eventlog

package

v0.26.0 Latest Latest Go to latest Published: Nov 26, 2018 License: Apache-2.0 Imports: 3 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/b3n4kh/go-check-plugins

Links

Open Source Insights

Documentation ¶

Rendered for windows/amd64

Index ¶

Constants
func ClearEventLog(eventLog syscall.Handle, backupFileName *uint16) (err error)
func CloseEventLog(eventLog syscall.Handle) (err error)
func FormatMessage(flags uint32, source syscall.Handle, messageID uint32, languageID uint32, ...) (numChars uint32, err error)
func GetNumberOfEventLogRecords(eventLog syscall.Handle, numberOfRecords *uint32) (err error)
func GetOldestEventLogRecord(eventLog syscall.Handle, oldestRecord *uint32) (err error)
func LoadLibraryEx(filename *uint16, file syscall.Handle, flags uint32) (handle syscall.Handle, err error)
func OpenEventLog(uncServerName *uint16, sourceName *uint16) (handle syscall.Handle, err error)
func ReadEventLog(eventLog syscall.Handle, readFlags ReadFlag, recordOffset uint32, buffer *byte, ...) (err error)
type EVENTLOGRECORD
type EventType
- func (et EventType) String() string
type ReadFlag
type SIDType
- func (st SIDType) String() string

Constants ¶

View Source

const (
	EVENTLOG_SUCCESS    EventType = 0
	EVENTLOG_ERROR_TYPE           = 1 << (iota - 1)
	EVENTLOG_WARNING_TYPE
	EVENTLOG_INFORMATION_TYPE
	EVENTLOG_AUDIT_SUCCESS
	EVENTLOG_AUDIT_FAILURE
)

View Source

const (
	DONT_RESOLVE_DLL_REFERENCES         uint32 = 0x0001
	LOAD_LIBRARY_AS_DATAFILE            uint32 = 0x0002
	LOAD_WITH_ALTERED_SEARCH_PATH       uint32 = 0x0008
	LOAD_IGNORE_CODE_AUTHZ_LEVEL        uint32 = 0x0010
	LOAD_LIBRARY_AS_IMAGE_RESOURCE      uint32 = 0x0020
	LOAD_LIBRARY_AS_DATAFILE_EXCLUSIVE  uint32 = 0x0040
	LOAD_LIBRARY_SEARCH_DLL_LOAD_DIR    uint32 = 0x0100
	LOAD_LIBRARY_SEARCH_APPLICATION_DIR uint32 = 0x0200
	LOAD_LIBRARY_SEARCH_USER_DIRS       uint32 = 0x0400
	LOAD_LIBRARY_SEARCH_SYSTEM32        uint32 = 0x0800
	LOAD_LIBRARY_SEARCH_DEFAULT_DIRS    uint32 = 0x1000
)

Variables ¶

This section is empty.

Functions ¶

func ClearEventLog ¶

func ClearEventLog(eventLog syscall.Handle, backupFileName *uint16) (err error)

func CloseEventLog ¶

func CloseEventLog(eventLog syscall.Handle) (err error)

func FormatMessage ¶

func FormatMessage(flags uint32, source syscall.Handle, messageID uint32, languageID uint32, buffer *byte, bufferSize uint32, arguments uintptr) (numChars uint32, err error)

func GetNumberOfEventLogRecords ¶

func GetNumberOfEventLogRecords(eventLog syscall.Handle, numberOfRecords *uint32) (err error)

func GetOldestEventLogRecord ¶

func GetOldestEventLogRecord(eventLog syscall.Handle, oldestRecord *uint32) (err error)

func LoadLibraryEx ¶

func LoadLibraryEx(filename *uint16, file syscall.Handle, flags uint32) (handle syscall.Handle, err error)

func OpenEventLog ¶

func OpenEventLog(uncServerName *uint16, sourceName *uint16) (handle syscall.Handle, err error)

func ReadEventLog ¶

func ReadEventLog(eventLog syscall.Handle, readFlags ReadFlag, recordOffset uint32, buffer *byte, numberOfBytesToRead uint32, bytesRead *uint32, minNumberOfBytesNeeded *uint32) (err error)

Types ¶

type EVENTLOGRECORD ¶

type EVENTLOGRECORD struct {
	Length              uint32
	Reserved            uint32
	RecordNumber        uint32
	TimeGenerated       uint32
	TimeWritten         uint32
	EventID             uint32
	EventType           uint16
	NumStrings          uint16
	EventCategory       uint16
	ReservedFlags       uint16
	ClosingRecordNumber uint32
	StringOffset        uint32
	UserSidLength       uint32
	UserSidOffset       uint32
	DataLength          uint32
	DataOffset          uint32
}

type EventType ¶

type EventType uint16

func (EventType) String ¶

func (et EventType) String() string

type ReadFlag ¶

type ReadFlag uint32

const (
	EVENTLOG_SEQUENTIAL_READ ReadFlag = 1 << iota
	EVENTLOG_SEEK_READ
	EVENTLOG_FORWARDS_READ
	EVENTLOG_BACKWARDS_READ
)

type SIDType ¶

type SIDType uint32

const (
	SidTypeUser SIDType = 1 + iota
	SidTypeGroup
	SidTypeDomain
	SidTypeAlias
	SidTypeWellKnownGroup
	SidTypeDeletedAccount
	SidTypeInvalid
	SidTypeUnknown
	SidTypeComputer
	SidTypeLabel
)

func (SIDType) String ¶

func (st SIDType) String() string

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL