2.1 Transport

The EventLog Remoting Protocol uses RPC as the primary transport protocol.

Client remote retrieval and expansion of event description, event category, and parameter strings are done as specified in [MS-RRP] and [MS-SMB].