Difference between revisions of "Truxton event save"

From truxwiki.com
Jump to navigation Jump to search
(Created page with "This saves the event object to the <code><nowiki>[</nowiki>Event<nowiki>]</nowiki></code> table in the database. =Syntax= <source lang="C"> int truxton_event_s...")
 
 
(2 intermediate revisions by the same user not shown)
Line 17: Line 17:
 
void initialize_investigation( uint64_t truxton, char const * media_id, char const * file_id )
 
void initialize_investigation( uint64_t truxton, char const * media_id, char const * file_id )
 
{
 
{
   uint64_t event_handle = truxton_event_create(truxton);
+
   uint64_t event_handle = truxton_event_create( truxton );
  
 
   truxton_event_set_name( event_handle, "Phase 1" );
 
   truxton_event_set_name( event_handle, "Phase 1" );
Line 27: Line 27:
 
   truxton_event_set_file_id( event_handle, file_id );
 
   truxton_event_set_file_id( event_handle, file_id );
  
   truxton_event_save( event_handle );
+
   if ( truxton_event_save( event_handle ) == 0 )
 +
  {
 +
      printf( "Cannot save event to the database.\n" );
 +
  }
 +
  else
 +
  {
 +
      char id[ 65 ];
  
  char id[ 65 ];
+
      truxton_event_get_id( event_handle, id, sizeof( id ) );
  
  truxton_event_get_id( event_handle, id, sizeof( id ) );
+
      printf( "Event ID is %s\n", id );
 +
  }
  
  printf( "Event ID is %s\n", id );
+
   truxton_event_destroy( event_handle );
 
 
   truxton_event_destroy(artifact);
 
 
}
 
}
 
</source>
 
</source>

Latest revision as of 09:04, 10 February 2021

This saves the event object to the [Event] table in the database.

Syntax

int truxton_event_save( uint64_t event_handle );

Parameters

event_handle

The handle to the event. This handle comes from calling truxton_event_create().

Return value

A non-zero value on success, zero on failure.

Sample

void initialize_investigation( uint64_t truxton, char const * media_id, char const * file_id )
{
   uint64_t event_handle = truxton_event_create( truxton );

   truxton_event_set_name( event_handle, "Phase 1" );
   truxton_event_set_description( event_handle, "As described by SA Barnett" );
   truxton_event_set_start( event_handle, get_ticks( "2016-07-31T12:00:00-05:00" ) );
   truxton_event_set_end( event_handle, get_ticks( "2017-01-04T12:00:00-05:00" ) );
   truxton_event_set_type( event_handle, EVENT_TYPE_ADDED_BY_ANALYST );
   truxton_event_set_media( event_handle, media_id );
   truxton_event_set_file_id( event_handle, file_id );

   if ( truxton_event_save( event_handle ) == 0 )
   {
      printf( "Cannot save event to the database.\n" );
   }
   else
   {
      char id[ 65 ];

      truxton_event_get_id( event_handle, id, sizeof( id ) );

      printf( "Event ID is %s\n", id );
   }

   truxton_event_destroy( event_handle );
}