Watch event log for disk errors

Author: ocdtrekkie

Properties/AssemblyInfo.cs

@@ -10,7 +10,7 @@
 [assembly: AssemblyConfiguration("")]
 [assembly: AssemblyCompany("")]
 [assembly: AssemblyProduct("XRFAgent")]
-[assembly: AssemblyCopyright("Copyright ©  2022-2024 Jacob Weisz")]
+[assembly: AssemblyCopyright("Copyright ©  2022-2025 Jacob Weisz")]
 [assembly: AssemblyTrademark("")]
 [assembly: AssemblyCulture("")]
 
@@ -32,5 +32,5 @@
 // You can specify all the values or you can default the Build and Revision Numbers
 // by using the '*' as shown below:
 // [assembly: AssemblyVersion("1.0.*")]
-[assembly: AssemblyVersion("1.0.0.11")]
-[assembly: AssemblyFileVersion("1.0.0.11")]
+[assembly: AssemblyVersion("1.0.0.12")]
+[assembly: AssemblyFileVersion("1.0.0.12")]

XRFAgent.cs

@@ -39,6 +39,7 @@ protected override void OnStart(string[] args)
             modNetwork.Load();
             modSync.Load();
             modSystem.GetSystemDetails();
+            modSystem.AttachEventWatcher();
 
             LoadTime.Stop();
             modLogging.LogEvent("XRFAgent started in " + LoadTime.Elapsed.Milliseconds + " ms", EventLogEntryType.Information);

XRFAgent.csproj

@@ -25,7 +25,7 @@
     <UpdatePeriodically>false</UpdatePeriodically>
     <UpdateRequired>false</UpdateRequired>
     <MapFileExtensions>true</MapFileExtensions>
-    <ApplicationRevision>11</ApplicationRevision>
+    <ApplicationRevision>12</ApplicationRevision>
     <ApplicationVersion>1.0.0.%2a</ApplicationVersion>
     <UseApplicationTrust>false</UseApplicationTrust>
     <BootstrapperEnabled>true</BootstrapperEnabled>

docs/ErrorCodes.md

@@ -18,4 +18,6 @@
 6042 - Windows Update results (informational)
 
 6051 - Detected new software installed (informational)
-6052 - Truncated installed software inventory (informational)
+6052 - Truncated installed software inventory (informational)
+
+6061 - Detected disk error

modSystem.cs

@@ -1,6 +1,7 @@
 using System;
 using System.Collections.Generic;
 using System.Diagnostics;
+using System.Diagnostics.Eventing.Reader;
 using System.IO;
 using System.Text.Json;
 using Microsoft.VisualBasic.Devices;
@@ -20,6 +21,20 @@ public static void Load() { }
         /// </summary>
         public static void Unload() { }
 
+        public static void AttachEventWatcher()
+        {
+            EventLogQuery logQuery = new EventLogQuery("System", PathType.LogName, "*[System[Provider[@Name='disk'] and (EventID=7 or EventID=11 or EventID=25 or EventID=26 or EventID=51 or EventID=55)]]");
+            EventLogWatcher logWatcher = new EventLogWatcher(logQuery);
+            logWatcher.EventRecordWritten += new EventHandler<EventRecordWrittenEventArgs>(EventWritten);
+            logWatcher.Enabled = true;
+        }
+
+        private static void EventWritten(Object obj, EventRecordWrittenEventArgs arg)
+        {
+            modLogging.LogEvent("Detected disk issue", EventLogEntryType.Error, 6061);
+            modSync.SendSingleConfig("Alert_DiskFailure", "reported");
+        }
+
         /// <summary>
         /// Collects the list of installed applications, updates the local table, and sends to the server.
         /// </summary>