Event viewer plugin update

Here you can discuss about your favorite plug-in.
Post Reply
User avatar
sta64
Posts: 1
Joined: Wed 01 Mar, 2023 20:27
Been thanked: 1 time

Event viewer plugin update

Post by sta64 »

I've added a few things to Vadim Yegorov's NTEvent plugin, version 0.6.2:
  • "Parameters", "State" and other non-event log keys are not displayed
  • message and parameter files are also searched for in the "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers" subtree, according to the "providerGuid" value of the original registry key
  • to support events logged by 32-bit applications on 64-bit Windows, message and parameter files in the Windows "System32" directory are also searched for in the "SysWOW64" directory (where 32-bit system DLL's reside)
  • vice versa, to support events logged by 64-bit applications in 32-bit FAR, message and parameter files are also searched in the "SysNative" directory (where 64-bit system DLL's are visible for 32-bit applications)
  • [DOESN'T SEEM TO WORK] message and parameter files are also searched for as .mui files in the user/system locale subdirectory (e.g. "en-US" on an English Windows) of the "System32" (or "SysWOW64") directory
  • message and parameter files are loaded as data files only because loading some DLL's, executing their DllMain, crashes the whole process
  • if an error occurred while trying to format the event message (mostly error code #317), a brief reason is added: function name, function arguments (file name and/or error code), result (error code)
  • after "It contains the following insertion string(s):", an ASCII CRLF was appended; corrected to Unicode CRLF
  • if reading an event log is aborted by Esc, the list is truncated to however many entries have actually been read
  • surplus ".." entries have been removed
  • a weird vertical bar of x's in the configuration dialog has been removed
  • usage of the "ARRAYSIZE" macro corrected to "ArraySize" (wrong case)
  • 32/64 compilation is switchable by "BITS" environment variable
I increased the version number 0.6.3. Full package (source, 32-bit and 64-bit binaries) is attached. Feedback would be welcome. :smile:
Attachments
farntevent063.zip
FAR Manager plugin, NT Events 0.6.3
(99.49 KiB) Downloaded 44 times
User avatar
HaRT
Moderator
Posts: 10806
Joined: Tue 30 Aug, 2005 17:21
Has thanked: 220 times
Been thanked: 357 times

Event viewer plugin update

Post by HaRT »

You might wish to create a Pull Request at GitHub in a hope that your changes get integrated to the original plugin.
Фар есть инструмент, а не нянька. © 2009 DrKnS
Post Reply

Return to “General Plug-In Discussions”