2 * PROJECT: ReactOS kernel
3 * LICENSE: GPL - See COPYING in the top level directory
4 * FILE: services/eventlog/eventlog.h
5 * PURPOSE: Event logging service
6 * COPYRIGHT: Copyright 2005 Saveliy Tretiakov
10 #define __EVENTLOG_H__
13 #define WIN32_NO_STATUS
24 #include "eventlogrpc_s.h"
26 typedef struct _IO_ERROR_LPC
29 IO_ERROR_LOG_MESSAGE Message
;
30 } IO_ERROR_LPC
, *PIO_ERROR_LPC
;
36 * Our file format will be compatible with NT's
38 #define LOGFILE_SIGNATURE 0x654c664c
41 * Flags used in logfile header
43 #define ELF_LOGFILE_HEADER_DIRTY 1
44 #define ELF_LOGFILE_HEADER_WRAP 2
45 #define ELF_LOGGFILE_LOGFULL_WRITTEN 4
46 #define ELF_LOGFILE_ARCHIVE_SET 8
48 /* FIXME: MSDN reads that the following two structs are in winnt.h. Are they? */
49 typedef struct _EVENTLOGHEADER
57 ULONG CurrentRecordNumber
;
58 ULONG OldestRecordNumber
;
63 } EVENTLOGHEADER
, *PEVENTLOGHEADER
;
65 typedef struct _EVENTLOGEOF
67 ULONG RecordSizeBeginning
;
74 ULONG CurrentRecordNumber
;
75 ULONG OldestRecordNumber
;
77 } EVENTLOGEOF
, *PEVENTLOGEOF
;
79 typedef struct _EVENT_OFFSET_INFO
83 } EVENT_OFFSET_INFO
, *PEVENT_OFFSET_INFO
;
85 typedef struct _LOGFILE
88 EVENTLOGHEADER Header
;
92 PEVENT_OFFSET_INFO OffsetInfo
;
98 typedef struct _EVENTSOURCE
100 LIST_ENTRY EventSourceListEntry
;
103 } EVENTSOURCE
, *PEVENTSOURCE
;
105 typedef struct _LOGHANDLE
107 LIST_ENTRY LogHandleListEntry
;
108 PEVENTSOURCE EventSource
;
112 } LOGHANDLE
, *PLOGHANDLE
;
115 VOID
LogfListInitialize(VOID
);
117 PLOGFILE
LogfListHead(VOID
);
119 INT
LogfListItemCount(VOID
);
121 PLOGFILE
LogfListItemByIndex(INT Index
);
123 PLOGFILE
LogfListItemByName(WCHAR
* Name
);
125 INT
LogfListItemIndexByName(WCHAR
* Name
);
127 VOID
LogfListAddItem(PLOGFILE Item
);
129 VOID
LogfListRemoveItem(PLOGFILE Item
);
131 DWORD
LogfReadEvent(PLOGFILE LogFile
,
133 DWORD
* RecordNumber
,
137 DWORD
* BytesNeeded
);
139 BOOL
LogfWriteData(PLOGFILE LogFile
,
143 PLOGFILE
LogfCreate(WCHAR
* LogName
,
146 VOID
LogfClose(PLOGFILE LogFile
);
148 VOID
LogfCloseAll(VOID
);
150 BOOL
LogfInitializeNew(PLOGFILE LogFile
);
152 BOOL
LogfInitializeExisting(PLOGFILE LogFile
);
154 DWORD
LogfGetOldestRecord(PLOGFILE LogFile
);
156 DWORD
LogfGetCurrentRecord(PLOGFILE LogFile
);
158 ULONG
LogfOffsetByNumber(PLOGFILE LogFile
,
161 BOOL
LogfAddOffsetInformation(PLOGFILE LogFile
,
165 BOOL
LogfDeleteOffsetInformation(PLOGFILE LogFile
,
168 PBYTE
LogfAllocAndBuildNewRecord(LPDWORD lpRecSize
,
169 DWORD dwRecordNumber
,
174 LPCWSTR ComputerName
,
183 LogfReportEvent(WORD wType
,
192 extern HANDLE MyHeap
;
194 VOID
PRINT_HEADER(PEVENTLOGHEADER header
);
196 VOID
PRINT_RECORD(PEVENTLOGRECORD pRec
);
198 VOID
EventTimeToSystemTime(DWORD EventTime
,
199 SYSTEMTIME
* SystemTime
);
201 VOID
SystemTimeToEventTime(SYSTEMTIME
* pSystemTime
,
205 VOID
InitEventSourceList(VOID
);
208 LoadEventSources(HKEY hKey
,
212 GetEventSourceByName(LPCWSTR Name
);
216 NTSTATUS WINAPI
PortThreadRoutine(PVOID Param
);
218 NTSTATUS
InitLogPort(VOID
);
220 NTSTATUS
ProcessPortMessage(VOID
);
223 DWORD WINAPI
RpcThreadRoutine(LPVOID lpParameter
);
225 static __inline
void LogfFreeRecord(LPVOID Rec
)
227 HeapFree(MyHeap
, 0, Rec
);
230 #endif /* __EVENTLOG_H__ */