/* Editor Settings: expandtabs and use 4 spaces for indentation
* ex: set softtabstop=4 tabstop=8 expandtab shiftwidth=4: *
* -*- mode: c, c-basic-offset: 4 -*- */
/*
* Copyright Likewise Software 2004-2008
* All rights reserved.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or (at
* your option) any later version.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details. You should have received a copy of the GNU General
* Public License along with this program. If not, see
* .
*
* LIKEWISE SOFTWARE MAKES THIS SOFTWARE AVAILABLE UNDER OTHER LICENSING
* TERMS AS WELL. IF YOU HAVE ENTERED INTO A SEPARATE LICENSE AGREEMENT
* WITH LIKEWISE SOFTWARE, THEN YOU MAY ELECT TO USE THE SOFTWARE UNDER THE
* TERMS OF THAT SOFTWARE LICENSE AGREEMENT INSTEAD OF THE TERMS OF THE GNU
* GENERAL PUBLIC LICENSE, NOTWITHSTANDING THE ABOVE NOTICE. IF YOU
* HAVE QUESTIONS, OR WISH TO REQUEST A COPY OF THE ALTERNATE LICENSING
* TERMS OFFERED BY LIKEWISE SOFTWARE, PLEASE CONTACT LIKEWISE SOFTWARE AT
* license@likewisesoftware.com
*/
/*
* Copyright (C) Centeris Corporation 2004-2007
* Copyright (C) Likewise Software 2007
* All rights reserved.
*
* Authors: Krishna Ganugapati (krishnag@likewisesoftware.com)
* Sriram Nambakam (snambakam@likewisesoftware.com)
*
* Eventlog utility that retrieves events over RPC from the Eventlog service.
*
*/
#include "evtbase.h"
#include "eventlog.h"
#include
#ifndef _POSIX_PTHREAD_SEMANTICS
#define _POSIX_PTHREAD_SEMANTICS 1
#endif
static
void
ShowUsage()
{
printf("Usage: listevents [-q ] [-c|]\n");
printf("\t-c\tReturns a count of the number of records in the database\n");
}
static
int
ParseArgs(
int argc,
char* argv[],
PDWORD pdwRecordsPerPage,
BOOLEAN* returnCount,
char** sqlFilter)
{
int iArg = 1;
PSTR pszArg = NULL;
int nRecordsPerPage = 10;
BOOLEAN returnCountLocal = FALSE;
char* sqlFilterLocal = FALSE;
DWORD dwError = 0;
pszArg = argv[iArg++];
if (pszArg == NULL || *pszArg == '\0')
{
//do nothing
}
else {
if ((strcmp(pszArg, "--help") == 0) || (strcmp(pszArg, "-h") == 0))
{
ShowUsage();
exit(0);
}
else if (strcmp(pszArg, "-q") == 0)
{
pszArg = argv[iArg++];
if(pszArg != NULL && *pszArg != '\0') {
dwError = EVTAllocateMemory(strlen(pszArg)+1, &sqlFilterLocal);
strcpy(sqlFilterLocal, pszArg);
pszArg = argv[iArg++];
EVT_LOG_INFO("running SQL QUERY \"%s\"\n", sqlFilterLocal);
}
else {
ShowUsage();
exit(0);
}
}
if(pszArg == NULL || *pszArg == '\0') {
//do nothing
}
else if (strcmp(pszArg, "-c") == 0)
{
returnCountLocal = TRUE;
}
else
{
nRecordsPerPage = atoi(pszArg);
}
}
*pdwRecordsPerPage = nRecordsPerPage;
*returnCount = returnCountLocal;
*sqlFilter = sqlFilterLocal;
return 0;
}
int
main(
int argc,
char* argv[]
)
{
DWORD dwError = 0;
HANDLE hEventLog = (HANDLE)NULL;
handle_t bindingHandle = 0;
PSTR pszBindingString = NULL;
EVENT_LOG_RECORD* eventRecords = NULL;
EVENT_LOG_RECORD* pRecord = NULL;
idl_long_int nRecords = 0;
DWORD iRecord = 0;
DWORD currentRecord = 0;
DWORD nRecordsPerPage = 0;
evt_init_logging_to_file(LOG_LEVEL_ERROR, "");
BOOLEAN returnCount = FALSE;
char* sqlFilterChar = NULL;
const char* sqlFilterCharDefault = "eventRecordId > 0";
ParseArgs(argc, argv, &nRecordsPerPage, &returnCount, &sqlFilterChar);
if(sqlFilterChar == NULL || *sqlFilterChar == '\0') {
sqlFilterChar = sqlFilterCharDefault;
}
wchar16_t* sqlFilter = NULL;
dwError = EVTAllocateMemory(sizeof(wchar16_t)*(1+strlen(sqlFilterChar)), &sqlFilter);
sw16printf(sqlFilter, "%s", sqlFilterChar);
TRY
{
dwError = LWIOpenEventLog(&bindingHandle, &hEventLog, &pszBindingString, "127.0.0.1", "127.0.0.1");
BAIL_ON_EVT_ERROR(dwError);
if(returnCount) {
dwError = LWICountEventLog(bindingHandle,
hEventLog,
&nRecords,
sqlFilter);
BAIL_ON_EVT_ERROR(dwError);
printf("%d records found in database\n", nRecords);
if (bindingHandle && hEventLog && pszBindingString)
LWICloseEventLog(bindingHandle, hEventLog, pszBindingString);
return dwError;
}
else {
do {
dwError = LWIReadEventLog(bindingHandle,
hEventLog,
currentRecord,
nRecordsPerPage,
&nRecords,
sqlFilter,
&eventRecords);
BAIL_ON_EVT_ERROR(dwError);
PrintEventRecords(stdout, eventRecords, nRecords, ¤tRecord);
} while(nRecords == nRecordsPerPage && nRecords > 0);
} //end else
}
CATCH_ALL
{
exc_get_status (THIS_CATCH, &dwError);
EVT_LOG_ERROR("Failed to open event log. Error code [%d]\n", dwError);
BAIL_ON_EVT_ERROR(dwError);
}
ENDTRY;
error:
if(sqlFilterChar != NULL && sqlFilterChar != sqlFilterCharDefault)
{
EVTFreeMemory(sqlFilterChar);
}
if (bindingHandle && hEventLog && pszBindingString)
LWICloseEventLog(bindingHandle, hEventLog, pszBindingString);
if(eventRecords) {
RPCFreeMemory(eventRecords);
EVTFreeMemory(eventRecords);
}
if(dwError != 0) {
EVT_LOG_ERROR("Failed to dump events. Error code [%d]\n", dwError);
}
return dwError;
}