Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

EventTrace class

An abstract class from which all event trace classes are derived.

The following syntax is simplified from MOF code.

Syntax

[abstract]class EventTrace
{
  uint16 EventSize;
  uint16 ReservedHeaderField;
  uint8  EventType;
  uint8  TraceLevel;
  uint16 TraceVersion;
  uint64 ThreadId;
  uint64 TimeStamp;
  uint8  EventGuid[];
  uint32 KernelTime;
  uint32 UserTime;
  uint32 InstanceId;
  uint8  ParentGuid[];
  uint32 ParentInstanceId;
  uint32 MofData;
  uint32 MofLength;
};

Members

The EventTrace class has these types of members:

Properties

The EventTrace class has these properties.

EventGuid[]
Data type: uint8
Access type: Read-only
Qualifiers: WmiDataId(8), Max(16)

Event trace class GUID of this event.

EventSize
Data type: uint16
Access type: Read-only
Qualifiers: WmiDataId(1)

Total number of bytes of the event.

EventType
Data type: uint8
Access type: Read-only
Qualifiers: WmiDataId(3)

Provider-defined event type. Tells you which event type class to use to decipher the provider-defined event data (the data pointed to by MofData.

InstanceId
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(11)

Identifier of this event instance.

KernelTime
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(9)

Elapsed execution time for kernel-mode instructions, in CPU ticks.

MofData
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(14), Pointer

Pointer to the provider-specific event data.

MofLength
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(15)

Length of the provider-specific event data.

ParentGuid[]
Data type: uint8
Access type: Read-only
Qualifiers: WmiDataId(12), Max(16)

Event trace class GUID of the parent instance.

ParentInstanceId
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(13)

Identifier of the parent instance data.

ReservedHeaderField
Data type: uint16
Access type: Read-only
Qualifiers: WmiDataId(2)

Reserved.

ThreadId
Data type: uint64
Access type: Read-only
Qualifiers: WmiDataId(6), Pointer

Identifies the thread that generated the event.

TimeStamp
Data type: uint64
Access type: Read-only
Qualifiers: WmiDataId(7)

Contains the date and time when the event occurred.

TraceLevel
Data type: uint8
Access type: Read-only
Qualifiers: WmiDataId(4)

Provider-defined value that defines the severity level used to generate the event.

TraceVersion
Data type: uint16
Access type: Read-only
Qualifiers: WmiDataId(5)

Provider-defined version number of the event trace class used to generate the event.

UserTime
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(10)

Elapsed execution time for user-mode instructions, in CPU ticks.

Remarks

Do not use these properties.

Requirements

Minimum supported client

Windows 2000 Professional [desktop apps only]

Minimum supported server

Windows 2000 Server [desktop apps only]

MOF

Wmi.mof

 

 

Community Additions

ADD
Show:
© 2015 Microsoft