QueryTraceProcessingHandle function

Queries the system for the trace processing handle.

Syntax


ULONG WINAPI QueryTraceProcessingHandle(
  _In_      TRACEHANDLE                  ProcessingHandle,
  _In_      ETW_PROCESS_HANDLE_INFO_TYPE InformationClass,
  _In_opt_  PVOID                        InBuffer,
  _In_      ULONG                        InBufferSize,
  _Out_opt_ PVOID                        OutBuffer,
  _In_      ULONG                        OutBufferSize,
  _Out_     PULONG                       ReturnLength
);

Parameters

ProcessingHandle [in]

A valid handle created with OpenTrace that the data should be queried from.

InformationClass [in]

An ETW_PROCESS_HANDLE_INFO_TYPE value that specifies what kind of operation will be done on the handle.

InBuffer [in, optional]

Reserved for future use. May be null.

InBufferSize [in]

Size in bytes of the InBuffer.

OutBuffer [out, optional]

Buffer provided by the caller to contain output data.

OutBufferSize [in]

Size in bytes of OutBuffer.

ReturnLength [out]

The size in bytes of the data that the API wrote into OutBuffer. Important for variable length returns.

Return value

If the function succeeds, the return value is ERROR_SUCCESS.

If the function fails, the return value is one of the system error codes.

Requirements

Minimum supported client

Windows 10, version 1709 [desktop apps only]

Minimum supported server

Windows Server 2016 [desktop apps only]

Header

Evntrace.h

Library

AdvAPI32.lib

DLL

AdvAPI32.dll

 

 

Show: