windows

Oct 5, 2021

Changes in this version

type Buffer — windows/amd64

+ func (b *Buffer) ReadWideChars(offset uint32) ([]byte, error)

+ func (b *Buffer) SizeBytes() uint32

+ func (b *Buffer) SizeWide() uint32

+ func (b *Buffer) UpdateSizeBytes(size uint32)

+ func (b *Buffer) UpdateSizeWide(size uint32)

Feb 2, 2021

Changes in this version

+ const ErrorInsufficientBuffer — windows/amd64

+ const ErrorInvalidOperation — windows/amd64

+ const ErrorNoMoreItems — windows/amd64

+ const ErrorNotSupported — windows/amd64

+ const ErrorSuccess — windows/amd64

+ const EvtFormatMessageXML — windows/amd64

+ const EvtRenderBookmark — windows/amd64

+ const EvtRenderEventXML — windows/amd64

+ const EvtSubscribeStartAfterBookmark — windows/amd64

+ const EvtSubscribeStartAtOldestRecord — windows/amd64

+ const EvtSubscribeToFutureEvents — windows/amd64

+ func NewDefaultConfig() operator.Builder — windows/amd64

+ type Bookmark struct — windows/amd64

+ func NewBookmark() Bookmark

+ func (b *Bookmark) Close() error

+ func (b *Bookmark) Open(offsetXML string) error

+ func (b *Bookmark) Render(buffer Buffer) (string, error)

+ func (b *Bookmark) Update(event Event) error

+ type Buffer struct — windows/amd64

+ func NewBuffer() Buffer

+ func (b *Buffer) FirstByte() *byte

+ func (b *Buffer) ReadBytes(offset uint32) ([]byte, error)

+ func (b *Buffer) ReadString(offset uint32) (string, error)

+ func (b *Buffer) Size() uint32

+ func (b *Buffer) UpdateSize(size uint32)

+ type Event struct — windows/amd64

+ func NewEvent(handle uintptr) Event

+ func (e *Event) Close() error

+ func (e *Event) RenderFormatted(buffer Buffer, publisher Publisher) (EventXML, error)

+ func (e *Event) RenderSimple(buffer Buffer) (EventXML, error)

+ type EventID struct

+ ID uint32

+ Qualifiers uint16

+ type EventLogConfig struct — windows/amd64

+ Channel string

+ MaxReads int

+ PollInterval helper.Duration

+ StartAt string

+ func (c *EventLogConfig) Build(context operator.BuildContext) ([]operator.Operator, error)

+ type EventLogInput struct — windows/amd64

+ func (e *EventLogInput) Start() error

+ func (e *EventLogInput) Stop() error

+ type EventXML struct

+ Channel string

+ Computer string

+ EventID EventID

+ Keywords []string

+ Level string

+ Message string

+ Opcode string

+ Provider Provider

+ RecordID uint64

+ Task string

+ TimeCreated TimeCreated

+ type Provider struct

+ EventSourceName string

+ GUID string

+ Name string

+ type Publisher struct — windows/amd64

+ func NewPublisher() Publisher

+ func (p *Publisher) Close() error

+ func (p *Publisher) Open(provider string) error

+ type Subscription struct — windows/amd64

+ func NewSubscription() Subscription

+ func (s *Subscription) Close() error

+ func (s *Subscription) Open(channel string, startAt string, bookmark Bookmark) error

+ func (s *Subscription) Read(maxReads int) ([]Event, error)

+ type SyscallProc interface — windows/amd64

+ Call func(...uintptr) (uintptr, uintptr, error)

+ type TimeCreated struct

+ SystemTime string