uLog

0.2.0.0

handlers/eventlog.psm1



function Get-EventLevel
{
param(
    $Level
)
    switch($Level){
        ([LogLevel]::WARNING)     {$EventLevel = 'Warning';break}
        ([LogLevel]::WARN)        {$EventLevel = 'Warning';break}
        ([LogLevel]::ERROR)       {$EventLevel = 'Error';break}
        ([LogLevel]::CRITICAL)    {$EventLevel = 'Error';break}
        ([LogLevel]::FATAL)       {$EventLevel = 'Error';break}
        default                   {$EventLevel = 'Information'}
    }        
         
    $EventLevel
}

function New-uLogEventLog
{
param(
    [string] $Name      = '',
    [string] $Source    = $MyInvocation.ScriptName,
    [string] $Formatter = [LogFormatter]::EventlogDefault,
    [string] $Level,
    [string] $LogName   = 'Application',
    [Switch] $Enabled   = $true
)
Begin{
    if ($Source -eq ''){$Source = 'Console'}
}
Process{
    
    if ($Source -like '*\*'){ 
        $EventSource = (Get-Item $Source).BaseName 
    }else{
        $EventSource = $Source
    }
    
    try{
        New-EventLog -LogName Application -Source $EventSource -ErrorAction Stop
    }catch{
        switch ($_.FullyQualifiedErrorId){
            'AccessIsDenied,Microsoft.PowerShell.Commands.NewEventLogCommand' {
                # script launched as user,so he does not have the privilege to create a new source
                # using PowerShell as source
                $EventSource = 'PowerShell'
                $LogName     = 'Windows PowerShell'
            }
        }
    }

    $log = [PSCustomObject] @{Name         = $Name;;
                              Enabled      = $Enabled;
                              Type         = 'eventlog';
                              Formatter    = $Formatter;
                              Level        = $Level;
                              Data         = @();
                              Keep         = $false;
                              Source       = $Source;
                              LogName      = $LogName;
                              EventSource  = $EventSource
                              EventlogName = $LogName                              
                             }
     
    $log | Add-Member -MemberType ScriptMethod -Name WriteLog -Value {
        param($Record)

        if (-not $this.Enabled){return}

<#
        switch($Record.Level){
            ([LogLevel]::WARNING) {$EventLevel = 'Warning';break}
            ([LogLevel]::WARN) {$EventLevel = 'Warning';break}
            ([LogLevel]::ERROR) {$EventLevel = 'Error';break}
            ([LogLevel]::CRITICAL) {$EventLevel = 'Error';break}
            ([LogLevel]::FATAL) {$EventLevel = 'Error';break}
            default {$EventLevel = 'Information'}
        }
#>
        $EventLevel = Get-EventLevel -Level $Record.Level

        if ($this.EventSource -eq 'PowerShell'){
            $Record.Id += 1000
        }

        if ($this.Formatter -notmatch '-'){$this.Formatter = 'Format-' + $this.Formatter}

        $FormattedMessage = & $this.Formatter -Record $Record

        $eventMessage = "Source : $($this.Source) `n$FormattedMessage" 
        
        if ($this.Level -le $Record.Level){
            if ($this.Keep -eq $true){
                $this.Data += $Record
            }else{
                Write-EventLog -LogName $this.LogName `
                               -EventId $Record.Id `
                               -EntryType $EventLevel `
                               -Source $this.EventSource `
                               -Message $eventMessage 
            }
        }    
    }

    $log | Add-Member -MemberType ScriptMethod -Name Flush -Value {
        $newData = [string]::Join("`n", $this.Data.Message)

        $evtId = ($this.Data | Measure-Object Id -Maximum).Maximum
        
        $maxLevel = ($this.Data.Level | Get-Unique | % {[LogLevel]::$_.Value__} | Measure-Object -Maximum).Maximum
        $level = [loglevel]::GetName([loglevel], [int] $maxLevel)

        $EventLevel = Get-EventLevel -Level $level

        $FormattedMessage = & $this.Formatter -Record (New-LogRecord -Message $newData -Level $level -Id $evtId)

        $eventMessage = "Source : $($this.Source) `n$FormattedMessage" 

        Write-EventLog -LogName $this.LogName `
                               -EventId $evtId `
                               -EntryType $EventLevel `
                               -Source $this.EventSource `
                               -Message $eventMessage
        $this.Data = ''
    }

    $log
}
}