EventManifest Schema Elements
The following are the elements that the EventManifest schema defines. This section contains the names of the elements that you use in your manifest; however, to get the details for each element, see the complex type that contains the element.
| Element | Description |
|---|---|
| autoBackup (ChannelLoggingType) | Determines whether to create a new log file when the current log file reaches its maximum size. |
| binary (TemplateItemType) | Contains the binary data that is supplied by the Event Log API. |
| bitMap (MapType) | Defines a list of name/value pairs that map bit values and string values. |
| bufferSize (ChannelPublishingType) | Contains the amount of memory, in kilobytes, allocated for the session buffers. |
| channel (ChannelListType) | Defines a channel to which events can be logged. |
| channels (MetadataType) | Defines a list of channels to which providers can log events. |
| channels (ProviderType) | Defines a list of channels to which providers can log events. |
| clockType (ChannelPublishingType) | The clock resolution to use when logging the time stamp for each event. |
| controlGuid (ChannelPublishingType) | Identifies the session GUID for an ETW session that contains WPP events. |
| data (StructDefinitionType) | Defines a data item that you want to include in the structure. |
| data (TemplateItemType) | Defines a data item that you want to include with the event. |
| description (InputType) | A description of the input type. |
| event (DefinitionType) | Defines an event that your provider can log. |
| event (opcode) | Not available.Windows Server 2008 and Windows Vista: Defines an event for a task-specific opcode. Not available starting with Windows 7. |
| event (TaskEventDefinitionType) | Not available.Windows Server 2008 and Windows Vista: Defines an event for a task-specific event. Not available starting with Windows 7. |
| events (InstrumentationType) | Contains a list of providers that are defined in the manifest. |
| events (ProviderType) | Contains a list of the events that the provider defines. |
| importChannel (ChannelListType) | Identifies a channel that has been defined by another provider. |
| instrumentationManifest | The root node of the manifest. |
| instrumentation (instrumentationManifest) | Defines the types of instrumentation that the manifest contains (for example, event or counter instrumentation). |
| inType (InputTypeListType) | Defines an input data type. |
| inTypes (TypeListType) | Contains a list of input type definitions. |
| keyword (KeywordListType) | Defines a keyword that identifies a category of events. |
| keywords (ChannelPublishingType) | A bitmask that determines the category of events that are written to the channel. |
| keywords (MetadataType) | Defines a list of keywords that categorize events. |
| keywords (ProviderType) | Defines a list of keywords that categorize events. |
| latency (ChannelPublishingType) | The time to wait before flushing the buffers, in milliseconds. |
| level (ChannelPublishingType) | The severity level of the events to write to the channel. |
| level (LevelListType) | Defines a severity value that determines the verbosity of events during logging. |
| levels (MetadataType) | Defines a list of levels that specify the severity of an event. |
| levels (ProviderType) | Defines a list of levels that specify the severity of an event. |
| localization (instrumentationManifest) | Defines a group of localized resources that you reference in your manifest. |
| logging (ChannelType) | Defines the properties of the log file that backs the channel, such as its capacity and whether it is sequential or circular. |
| map (BitMapType) | Defines the mapping between a bit value and a string value. |
| map (PatternMapType) | Defines the regular expressions used to find a matching string in the message string and alter it. |
| map (ValueMapType) | Defines the mapping between an integer value and a string value. |
| maps (ProviderType) | Defines a list of name/value pairs that you can reference in the template section of the manifest. |
| maxBuffers (ChannelPublishingType) | The maximum number of buffers to allocate for the session. |
| maxSize (ChannelLoggingType) | The maximum size, in bytes, of the log file. |
| message (message Table) | Contains a reference to a string in the localization section of the manifest. |
| messageTable (EventsType) Element | Contains a reference to a string in the localization section of the manifest. |
| metadata (instrumentationManifest) | Contains global values that you can reference in other manifests. |
| minBuffers (ChannelPublishingType) | The minimum number of buffers to allocate for the session. |
| namedQueries (MetadataType) | Not used. Defines a list of named queries that query the event message string for a value and perform a specified action if found. |
| namedQueries (ProviderType) | Not used. Defines a list of named queries that query the event message string for a value and perform a specified action if found. |
| opcode (OpcodeListType) | Contains a numeric value that identifies the activity or a point within an activity that the application was performing when it raised the event (for example, initialization or closing). |
| opcode (TaskEventDefinitionType) | Not available.Windows Server 2008 and Windows Vista: Contains a task-specific opcode for an event. All of the opcode definitions are assumed to be task-specific for the task that contains the event definitions. Not available starting with Windows 7. |
| opcodes (MetadataType) | Defines a list of opcodes that you can use to group events within a task. |
| opcodes (ProviderType) | Defines a list of opcodes that you can use to group events within a task. |
| opcodes (TaskType) | Defines a list of task-specific opcodes. |
| outType (InputType) | A list of output data types that determine how the data is rendered. |
| patternMap (PatternMapListType) | Defines a mapping between two regular expressions. One expression is used to find a matching string in the message string, and the other is used to alter the string before the service places it back in the message string. |
| patternMaps (NamedQueryType) | Defines a list of regular expression pairs that are used to alter the message string. |
| provider (EventsType) | Defines a provider and the metadata that it uses to define its events. |
| publishing (ChannelType) | Defines the logging properties for the session that the channel uses. |
| resources (LocalizationType) | Defines a group of string tables that contain the localized strings that you reference in your manifest. |
| retention (ChannelLoggingType) | Determines whether the log file is a sequential or circular log file. |
| sidType (ChannelPublishingType) | Determines whether to include a security identifier (SID) of the principal with each event written to the channel. |
| string (StringTableType) | Defines a localized string. |
| stringTable (LocalizationType) | Defines a list of localized strings that you can reference in your manifest. |
| stringTable (resources) | Defines a list of localized strings that you can reference in your manifest. |
| struct (TemplateItemType) | Defines a structure that includes one or more data items that you want to include with the event. |
| task (DefinitionType) | Not available.Windows Server 2008 and Windows Vista: Defines a task-specific event that your provider can log. Not available starting with Windows 7. |
| task (TaskListType) | Defines a component or subcomponent of an application. |
| tasks (ProviderType) | Defines a list of tasks that a provider can use to group events. |
| template (TemplateListType) | A template that defines the data to include with an event. |
| templates (ProviderType) | Defines a list of templates that specify the data to include with the events. |
| types (MetadataType) | Defines a list of XML types. |
| UserData (TemplateItemType) | An XML fragment that is used to render the event data. |
| valueMap (MapType) | Defines a list of name/value pairs that map integer values and string values. |
| xmlType (XmlTypeListType) | Defines an XML type. |
| xmlTypes (TypeListType) | Defines a list of output types that the service uses to determine how to render an input data type. |
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for