CORRELATION_VECTOR structure

Store the correlation vector that is used to reference events and the generated logs for diagnostic purposes.

Syntax

typedef struct CORRELATION_VECTOR {
  CHAR Version;
  CHAR Vector[RTL_CORRELATION_VECTOR_STRING_LENGTH];
} CORRELATION_VECTOR;

Members

Version

The version of the correlation vector. Possible values are:

  • RTL_CORRELATION_VECTOR_VERSION_1
  • RTL_CORRELATION_VECTOR_VERSION_2
  • RTL_CORRELATION_VECTOR_VERSION_CURRENT

Vector

An array CHARs that represents the correlation vector.

Requirements

   
Minimum supported client Windows 10, version 1709
Minimum supported server Windows Server 2016
Header ntddk.h