EVENT_MAP_ENTRY

EVENT_MAP_ENTRY structure

Defines a single value map entry.

Syntax


typedef struct _EVENT_MAP_ENTRY {
  ULONG OutputOffset;
  union {
    ULONG Value;
    ULONG InputOffset;
  };
} EVENT_MAP_ENTRY, *PEVENT_MAP_ENTRY;

Members

OutputOffset

Offset from the beginning of the EVENT_MAP_INFO structure to a null-terminated Unicode string that contains the string associated with the map value in Value or InputOffset.

Value

If the MapEntryValueType member of EVENT_MAP_INFO is EVENTMAP_ENTRY_VALUETYPE_ULONG, use this member to access the map value.

InputOffset

Offset from the beginning of the EVENT_MAP_INFO structure to the null-terminated Unicode string that contains the map value.

The offset is used for pattern maps and WMI value maps that map strings to strings.

Remarks

For maps defined in a manifest, the string will contain a space at the end of the string. For example, if the value is mapped to "Monday" in the manifest, the string is returned as "Monday ".

Requirements

Minimum supported client

Windows Vista [desktop apps only]

Minimum supported server

Windows Server 2008 [desktop apps only]

Header

Tdh.h

See also

EVENT_MAP_INFO

 

 

Show:
© 2016 Microsoft