wineventlog

Jan 24, 2024

Changes in this version

+ func EvtExportLog(path string, query string, targetFilePath string, flags EvtExportLogFlag) error — windows/amd64

+ type EvtExportLogFlag uint32 — windows/amd64

+ const EvtExportLogChannelPath

+ const EvtExportLogFilePath

+ const EvtExportLogOverwrite

+ const EvtExportLogTolerateQueryErrors

Feb 16, 2023

Changes in this version

+ func UTF16LEBufferToUTF8Bytes(v []byte) (r []byte, err error)

+ func UTF16LEBufferToUTF8Writer(v []byte, out io.Writer) (err error)

+ func UTF16LEToUTF8(v []byte) (s string, err error)

+ func UTF16LEToUTF8Bytes(v []uint16) (r []byte)

+ type InsufficientBufferError struct — windows/amd64

+ Cause error

+ RequiredSize int

+ func (ibe InsufficientBufferError) Error() string

Nov 3, 2022

Changes in this version

+ type EvtReadFlag uint32 — windows/amd64

+ const EvtBackwardsRead

+ const EvtForwardsRead

+ const EvtSeekRead

+ const EvtSequentialRead

Jul 6, 2020

Changes in this version

+ const ERROR_EVT_MESSAGE_ID_NOT_FOUND — windows/amd64

+ const ERROR_EVT_MESSAGE_NOT_FOUND — windows/amd64

+ const ERROR_EVT_UNRESOLVED_PARAMETER_INSERT — windows/amd64

+ const ERROR_EVT_UNRESOLVED_VALUE_INSERT — windows/amd64

+ const ERROR_INSUFFICIENT_BUFFER — windows/amd64

+ const ERROR_INVALID_OPERATION — windows/amd64

+ const ERROR_NONE_MAPPED — windows/amd64

+ const ERROR_NO_MORE_ITEMS — windows/amd64

+ const RPC_S_INVALID_BOUND — windows/amd64

+ var ErrorEvtVarTypeNull = errors.New("null EVT_VARIANT data") — windows/amd64

+ var EventLevelToString = map[EventLevel]string — windows/amd64

+ func Channels() ([]string, error) — windows/amd64

+ func Close(h EvtHandle) error — windows/amd64

+ func EvtGetChannelConfigProperty(handle EvtHandle, id EvtChannelConfigPropertyId) (buff []byte, err error) — windows/amd64

+ func EvtGetLogInfo(session EvtHandle, id EvtLogPropertyId) (buff []byte, err error) — windows/amd64

+ func EvtSeek(resultSet EvtHandle, position int64, bookmark EvtHandle, flags EvtSeekFlag) error — windows/amd64

+ func FormatEventString(messageFlag EvtFormatMessageFlag, eventHandle EvtHandle, publisher string, ...) error — windows/amd64

+ func GetChannelFileCreationTime(ch string) (ts time.Time, err error) — windows/amd64

+ func GetChannelFilePath(ch string) (pth string, err error) — windows/amd64

+ func GetRecordIDFromBookmark(bookmark EvtHandle, buff []byte, bb *bytes.Buffer) (r uint64, err error) — windows/amd64

+ func IsAvailable() (bool, error) — windows/amd64

+ func RenderBookmarkXML(bookmarkHandle EvtHandle, renderBuf []byte, out io.Writer) error — windows/amd64

+ func RenderEvent(eventHandle EvtHandle, lang uint32, renderBuf []byte, ...) error — windows/amd64

+ func RenderEventSimple(eh EvtHandle, buf []byte, out io.Writer) error — windows/amd64

+ func RenderEventXML(eventHandle EvtHandle, renderBuf []byte, out io.Writer) error — windows/amd64

+ func UTF16BytesToString(b []byte) (string, int, error) — windows/amd64

+ func UpdateBookmarkFromEvent(bookmark, handle EvtHandle) error — windows/amd64

+ func VarantString(buff []byte) (s string, err error) — windows/amd64

+ type Bookmark struct — windows/amd64

+ RecordId uint64

+ type BookmarkList struct — windows/amd64

+ Bookmarks []Bookmark

+ type EventLevel uint16 — windows/amd64

+ const EVENTLOG_CRITICAL_LEVEL

+ const EVENTLOG_ERROR_LEVEL

+ const EVENTLOG_INFORMATION_LEVEL

+ const EVENTLOG_LOGALWAYS_LEVEL

+ const EVENTLOG_VERBOSE_LEVEL

+ const EVENTLOG_WARNING_LEVEL

+ func (et EventLevel) String() string

+ type EvtChannelConfigPropertyId uint32 — windows/amd64

+ const EvtChannelConfigAccess

+ const EvtChannelConfigClassicEventlog

+ const EvtChannelConfigEnabled

+ const EvtChannelConfigIsolation

+ const EvtChannelConfigOwningPublisher

+ const EvtChannelConfigType

+ const EvtChannelLoggingConfigAutoBackup

+ const EvtChannelLoggingConfigLogFilePath

+ const EvtChannelLoggingConfigMaxSize

+ const EvtChannelLoggingConfigRetention

+ const EvtChannelPublisherList

+ const EvtChannelPublishingConfigBufferSize

+ const EvtChannelPublishingConfigClockType

+ const EvtChannelPublishingConfigControlGuid

+ const EvtChannelPublishingConfigFileMax

+ const EvtChannelPublishingConfigKeywords

+ const EvtChannelPublishingConfigLatency

+ const EvtChannelPublishingConfigLevel

+ const EvtChannelPublishingConfigMaxBuffers

+ const EvtChannelPublishingConfigMinBuffers

+ const EvtChannelPublishingConfigSidType

+ type EvtFormatMessageFlag uint32 — windows/amd64

+ const EvtFormatMessageChannel

+ const EvtFormatMessageEvent

+ const EvtFormatMessageId

+ const EvtFormatMessageKeyword

+ const EvtFormatMessageLevel

+ const EvtFormatMessageOpcode

+ const EvtFormatMessageProvider

+ const EvtFormatMessageTask

+ const EvtFormatMessageXml

+ type EvtHandle uintptr — windows/amd64

+ func CreateBookmark() (EvtHandle, error)

+ func CreateBookmarkFromEvent(handle EvtHandle) (EvtHandle, error)

+ func CreateBookmarkFromRecordID(channel string, recordID uint64) (EvtHandle, error)

+ func CreateBookmarkFromXML(bookmarkXML string) (EvtHandle, error)

+ func CreateRenderContext(valuePaths []string, flag EvtRenderContextFlag) (EvtHandle, error)

+ func EventHandles(subscription EvtHandle, maxHandles int) ([]EvtHandle, error)

+ func EvtOpenChannelConfig(path string) (handle EvtHandle, err error)

+ func EvtOpenLog(session EvtHandle, path string, flags EvtOpenLogFlag) (EvtHandle, error)

+ func EvtQuery(session EvtHandle, path string, query string, flags EvtQueryFlag) (EvtHandle, error)

+ func OpenPublisherMetadata(session EvtHandle, publisherName string, lang uint32) (EvtHandle, error)

+ func Subscribe(session EvtHandle, event windows.Handle, channelPath string, query string, ...) (EvtHandle, error)

+ type EvtLogPropertyId uint32 — windows/amd64

+ const EvtLogAttributes

+ const EvtLogCreationTime

+ const EvtLogFileSize

+ const EvtLogFull

+ const EvtLogLastAccessTime

+ const EvtLogLastWriteTime

+ const EvtLogNumberOfLogRecords

+ const EvtLogOldestRecordNumber

+ type EvtOpenLogFlag uint32 — windows/amd64

+ const EvtOpenChannelPath

+ const EvtOpenFilePath

+ type EvtQueryFlag uint32 — windows/amd64

+ const EvtQueryChannelPath

+ const EvtQueryFilePath

+ const EvtQueryForwardDirection

+ const EvtQueryReverseDirection

+ const EvtQueryTolerateQueryErrors

+ type EvtRenderContextFlag uint32 — windows/amd64

+ const EvtRenderContextSystem

+ const EvtRenderContextUser

+ const EvtRenderContextValues

+ type EvtRenderFlag uint32 — windows/amd64

+ const EvtRenderBookmark

+ const EvtRenderEventValues

+ const EvtRenderEventXml

+ type EvtSeekFlag uint32 — windows/amd64

+ const EvtSeekOriginMask

+ const EvtSeekRelativeToBookmark

+ const EvtSeekRelativeToCurrent

+ const EvtSeekRelativeToFirst

+ const EvtSeekRelativeToLast

+ const EvtSeekStrict

+ type EvtSubscribeFlag uint32 — windows/amd64

+ const EvtSubscribeOriginMask

+ const EvtSubscribeStartAfterBookmark

+ const EvtSubscribeStartAtOldestRecord

+ const EvtSubscribeStrict

+ const EvtSubscribeToFutureEvents

+ const EvtSubscribeTolerateQueryErrors

+ type EvtSystemPropertyID uint32 — windows/amd64

+ const EvtSystemActivityID

+ const EvtSystemChannel

+ const EvtSystemComputer

+ const EvtSystemEventID

+ const EvtSystemEventRecordId

+ const EvtSystemKeywords

+ const EvtSystemLevel

+ const EvtSystemOpcode

+ const EvtSystemProcessID

+ const EvtSystemPropertyIdEND

+ const EvtSystemProviderGuid

+ const EvtSystemProviderName

+ const EvtSystemQualifiers

+ const EvtSystemRelatedActivityID

+ const EvtSystemTask

+ const EvtSystemThreadID

+ const EvtSystemTimeCreated

+ const EvtSystemUserID

+ const EvtSystemVersion

+ func (e EvtSystemPropertyID) String() string

+ type EvtVariantType uint32 — windows/amd64

+ const EvtVarTypeAnsiString

+ const EvtVarTypeBinary

+ const EvtVarTypeBoolean

+ const EvtVarTypeByte

+ const EvtVarTypeDouble

+ const EvtVarTypeEvtHandle

+ const EvtVarTypeEvtXml

+ const EvtVarTypeFileTime

+ const EvtVarTypeGuid

+ const EvtVarTypeHexInt32

+ const EvtVarTypeHexInt64

+ const EvtVarTypeInt16

+ const EvtVarTypeInt32

+ const EvtVarTypeInt64

+ const EvtVarTypeNull

+ const EvtVarTypeSByte

+ const EvtVarTypeSid

+ const EvtVarTypeSingle

+ const EvtVarTypeSizeT

+ const EvtVarTypeString

+ const EvtVarTypeSysTime

+ const EvtVarTypeUInt16

+ const EvtVarTypeUInt32

+ const EvtVarTypeUInt64

+ type LogFileInfo struct — windows/amd64

+ Attributes uint32

+ Creation time.Time

+ LastWrite time.Time

+ NumberOfRecords uint64

+ OldestRecord uint64

+ func QueryLogFile(hnd EvtHandle) (lfi LogFileInfo, err error)

+ type Query struct

+ EventID string

+ IgnoreOlder time.Duration

+ Level string

+ Log string

+ Provider []string

+ func (q Query) Build() (string, error)