eventLogMsgs.mc - 构建资源文件（DLL）

https://stackoverflow.com//questions/25008903

20-12-2019
|

题

目前我有一个我使用我的自定义创建事件日志的资源文件。当我向日志写入日志时，一切似乎都是完美的，提示是信息/成功目的。但是当我写一个意图一个意图时，我得到了...

无法找到源x的事件ID 301的描述...

我想知道......它是否必须根据我的所有类别都是严重性=成功的事实？我还需要一个具有severity=错误的服务类别吗？

成功日志条目的示例：

事件ID：101，级别：信息，任务类别：（8）服务

非成功日志条目的示例：

事件ID：301，级别：错误，任务类别：（8）服务

以下是我当前的文本消息文件，即我转换为类别的资源文件，以及消息...

; // EventLogMsgs.mc ; // ******************************************************** ; // Use the following commands to build this file: ; // mc -s EventLogMsgs.mc ; // rc EventLogMsgs.rc ; // link /DLL /SUBSYSTEM:WINDOWS /NOENTRY /MACHINE:x86 EventLogMsgs.Res ; // ******************************************************** ; // - Event categories - ; // Categories must be numbered consecutively starting at 1. ; // ******************************************************** MessageId=0x1 Severity=Success SymbolicName=GENERAL_CATEGORY Language=English General . MessageId=0x2 Severity=Success SymbolicName=DATABASE_CATEGORY Language=English Database Query . MessageId=0x3 Severity=Success SymbolicName=LOGON_CATEGORY Language=English Logon . MessageId=0x4 Severity=Success SymbolicName=LOGOFF_CATEGORY Language=English Logoff . MessageId=0x5 Severity=Success SymbolicName=EMAIL_CATEGORY Language=English Email . MessageId=0x6 Severity=Success SymbolicName=PRINTER_CATEGORY Language=English Printer . MessageId=0x7 Severity=Success SymbolicName=IO_CATEGORY Language=English IO . MessageId=0x8 Severity=Success SymbolicName=SERVICE_CATEGORY Language=English Service . MessageId=0x9 Severity=Success SymbolicName=DEBUG_CATEGORY Language=English Debug . ; // - Event messages - ; // ********************************* MessageId = 100 Severity = Success Facility = Application SymbolicName = SMESSAGE_ID100 Language=English %1 . MessageId = 101 Severity = Success Facility = Application SymbolicName = SMESSAGE_ID101 Language=English %1 . MessageId = 102 Severity = Success Facility = Application SymbolicName = SMESSAGE_ID102 Language=English %1 . MessageId = 103 Severity = Success Facility = Application SymbolicName = SMESSAGE_ID103 Language=English %1 . MessageId = 104 Severity = Success Facility = Application SymbolicName = SMESSAGE_ID104 Language=English %1 . MessageId = 105 Severity = Success Facility = Application SymbolicName = SMESSAGE_ID105 Language=English %1 . MessageId = 200 Severity = Warning Facility = Application SymbolicName = WMESSAGE_ID200 Language=English %1 . MessageId = 201 Severity = Warning Facility = Application SymbolicName = WMESSAGE_ID201 Language=English %1 . MessageId = 202 Severity = Warning Facility = Application SymbolicName = WMESSAGE_ID202 Language=English %1 . MessageId = 203 Severity = Warning Facility = Application SymbolicName = WMESSAGE_ID203 Language=English %1 . MessageId = 204 Severity = Warning Facility = Application SymbolicName = WMESSAGE_ID204 Language=English %1 . MessageId = 205 Severity = Warning Facility = Application SymbolicName = WMESSAGE_ID205 Language=English %1 . MessageId = 300 Severity = Error Facility = Application SymbolicName = EMESSAGE_ID300 Language=English %1 . MessageId = 301 Severity = Error Facility = Application SymbolicName = EMESSAGE_ID301 Language=English %1 . MessageId = 302 Severity = Error Facility = Application SymbolicName = EMESSAGE_ID302 Language=English %1 . MessageId = 303 Severity = Error Facility = Application SymbolicName = EMESSAGE_ID303 Language=English %1 . MessageId = 304 Severity = Error Facility = Application SymbolicName = EMESSAGE_ID304 Language=English %1 . MessageId = 305 Severity = Error Facility = Application SymbolicName = EMESSAGE_ID305 Language=English %1 .
.

解决方案

实际问题： 我正在创建文件错误，我以为我正在创建的事件号是我们infact不同的数字。我发现挖掘运行MC.exe和RC.exe命令时生成的MyFile.c文件后发生了什么。查看该文件时，我意识到DWORD值（十六进制）没有加起来的Integer I.

我的问题： 底线是我的问题只是因为我在＃200上使用“severity=警告”而不是“severity=成功”。当我更改时，我终于获得了我正在寻找的活动编号。我的文件中有一些其他增强功能（如下所示），但这是我发出问题的主要原因。

更正的eventlog消息文件： 下面，您会找到我正确的eventlog消息文件。我还决定将其分解为两个文件，保持类别和事件分开。（你不必）

类别.mc

events.mc

; // EventLogMsgs.mc ; // ******************************************************** ; // Use the following commands to build this file: ; // mc -s EventLogMsgs.mc ; // rc EventLogMsgs.rc ; // link /DLL /SUBSYSTEM:WINDOWS /NOENTRY /MACHINE:x86 EventLogMsgs.Res ; // ******************************************************** ; // - Event categories - ; // Categories must be numbered consecutively starting at 1. ; // ******************************************************** ; // - Event messages - ; // ********************************* MessageIdTypedef = DWORD LanguageNames = (English=0x409:MSG00409) MessageId = 100 SymbolicName = SMESSAGE_ID100 Language=English %1 . MessageId = 101 SymbolicName = SMESSAGE_ID101 Language=English %1 . MessageId = 102 SymbolicName = SMESSAGE_ID102 Language=English %1 . MessageId = 103 SymbolicName = SMESSAGE_ID103 Language=English %1 . MessageId = 104 SymbolicName = SMESSAGE_ID104 Language=English %1 . MessageId = 105 SymbolicName = SMESSAGE_ID105 Language=English %1 . MessageId = 200 SymbolicName = WMESSAGE_ID200 Language=English %1 . MessageId = 201 SymbolicName = WMESSAGE_ID201 Language=English %1 . MessageId = 202 SymbolicName = WMESSAGE_ID202 Language=English %1 . MessageId = 203 SymbolicName = WMESSAGE_ID203 Language=English %1 . MessageId = 204 SymbolicName = WMESSAGE_ID204 Language=English %1 . MessageId = 205 SymbolicName = WMESSAGE_ID205 Language=English %1 . MessageId = 300 SymbolicName = EMESSAGE_ID300 Language=English %1 . MessageId = 301 SymbolicName = EMESSAGE_ID301 Language=English %1 . MessageId = 302 SymbolicName = EMESSAGE_ID302 Language=English %1 . MessageId = 303 SymbolicName = EMESSAGE_ID303 Language=English %1 . MessageId = 304 SymbolicName = EMESSAGE_ID304 Language=English %1 . MessageId = 305 SymbolicName = EMESSAGE_ID305 Language=English %1 .
.

许可以下： CC-BY-SA 和归因

不隶属于 StackOverflow