QueryTraceProcessingHandle function

Queries the system for the trace processing handle.

Syntax

ETW_APP_DECLSPEC_DEPRECATED ULONG WMIAPI QueryTraceProcessingHandle(
  TRACEHANDLE                  ProcessingHandle,
  ETW_PROCESS_HANDLE_INFO_TYPE InformationClass,
  PVOID                        InBuffer,
  ULONG                        InBufferSize,
  PVOID                        OutBuffer,
  ULONG                        OutBufferSize,
  PULONG                       ReturnLength
);

Parameters

ProcessingHandle

A valid handle created with OpenTrace that the data should be queried from.

InformationClass

An ETW_PROCESS_HANDLE_INFO_TYPE value that specifies what kind of operation will be done on the handle.

InBuffer

Reserved for future use. May be null.

InBufferSize

Size in bytes of the InBuffer.

OutBuffer

Buffer provided by the caller to contain output data.

OutBufferSize

Size in bytes of OutBuffer.

ReturnLength

The size in bytes of the data that the API wrote into OutBuffer. Important for variable length returns.

Return Value

If the function succeeds, the return value is ERROR_SUCCESS.

If the function fails, the return value is one of the system error codes.

Requirements

   
Minimum supported client Windows 10, version 1709 [desktop apps only]
Minimum supported server Windows Server 2016 [desktop apps only]
Target Platform Windows
Header evntrace.h
Library AdvAPI32.lib
DLL AdvAPI32.dll