windowsevent

Documentation

Index

• func Identifier(channelPath, query string) string
• type Config
• type Tailer
  • func NewTailer(evtapi evtapi.API, source *sources.LogSource, config *Config, ...) *Tailer
  • func (t *Tailer) Identifier() string
  • func (t *Tailer) Start(bookmark string)
  • func (t *Tailer) Stop()

Functions

func Identifier

func Identifier(channelPath, query string) string

Identifier returns a string that uniquely identifies a source

Types

type Config

type Config struct {
	ChannelPath string
	Query       string
	// See LogsConfig.ShouldProcessRawMessage() comment.
	ProcessRawMessage bool
}

Config is a event log tailer configuration

type Tailer

type Tailer struct {
	// contains filtered or unexported fields
}

Tailer collects logs from Windows Event Log using a pull subscription

func NewTailer

func NewTailer(evtapi evtapi.API, source *sources.LogSource, config *Config, outputChan chan *message.Message) *Tailer

NewTailer returns a new tailer.

func (*Tailer) Identifier

func (t *Tailer) Identifier() string

Identifier returns a string that uniquely identifies a source

func (*Tailer) Start

func (t *Tailer) Start(bookmark string)

Start starts tailing the event log.

func (*Tailer) Stop

func (t *Tailer) Stop()

Stop stops the tailer