search

locky37 / eventlog-to-syslog

Automatically exported from code.google.com/p/eventlog-to-syslog
0 stars 0 forks source link

Unable to load multiple EventSource:EventIDs in config file #96

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
Unable to load multiple EventSource:EventIDs in config file. It can only read 1 
EventSource:EventID while the rest are ignored.

What steps will reproduce the problem?
1. Add following lines to c:\Windows\system32\evtsys.cfg:
Security:529
Security:644
Security:675
Security:676
Security:681
2. Set registry key "HKEY_LOCAL_MACHINE\SOFTWARE\ECN\EvtSys\3.0\IncludeOnly" to 
dword:1
3. Run service:
net start EvtSys

What is the expected output? What do you see instead?
Expected output
<29>Jul  7 16:24:39 SERVER-LOG Include Filters: 5
Actual output:
<29>Jul  7 16:24:39 SERVER-LOG Include Filters: 1

What version of the product are you using? On what operating system?
evtsyslog 4.5.1 r65, Windows Server 2003 R2 Enterprise SP2 32-bit

Please provide any additional information below.
"i" is used in both a for loop counter and to count ignore/include events.

Was able to fix issue by modifying CheckSyslogIgnoreFile in check.c. Renamed 
"i" variable to "include_ignore_count". Set type "size_t" for secondary "i" 
variable. See attached file.

Original issue reported on code.google.com by dindo.li...@gmail.com on 7 Jul 2014 at 8:49

Attachments:

GoogleCodeExporter commented 9 years ago 
check.c with modified CheckSyslogIgnoreFile function.

Original comment by dindo.li...@gmail.com on 8 Jul 2014 at 2:46

Attachments: