Stav 23.06.2026

2026-06-23 15:20:56 +02:00
commit 6d91e83e8c
5670 changed files with 1145969 additions and 0 deletions
@@ -0,0 +1,32 @@
+## Demonstrates a "push" subscription with a callback function
+from __future__ import annotations
+
+from time import sleep
+
+import win32evtlog
+
+query_text = '*[System[Provider[@Name="Microsoft-Windows-Winlogon"]]]'
+
+
+def c(reason, context, evt):
+    if reason == win32evtlog.EvtSubscribeActionError:
+        print("EvtSubscribeActionError")
+    elif reason == win32evtlog.EvtSubscribeActionDeliver:
+        print("EvtSubscribeActionDeliver")
+    else:
+        print("??? Unknown action ???", reason)
+    context.append(win32evtlog.EvtRender(evt, win32evtlog.EvtRenderEventXml))
+    return 0
+
+
+evttext: list[str] = []
+s = win32evtlog.EvtSubscribe(
+    "System",
+    win32evtlog.EvtSubscribeStartAtOldestRecord,
+    Query="*",
+    Callback=c,
+    Context=evttext,
+)
+
+sleep(0.001)
+print("\n".join(evttext))