eventlog

Documentation

Index

• Constants
• func ClearEventLog(eventLog syscall.Handle, backupFileName *uint16) (err error)
• func CloseEventLog(eventLog syscall.Handle) (err error)
• func FormatMessage(flags uint32, source syscall.Handle, messageID uint32, languageID uint32, ...) (numChars uint32, err error)
• func GetNumberOfEventLogRecords(eventLog syscall.Handle, numberOfRecords *uint32) (err error)
• func GetOldestEventLogRecord(eventLog syscall.Handle, oldestRecord *uint32) (err error)
• func LoadLibraryEx(filename *uint16, file syscall.Handle, flags uint32) (handle syscall.Handle, err error)
• func OpenEventLog(uncServerName *uint16, sourceName *uint16) (handle syscall.Handle, err error)
• func ReadEventLog(eventLog syscall.Handle, readFlags ReadFlag, recordOffset uint32, buffer *byte, ...) (err error)
• type EVENTLOGRECORD
• type EventType
  • func (et EventType) String() string
• type ReadFlag
• type SIDType
  • func (st SIDType) String() string

Constants

const (
	EVENTLOG_SUCCESS    EventType = 0
	EVENTLOG_ERROR_TYPE           = 1 << (iota - 1)
	EVENTLOG_WARNING_TYPE
	EVENTLOG_INFORMATION_TYPE
	EVENTLOG_AUDIT_SUCCESS
	EVENTLOG_AUDIT_FAILURE
)

const (
	DONT_RESOLVE_DLL_REFERENCES         uint32 = 0x0001
	LOAD_LIBRARY_AS_DATAFILE            uint32 = 0x0002
	LOAD_WITH_ALTERED_SEARCH_PATH       uint32 = 0x0008
	LOAD_IGNORE_CODE_AUTHZ_LEVEL        uint32 = 0x0010
	LOAD_LIBRARY_AS_IMAGE_RESOURCE      uint32 = 0x0020
	LOAD_LIBRARY_AS_DATAFILE_EXCLUSIVE  uint32 = 0x0040
	LOAD_LIBRARY_SEARCH_DLL_LOAD_DIR    uint32 = 0x0100
	LOAD_LIBRARY_SEARCH_APPLICATION_DIR uint32 = 0x0200
	LOAD_LIBRARY_SEARCH_USER_DIRS       uint32 = 0x0400
	LOAD_LIBRARY_SEARCH_SYSTEM32        uint32 = 0x0800
	LOAD_LIBRARY_SEARCH_DEFAULT_DIRS    uint32 = 0x1000
)

Functions

func ClearEventLog

func ClearEventLog(eventLog syscall.Handle, backupFileName *uint16) (err error)

func CloseEventLog

func CloseEventLog(eventLog syscall.Handle) (err error)

func FormatMessage

func FormatMessage(flags uint32, source syscall.Handle, messageID uint32, languageID uint32, buffer *byte, bufferSize uint32, arguments uintptr) (numChars uint32, err error)

func GetNumberOfEventLogRecords

func GetNumberOfEventLogRecords(eventLog syscall.Handle, numberOfRecords *uint32) (err error)

func GetOldestEventLogRecord

func GetOldestEventLogRecord(eventLog syscall.Handle, oldestRecord *uint32) (err error)

func LoadLibraryEx

func LoadLibraryEx(filename *uint16, file syscall.Handle, flags uint32) (handle syscall.Handle, err error)

func OpenEventLog

func OpenEventLog(uncServerName *uint16, sourceName *uint16) (handle syscall.Handle, err error)

func ReadEventLog

func ReadEventLog(eventLog syscall.Handle, readFlags ReadFlag, recordOffset uint32, buffer *byte, numberOfBytesToRead uint32, bytesRead *uint32, minNumberOfBytesNeeded *uint32) (err error)

Types

type EVENTLOGRECORD

type EVENTLOGRECORD struct {
	Length              uint32
	Reserved            uint32
	RecordNumber        uint32
	TimeGenerated       uint32
	TimeWritten         uint32
	EventID             uint32
	EventType           uint16
	NumStrings          uint16
	EventCategory       uint16
	ReservedFlags       uint16
	ClosingRecordNumber uint32
	StringOffset        uint32
	UserSidLength       uint32
	UserSidOffset       uint32
	DataLength          uint32
	DataOffset          uint32
}

type EventType

type EventType uint16

func (EventType) String

func (et EventType) String() string

type ReadFlag

type ReadFlag uint32

const (
	EVENTLOG_SEQUENTIAL_READ ReadFlag = 1 << iota
	EVENTLOG_SEEK_READ
	EVENTLOG_FORWARDS_READ
	EVENTLOG_BACKWARDS_READ
)

type SIDType

type SIDType uint32

const (
	SidTypeUser SIDType = 1 + iota
	SidTypeGroup
	SidTypeDomain
	SidTypeAlias
	SidTypeWellKnownGroup
	SidTypeDeletedAccount
	SidTypeInvalid
	SidTypeUnknown
	SidTypeComputer
	SidTypeLabel
)

func (SIDType) String

func (st SIDType) String() string