Zabbix

/*

** Zabbix

** Copyright (C) 2001-2024 Zabbix SIA

**

** This program is free software; you can redistribute it and/or modify

** it under the terms of the GNU General Public License as published by

** the Free Software Foundation; either version 2 of the License, or

** (at your option) any later version.

**

** This program is distributed in the hope that it will be useful,

** but WITHOUT ANY WARRANTY; without even the implied warranty of

** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

** GNU General Public License for more details.

**

** You should have received a copy of the GNU General Public License

** along with this program; if not, write to the Free Software

** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

**/

​

#ifndef ZABBIX_EVENTLOG_H

#define ZABBIX_EVENTLOG_H

​

#include "config.h"

#include "logfiles/logfiles.h"

​

#if !defined(_WINDOWS) && !defined(__MINGW32__)

#   error "This module is only available for Windows OS"

#endif

​

#include "zbxalgo.h"

#include "active.h"

#include "metrics.h"

​

#define EVT_VARIANT_TYPE_ARRAY  128

#define EVT_VARIANT_TYPE_MASK   0x7f

​

/* Structures from winevt.h file */

typedef HANDLE EVT_HANDLE, *PEVT_HANDLE;

​

typedef struct _EVT_VARIANT

{

    union

    {

        BOOL        BooleanVal;

        INT8        SByteVal;

        INT16       Int16Val;

        INT32       Int32Val;

        INT64       Int64Val;

        UINT8       ByteVal;

        UINT16      UInt16Val;

        UINT32      UInt32Val;

        UINT64      UInt64Val;

        float       SingleVal;

        double      DoubleVal;

        ULONGLONG   FileTimeVal;

        SYSTEMTIME  *SysTimeVal;

        GUID        *GuidVal;

        const wchar_t   *StringVal;

        const char  *AnsiStringVal;

        PBYTE       BinaryVal;

        PSID        SidVal;

        size_t      SizeTVal;

​

            /* array fields */

        BOOL        *BooleanArr;

        INT8        *SByteArr;

        INT16       *Int16Arr;

        INT32       *Int32Arr;

        INT64       *Int64Arr;

        UINT8       *ByteArr;

        UINT16      *UInt16Arr;

        UINT32      *UInt32Arr;

        UINT64      *UInt64Arr;

        float       *SingleArr;

        double      *DoubleArr;

        FILETIME    *FileTimeArr;

        SYSTEMTIME  *SysTimeArr;

        GUID        *GuidArr;

        wchar_t     **StringArr;

        char        **AnsiStringArr;

        PSID        *SidArr;

        size_t      *SizeTArr;

​

        /* internal fields */

        EVT_HANDLE  EvtHandleVal;

        const wchar_t   *XmlVal;

        const wchar_t   **XmlValArr;

    };

​

    DWORD   Count;   /* number of elements (not length) in bytes */

    DWORD   Type;