EventTrace class

An abstract class from which all event trace classes are derived.

The following syntax is simplified from MOF code.

Syntax

[abstract]class EventTrace
{
  uint16 EventSize;
  uint16 ReservedHeaderField;
  uint8  EventType;
  uint8  TraceLevel;
  uint16 TraceVersion;
  uint64 ThreadId;
  uint64 TimeStamp;
  uint8  EventGuid[];
  uint32 KernelTime;
  uint32 UserTime;
  uint32 InstanceId;
  uint8  ParentGuid[];
  uint32 ParentInstanceId;
  uint32 MofData;
  uint32 MofLength;
};

Members

The EventTrace class has these types of members:

• Properties

Properties

The EventTrace class has these properties.

EventGuid[]

Data type: uint8

Access type: Read-only

Qualifiers: WmiDataId(8), Max(16)

Event trace class GUID of this event.

EventSize

Data type: uint16

Access type: Read-only

Qualifiers: WmiDataId(1)

Total number of bytes of the event.

EventType

Data type: uint8

Access type: Read-only

Qualifiers: WmiDataId(3)

Provider-defined event type. Tells you which event type class to use to decipher the provider-defined event data (the data pointed to by MofData.

InstanceId

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(11)

Identifier of this event instance.

KernelTime

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(9)

Elapsed execution time for kernel-mode instructions, in CPU ticks.

MofData

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(14), Pointer

Pointer to the provider-specific event data.

MofLength

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(15)

Length of the provider-specific event data.

ParentGuid[]

Data type: uint8

Access type: Read-only

Qualifiers: WmiDataId(12), Max(16)

Event trace class GUID of the parent instance.

ParentInstanceId

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(13)

Identifier of the parent instance data.

ReservedHeaderField

Data type: uint16

Access type: Read-only

Qualifiers: WmiDataId(2)

Reserved.

ThreadId

Data type: uint64

Access type: Read-only

Qualifiers: WmiDataId(6), Pointer

Identifies the thread that generated the event.

TimeStamp

Data type: uint64

Access type: Read-only

Qualifiers: WmiDataId(7)

Contains the date and time when the event occurred.

TraceLevel

Data type: uint8

Access type: Read-only

Qualifiers: WmiDataId(4)

Provider-defined value that defines the severity level used to generate the event.

TraceVersion

Data type: uint16

Access type: Read-only

Qualifiers: WmiDataId(5)

Provider-defined version number of the event trace class used to generate the event.

UserTime

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(10)

Elapsed execution time for user-mode instructions, in CPU ticks.

Remarks

Do not use these properties.

Requirements

Send comments about this topic to Microsoft

Build date: 12/4/2012