL_READ_USN_JOURNAL, // dwIoControlCode
                 (LPVOID)       lpInBuffer,      // input buffer
                 (DWORD)        nInBufferSize,   // size of input buffer
                 (LPVOID)       lpOutBuffer,     // output buffer
                 (DWORD)        nOutBufferSize,  // size of output buffer
                 (LPDWORD)      lpBytesReturned, // number of bytes returned
                 (LPOVERLAPPED) lpOverlapped );  // OVERLAPPED structure

Remarks

For the implications of overlapped I/O on this operation, see the Remarks section of the DeviceIoControl topic.

There are two DeviceIoControl control codes that return USN records, FSCTL_READ_USN_JOURNAL and FSCTL_ENUM_USN_DATA. Use the latter when you want a listing (enumeration) of the USN records between two USNs. Use the former when you want to select by USN.

For more information, see Creating, Modifying, and Deleting a Change Journal.

To retrieve a handle to a volume, call CreateFile with the lpFileName parameter set to a string in the following form:

\.\X:

In the preceding string, X is the letter identifying the drive on which the volume appears. The volume must be NTFS.

In Windows 8 and Windows Server 2012, this code is supported by the following technologies.

An application may experience false positives on CsvFs pause/resume.

Examples

For an example, see Walking a Buffer of Change Journal Records.

Requirements

See also

Change Journals

CreateFile

DeviceIoControl

FSCTL_ENUM_USN_DATA

GetOverlappedResult

GetQueuedCompletionStatus

OVERLAPPED

READ_USN_JOURNAL_DATA

USN_RECORD

Volume Management Control Codes