EVENT_FIELD_TYPE Enumeration

Defines the provider information to retrieve.

Syntax

typedef enum _EVENT_FIELD_TYPE {
  EventKeywordInformation,
  EventLevelInformation,
  EventChannelInformation,
  EventTaskInformation,
  EventOpcodeInformation,
  EventInformationMax
} EVENT_FIELD_TYPE;

Constants

EventKeywordInformation Keyword information defined in the manifest. For providers that define themselves using MOF classes, this type returns the enable flags values if the provider class includes the Flags property. For details, see the "Specifying level and enable flags values for a provider" section of Event Tracing MOF Qualifiers.
EventLevelInformation Level information defined in the manifest.
EventChannelInformation Channel information defined in the manifest.
EventTaskInformation Task information defined in the manifest.
EventOpcodeInformation Operation code information defined in the manifest.
EventInformationMax Reserved.

Remarks

If you specify EventOpcodeInformation when calling TdhQueryProviderFieldInformation, you must specify the EventFieldValue parameter as follows:

  • Bits 0 - 15 must contain the task value
  • Bits 16 - 23 must contain the opcode value
You can get the task and opcode values from EVENT_RECORD.EventHeader.EventDescriptor.

WMI MOF class supports retrieving keyword and level information only.

Requirements

   
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2008 [desktop apps only]
Header tdh.h

See Also

PROVIDER_FIELD_INFOARRAY

TdhEnumerateProviderFieldInformation

TdhQueryProviderFieldInformation