/* Editor Settings: expandtabs and use 4 spaces for indentation
* ex: set softtabstop=4 tabstop=8 expandtab shiftwidth=4: *
* -*- mode: c, c-basic-offset: 4 -*- */
/*
* Copyright Likewise Software 2004-2008
* All rights reserved.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or (at
* your option) any later version.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details. You should have received a copy of the GNU General
* Public License along with this program. If not, see
* .
*
* LIKEWISE SOFTWARE MAKES THIS SOFTWARE AVAILABLE UNDER OTHER LICENSING
* TERMS AS WELL. IF YOU HAVE ENTERED INTO A SEPARATE LICENSE AGREEMENT
* WITH LIKEWISE SOFTWARE, THEN YOU MAY ELECT TO USE THE SOFTWARE UNDER THE
* TERMS OF THAT SOFTWARE LICENSE AGREEMENT INSTEAD OF THE TERMS OF THE GNU
* GENERAL PUBLIC LICENSE, NOTWITHSTANDING THE ABOVE NOTICE. IF YOU
* HAVE QUESTIONS, OR WISH TO REQUEST A COPY OF THE ALTERNATE LICENSING
* TERMS OFFERED BY LIKEWISE SOFTWARE, PLEASE CONTACT LIKEWISE SOFTWARE AT
* license@likewisesoftware.com
*/
/*
* Copyright (C) Centeris Corporation 2004-2007
* Copyright (C) Likewise Software 2007
* All rights reserved.
*
* Authors: Krishna Ganugapati (krishnag@likewisesoftware.com)
* Sriram Nambakam (snambakam@likewisesoftware.com)
*
* Eventlog utility that deletes events over RPC from the Eventlog service.
*
*/
#include "evtbase.h"
#include "eventlog.h"
#include
#ifndef _POSIX_PTHREAD_SEMANTICS
#define _POSIX_PTHREAD_SEMANTICS 1
#endif
static
void
ShowUsage()
{
printf("Usage: deleteevents {-|}\n");
printf("Example:\n");
printf("\tDeletes all events:\n");
printf("\tdeleteevents - \n\n");
printf("\tDeletes all events matching the SQL WHILE expression:\n");
printf("\tdeleteevents \"(EventRecordId < 1000) AND (EventType = 1)\"\n");
printf("\n");
printf("Valid Field Names:\n");
printf("\tEventTableCategoryId (integer)\n");
printf("\tEventRecordId (integer)\n");
printf("\tEventType (varchar(128))\n");
printf("\tEventTime (integer - seconds since Jan. 1 1970)\n");
printf("\tEventSource (varchar(256))\n");
printf("\tEventCategory (varchar(128))\n");
printf("\tEventSourceId (integer)\n");
printf("\tUser (varchar(128))\n");
printf("\tComputer (varchar(128))\n");
printf("\tDescription (TEXT)\n");
printf("\Data (varchar(128))\n");
}
static
int
ParseArgs(
int argc,
char* argv[],
PSTR* pSqlQuery)
{
PSTR pszArg = NULL;
if (argc != 2)
{
ShowUsage();
exit(0);
}
pszArg = argv[1];
if (pszArg == NULL || *pszArg == '\0')
{
ShowUsage();
exit(0);
}
if ((strcmp(pszArg, "--help") == 0) || (strcmp(pszArg, "-h") == 0))
{
ShowUsage();
exit(0);
}
else if (strcmp(pszArg, "-") != 0)
{
*pSqlQuery = pszArg;
}
return 0;
}
int
main(
int argc,
char* argv[]
)
{
DWORD dwError = 0;
HANDLE hEventLog = (HANDLE)NULL;
handle_t bindingHandle = 0;
PSTR pszBindingString = NULL;
EVENT_LOG_RECORD* eventRecords = NULL;
PSTR sqlFilterChar = NULL;
evt_init_logging_to_file(LOG_LEVEL_ERROR, "");
ParseArgs(argc, argv, &sqlFilterChar);
wchar16_t* sqlFilter = NULL;
if(sqlFilterChar != NULL) {
dwError = EVTAllocateMemory(sizeof(wchar16_t)*(1+strlen(sqlFilterChar)), &sqlFilter);
sw16printf(sqlFilter, "%s", sqlFilterChar);
}
TRY
{
dwError = LWIOpenEventLog(&bindingHandle, &hEventLog, &pszBindingString, "127.0.0.1", "127.0.0.1");
BAIL_ON_EVT_ERROR(dwError);
if(sqlFilter == NULL) {
dwError = LWIClearEventLog(bindingHandle,
hEventLog);
}
else {
dwError = LWIDeleteFromEventLog(bindingHandle,
hEventLog,
sqlFilter);
}
BAIL_ON_EVT_ERROR(dwError);
}
CATCH_ALL
{
exc_get_status (THIS_CATCH, &dwError);
EVT_LOG_ERROR("Unexpected error. Error code [%d]\n", dwError);
BAIL_ON_EVT_ERROR(dwError);
}
ENDTRY;
error:
if (bindingHandle && hEventLog && pszBindingString)
LWICloseEventLog(bindingHandle, hEventLog, pszBindingString);
if(dwError != 0) {
EVT_LOG_ERROR("Failed to delete events. Error code [%d]\n", dwError);
}
return dwError;
}