internal static extern bool EvtGetQueryInfo( EventLogHandle queryHandle, [MarshalAs(UnmanagedType.I4)] EvtQueryPropertyId propertyId, int bufferSize, IntPtr buffer, ref int bufferRequired );
internal static partial bool EvtGetQueryInfo( EventLogHandle queryHandle, EvtQueryPropertyId propertyId, int bufferSize, IntPtr buffer, ref int bufferRequired);