Commits on Jul 3, 2020

1. in_winlog: fix "invalid UTF-8 bytes, skipping" …

   This adds the first cut at a more complete record serializer
   for Windows Event logs.
   
   In particular, this patch implements the message formatting
   using registry keys. The format of a new data record looks
   something like this:
   
       {"RecordNumber": 408,
        "TimeGenerated": "2020-06-22 06:26:31 +0900",
        "TimeWritten": "2020-06-22 06:26:31 +0900",
        "EventType": "Information",
        "EventCategory": 0,
        "Channel": "Application",
        "SourceName": "Microsoft-Windows-RestartManager",
        "ComputerName": "winsvr2019",
        "Data": "",
        "Sid": "",
        "Message": "Starting session 0 - 2020-06-22T06: 26:31.710405700Z."}
   
   Note that every field is explicitly encoded into UTF-8 - this
   guarantees that we can always safely convert records into JSON.
   
   Signed-off-by: Fujimoto Seiji <fujimoto@ceptord.net>

   

   fujimotos committed Jul 3, 2020
   Configuration menu

   • View commit details
   • Copy full SHA for b399572
   • Browse repository at this point

   Copy the full SHA

   b399572 View commit details

   Browse the repository at this point in the history