TdhGetWppMessage function

Retrieves the formatted WPP message embedded into an EVENT_RECORD structure.

Syntax

TDHSTATUS TdhGetWppMessage(
  TDH_HANDLE    Handle,
  PEVENT_RECORD EventRecord,
  PULONG        BufferSize,
  PBYTE         Buffer
);

Parameters

Handle

Type: TDH_HANDLE

A valid decoding handle.

EventRecord

Type: PEVENT_RECORD

The event record passed to your EventRecordCallback callback.

BufferSize

Type: PULONG

Size of the Buffer parameter, in bytes.

Buffer

Type: PBYTE

User-allocated buffer that receives the property data.

Return Value

Type: ULONG

Returns ERROR_SUCCESS if successful. Otherwise, this function returns one of the following return codes in addition to others.

Return code Description
ERROR_NOT_FOUND
The specified property was not found.
ERROR_INSUFFICIENT_BUFFER
BufferSize is too small. To get the required buffer size, call TdhGetPropertySize.
ERROR_INVALID_PARAMETER
One or more of the parameters is not valid.

Remarks

To retrieve a specific property instead of the decoded event message without specifying a property name, call TdhGetWppProperty.

Requirements

   
Minimum supported client Windows 8 [desktop apps only]
Minimum supported server Windows Server 2012 [desktop apps only]
Target Platform Windows
Header tdh.h
Library Tdh.lib
DLL Tdh.dll

See Also

EVENT_RECORD

EventRecordCallback

TdhGetPropertySize

TdhGetWppProperty