winevent

type BookmarkHandler struct {
	// contains filtered or unexported fields
}

type CfgType struct {
	Global struct {
		Ingest_Secret              string
		Connection_Timeout         string
		Verify_Remote_Certificates bool
		Cleartext_Backend_Target   []string
		Encrypted_Backend_Target   []string
		Bookmark_Location          string
		Ignore_Timestamps          bool
		Ingest_Cache_Path          string
		Log_Level                  string
	}
	EventChannel map[string]*EventStreamConfig
}

type EventStreamConfig struct {
	Tag_Name      string   //which tag are we applying to this event channel
	Channel       string   //Names like: System, Application, Security...
	Max_Reachback string   //duration like: 72 hours, or 6 weeks, etc..
	Level         []string //levels include: verbose,information,warning,error,critical
	Provider      []string //list of providers to filter on
	EventID       []string //list of eventID filters: 1000-2000 or -1000
}

type EventStreamHandle struct {
	// contains filtered or unexported fields
}

type EventStreamParams struct {
	Name      string
	TagName   string
	Channel   string
	Levels    string
	EventIDs  string
	Providers []string
	ReachBack time.Duration
}