Documentation
¶
Rendered for windows/amd64
Overview ¶
Package publishermetadatacache provides a cache for Windows Event Log publisher metadata handles
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type PublisherMetadataCache ¶
type PublisherMetadataCache struct {
// contains filtered or unexported fields
}
PublisherMetadataCache implements the Component interface
func New ¶
func New(api evtapi.API) *PublisherMetadataCache
New creates a new publishermetadatacache
func (*PublisherMetadataCache) Flush ¶
func (c *PublisherMetadataCache) Flush()
Flush cleans up all cached handles when the component shuts down
func (*PublisherMetadataCache) FormatMessage ¶
func (c *PublisherMetadataCache) FormatMessage(publisherName string, event evtapi.EventRecordHandle, flags uint) (string, error)
FormatMessage formats an event message using the cached EventPublisherMetadataHandle.
func (*PublisherMetadataCache) Get ¶
func (c *PublisherMetadataCache) Get(publisherName string) (evtapi.EventPublisherMetadataHandle, error)
Get retrieves a cached EventPublisherMetadataHandle for the given publisher name. If not found in cache, it calls EvtOpenPublisherMetadata and caches the result.
Source Files
Click to show internal directories.
Click to hide internal directories.