From df28515b975bd5e541a18dcdf515d25a5de2937c Mon Sep 17 00:00:00 2001 From: 1orenz0 <1orenz0> Date: Sun, 6 Oct 2019 13:25:37 +0100 Subject: [PATCH] [event log] Expose message filename --- windows/winobject/event_log.py | 22 +++++++++++++++++----- 1 file changed, 17 insertions(+), 5 deletions(-) diff --git a/windows/winobject/event_log.py b/windows/winobject/event_log.py index 6c35f65..8466f4d 100644 --- a/windows/winobject/event_log.py +++ b/windows/winobject/event_log.py @@ -513,6 +513,14 @@ class PublisherMetadata(EvtHandle): """The :class:`PublisherMetadata` for the publisher ``name``""" return cls(winproxy.EvtOpenPublisherMetadata(None, name, None, 0, 0), name) + @property + def guid(self): + """The GUID associated with this provider + + :type: [:class:`GUID`] -- the GUID in a XXXXXXXXXX-YYYY-ZZZZ-TTTT-VVVVVVVVVV form + """ + return publishinfo(self, gdef.EvtPublisherMetadataPublisherGuid).value + @property def chanrefs(self): """Identifies the channels child element of the provider. @@ -585,12 +593,16 @@ class PublisherMetadata(EvtHandle): return sbuff.value @property - def guid(self): - """The GUID associated with this provider - - :type: [:class:`GUID`] -- the GUID in a XXXXXXXXXX-YYYY-ZZZZ-TTTT-VVVVVVVVVV form + def message_name(self): """ - return publishinfo(self, gdef.EvtPublisherMetadataPublisherGuid).value + """ + return self.message(publishinfo(self, gdef.EvtPublisherMetadataPublisherMessageID).value) + + @property + def message_filepath(self): + """ + """ + return publishinfo(self, gdef.EvtPublisherMetadataMessageFilePath).value def __repr__(self):