package
6.8.16+incompatible
Repository: https://github.com/tencentblueking/beats.git
Documentation: pkg.go.dev

# Packages

Package eventlogging provides access to the Event Logging API that was designed for applications that run on the Windows Server 2003, Windows XP, or Windows 2000 operating system.
Package wineventlog provides access to the Windows Event Log API used in all versions of Windows since Vista (i.e.

# Functions

NewByteBuffer creates a new ByteBuffer with an initial capacity of initialSize.
RemoveWindowsLineEndings replaces carriage return line feed (CRLF) with line feed (LF) and trims any newline character that may exist at the end of the string.
UnmarshalEventXML unmarshals the given XML into a new Event.
UTF16BytesToString returns a string that is decoded from the UTF-16 bytes.
No description provided by the author

# Constants

SIDType values.
SIDType values.
SIDType values.
SIDType values.
SIDType values.
SIDType values.
SIDType values.
SIDType values.
Do not reorder.
SIDType values.

# Variables

No description provided by the author

# Structs

ByteBuffer is an expandable buffer backed by a byte slice.
Correlation contains activity identifiers that consumers can use to group related events together.
Event holds the data from a log record.
EventData contains the event data.
EventIdentifier is the identifer that the provider uses to identify a specific event type.
Execution contains information about the process and thread that logged the event.
FileHandle contains the handle to a single Windows message file.
InsufficientBufferError indicates the buffer passed to a system call is too small.
KeyValue is a key value pair of strings.
MessageFiles contains handles to event message files associated with an event log source.
Provider identifies the provider that logged the event.
SID represents the Windows Security Identifier for an account.
TimeCreated contains the system time of when the event was logged.
UserData contains the event data.

# Type aliases

SIDType identifies the type of a security identifier (SID).