Edit

Share via

EVENT_FIELD_TYPE enumeration (tdh.h)

  • Article

Defines the provider information to retrieve.

Syntax

typedef enum _EVENT_FIELD_TYPE {
  EventKeywordInformation = 0,
  EventLevelInformation,
  EventChannelInformation,
  EventTaskInformation,
  EventOpcodeInformation,
  EventInformationMax
} EVENT_FIELD_TYPE;

Constants

 
EventKeywordInformation
Value: 0
Keyword information defined in the manifest. For providers that define themselves using MOF classes, this type returns the enable flags values if the provider class includes the Flags property. For details, see the "Specifying level and enable flags values for a provider" section of Event Tracing MOF Qualifiers.
EventLevelInformation
Level information defined in the manifest.
EventChannelInformation
Channel information defined in the manifest.
EventTaskInformation
Task information defined in the manifest.
EventOpcodeInformation
Operation code information defined in the manifest.
EventInformationMax
Reserved.

Remarks

If you specify EventOpcodeInformation when calling TdhQueryProviderFieldInformation, you must specify the EventFieldValue parameter as follows:

  • Bits 0 - 15 must contain the task value
  • Bits 16 - 23 must contain the opcode value
You can get the task and opcode values from EVENT_RECORD.EventHeader.EventDescriptor.

WMI MOF class supports retrieving keyword and level information only.

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2008 [desktop apps only]
Header tdh.h

See also

PROVIDER_FIELD_INFOARRAY

TdhEnumerateProviderFieldInformation

TdhQueryProviderFieldInformation