windowseventlogs

README

windowsEventLogs

Read Windows Event Logs Under Testing

Todo

• Implement Testing
• Clean Read Data
• Correctly Implement eventSourceFile
• Test for remote machines
• Add Close Handle
• ...

Documentation

Index

• Variables
• type EventLog
  • func OpenEventLog(source string) (*EventLog, error)
  • func OpenRemoteEventLog(host, source string) (*EventLog, error)
  • func (el *EventLog) Close() error
  • func (el *EventLog) Print(offset int, read int)
  • func (el *EventLog) ReadEventLog(offset uint32, read uint32)
  • func (el *EventLog) SetBufferSize(size uint32) bool
  • func (el *EventLog) SetReadFlags(flags int) bool

Variables

var (
	EVENTLOG_SEQUENTIAL_READ = 0x0001
	EVENTLOG_SEEK_READ       = 0x0002
	EVENTLOG_FORWARDS_READ   = 0x0004
	EVENTLOG_BACKWARDS_READ  = 0x0008
	MAX_BUFFER_SIZE          = 0x7ffff
	MAX_DEFAULT_BUFFER_SIZE  = 0x10000
)

Types

type EventLog

type EventLog struct {
	Handle windows.Handle
	// contains filtered or unexported fields
}

Log provides access to the system log.

func OpenEventLog

func OpenEventLog(source string) (*EventLog, error)

OpenEventLog retrieves a handle to the specified event log.

func OpenRemoteEventLog

func OpenRemoteEventLog(host, source string) (*EventLog, error)

OpenRemoteEventLog does the same as Open, but on different computer host.

func (*EventLog) Close

func (el *EventLog) Close() error

Close the Log Handle

func (*EventLog) Print

func (el *EventLog) Print(offset int, read int)

Print from local buffer

func (*EventLog) ReadEventLog

func (el *EventLog) ReadEventLog(offset uint32, read uint32)

ReadEventLog Calls Windows API to read from log

func (*EventLog) SetBufferSize

func (el *EventLog) SetBufferSize(size uint32) bool

SetBufferSize Sets the buffer size and reallocates the buffer

func (*EventLog) SetReadFlags

func (el *EventLog) SetReadFlags(flags int) bool

SetReadFlags Sets the Read Flags for Next Reading