Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

EventTrace class

An abstract class from which all event trace classes are derived.

The following syntax is simplified from MOF code.

Syntax

[abstract]class EventTrace
{
  uint16 EventSize;
  uint16 ReservedHeaderField;
  uint8  EventType;
  uint8  TraceLevel;
  uint16 TraceVersion;
  uint64 ThreadId;
  uint64 TimeStamp;
  uint8  EventGuid[];
  uint32 KernelTime;
  uint32 UserTime;
  uint32 InstanceId;
  uint8  ParentGuid[];
  uint32 ParentInstanceId;
  uint32 MofData;
  uint32 MofLength;
};

Members

The EventTrace class has these types of members:

Properties

The EventTrace class has these properties.

EventGuid[]
Data type: uint8
Access type: Read-only
Qualifiers: WmiDataId(8), Max(16)

Event trace class GUID of this event.

EventSize
Data type: uint16
Access type: Read-only
Qualifiers: WmiDataId(1)

Total number of bytes of the event.

EventType
Data type: uint8
Access type: Read-only
Qualifiers: WmiDataId(3)

Provider-defined event type. Tells you which event type class to use to decipher the provider-defined event data (the data pointed to by MofData.

InstanceId
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(11)

Identifier of this event instance.

KernelTime
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(9)

Elapsed execution time for kernel-mode instructions, in CPU ticks.

MofData
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(14), Pointer

Pointer to the provider-specific event data.

MofLength
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(15)

Length of the provider-specific event data.

ParentGuid[]
Data type: uint8
Access type: Read-only
Qualifiers: WmiDataId(12), Max(16)

Event trace class GUID of the parent instance.

ParentInstanceId
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(13)

Identifier of the parent instance data.

ReservedHeaderField
Data type: uint16
Access type: Read-only
Qualifiers: WmiDataId(2)

Reserved.

ThreadId
Data type: uint64
Access type: Read-only
Qualifiers: WmiDataId(6), Pointer

Identifies the thread that generated the event.

TimeStamp
Data type: uint64
Access type: Read-only
Qualifiers: WmiDataId(7)

Contains the date and time when the event occurred.

TraceLevel
Data type: uint8
Access type: Read-only
Qualifiers: WmiDataId(4)

Provider-defined value that defines the severity level used to generate the event.

TraceVersion
Data type: uint16
Access type: Read-only
Qualifiers: WmiDataId(5)

Provider-defined version number of the event trace class used to generate the event.

UserTime
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(10)

Elapsed execution time for user-mode instructions, in CPU ticks.

Remarks

Do not use these properties.

Requirements

Minimum supported client

Windows 2000 Professional [desktop apps only]

Minimum supported server

Windows 2000 Server [desktop apps only]

 

 

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft. All rights reserved.