pm4py.connectors.extract_ocel_windows_events#

pm4py.connectors.extract_ocel_windows_events() → OCEL[source]#

Extracts an object-centric event log from all events recorded in the Windows registry.

Columns: - ACTIVITY (ocel:activity): Concatenation of the source name of the event and the event identifier.

(See [Win32_NTLogEvent](https://learn.microsoft.com/en-us/previous-versions/windows/desktop/eventlogprov/win32-ntlogevent))

TIMESTAMP (ocel:timestamp): Timestamp of event generation.

Object Types: - categoryString: Translation of the subcategory. The translation is source-specific. - computerName: Name of the computer that generated the event. - eventIdentifier: Identifier of the event, specific to the source that generated the event log entry. - eventType: Event type classification (1=Error; 2=Warning; 3=Information; 4=Security Audit Success; 5=Security Audit Failure). - sourceName: Name of the source (application, service, driver, or subsystem) that generated the entry. - user: Username of the logged-on user when the event occurred. If the username cannot be determined, this will be NULL.

Return type:: OCEL