Module Win_eventlog.EventlogSource

Low-level functions to write to the Windows event log.

The Windows event log is similar to syslog on Unix systems. The main difference is that the log records "events" which have a "category", an "event id" and an array of "insertion strings". Applications are expected to enumerate their categories and event ids and use the message compiler (mc.exe) to create a resource which is linked into the application. The event log viewer (or other clients) look up the source name in the registry, read the resources and decode the event data.

By default if no resources can be found describing the specific categories and events of the application, then the event log viewer will show the categories and events as integers and the insertion strings as plain text. This style of usage is similar to syslog on a Unix system.

Low-level example:

  let log = Eventlog.register "Mirage.exe" in
  let category = 0 and event = 1 in
  Eventlog.report log `Success category event [|
    "insertion string 1";
    "insertion string 2";
  |]

You may wish to use the high-level Log reporter interface instead:

  let log = Eventlog.register "Mirage.exe" in
  Logs.set_reporter (Log_eventlog.reporter log ());
  Log.err (fun f -> f "This is an error");
  Log.info (fun f -> f "This is informational");
  Log.debug (fun f -> f "This is lowly debugging data");

For more context, please read the following documents:

1. ReportEvent API documentation
2. HOWTO: Troubleshooting the "Event Message Not Found" message