2.2.5.4 AccountingProcessList Element

The AccountingProcessList XML element is used to specify a list of accounting processes and their properties. These properties correspond to data items in the accounting database. See section 3.2.1.2 for descriptions of these data items.

 <xs:element name="AccountingProcessList">
   <xs:complexType>
     <xs:choice
       minOccurs="0"
       maxOccurs="unbounded"
     >
       <xs:element name="Process">
         <xs:complexType name="Process">
           <xs:sequence>
             <xs:element name="EventType"
               type="xs:string"
               minOccurs="0"
              />
             <xs:element name="UserModeTime"
               type="xs:unsignedLong"
               minOccurs="0"
              />
             <xs:element name="KernelModeTime"
               type="xs: unsignedLong"
               minOccurs="0"
              />
             <xs:element name="ReadOperationCount"
               type="xs: unsignedLong"
               minOccurs="0"
              />
             <xs:element name="WriteOperationCount"
               type="xs: unsignedLong"
               minOccurs="0"
              />
             <xs:element name="OtherOperationCount"
               type="xs: unsignedLong"
               minOccurs="0"
              />
             <xs:element name="ReadTransferCount"
               type="xs: unsignedLong"
               minOccurs="0"
              />
             <xs:element name="WriteTransferCount"
               type="xs: unsignedLong"
               minOccurs="0"
              />
             <xs:element name="OtherTransferCount"
               type="xs: unsignedLong"
               minOccurs="0"
              />
             <xs:element name="WorkingSetSize"
               type="xs: unsignedLong"
               minOccurs="0"
              />
             <xs:element name="VirtualSize"
               type="xs:double"
               minOccurs="0"
              />
             <xs:element name="PrivatePageCount"
               type="xs: unsignedLong"
               minOccurs="0"
              />
             <xs:element name="ImageName"
               type="xs:string"
               minOccurs="0"
              />
             <xs:element name="ResourceGroupName"
               type="xs:string"
               minOccurs="0"
              />
             <xs:element name="UserName"
               type="xs:string"
               minOccurs="0"
              />
             <xs:element name="DomainName"
               type="xs:string"
               minOccurs="0"
              />
             <xs:element name="ImagePath"
               type="xs:string"
               minOccurs="0"
              />
             <xs:element name="ProcessCommandLine"
               type="xs:string"
               minOccurs="0"
              />
             <xs:element name="PolicyName"
               type="xs:string"
               minOccurs="0"
              />
             <xs:element name="CreationTime"
               type="xs:unsignedLong"
               minOccurs="0"
              />
             <xs:element name="CreationSystemTime"
               type="xs:unsignedLong"
               minOccurs="0"
              />
             <xs:element name="PolicySetTime"
               type="xs:unsignedLong"
               minOccurs="0"
              />
             <xs:element name="ProcessId"
               type="xs:unsignedInt"
               minOccurs="0"
              />
             <xs:element name="ParentProcessId"
               type="xs: unsignedInt"
               minOccurs="0"
              />
             <xs:element name="SessionId"
               type="xs: unsignedInt"
               minOccurs="0"
              />
             <xs:element name="ThreadCount"
               type="xs: unsignedInt"
               minOccurs="0"
              />
             <xs:element name="PageFaultCount"
               type="xs: unsignedInt"
               minOccurs="0"
              />
             <xs:element name="PageFileUsage"
               type="xs: unsignedInt"
               minOccurs="0"
              />
             <xs:element name="PeakPageFileUsage"
               type="xs: unsignedInt"
               minOccurs="0"
              />
             <xs:element name="QuotaNonPagedPoolUsage"
               type="xs: unsignedInt"
               minOccurs="0"
              />
             <xs:element name="QuotaPagedPoolUsage"
               type="xs: unsignedInt"
               minOccurs="0"
              />
             <xs:element name="QuotaPeakNonPagedPoolUsage"
               type="xs: unsignedInt"
               minOccurs="0"
              />
             <xs:element name="QuotaPeakPagedPoolUsage"
               type="xs: unsignedInt"
               minOccurs="0"
              />
           </xs:sequence>
         </xs:complexType>
       </xs:element>
     </xs:choice>
   </xs:complexType>
 </xs:element>

Child Elements

Element

Type

Description

Process

Process

A specification of the properties of an accounting process.

EventType

xs:string

A string that specifies the event upon which properties of a process are recorded. The string can be "C" for process creation, "D" for process termination, and "L" for regular logging.

UserModeTime

xs:unsignedLong

A 64-bit unsigned integer value that specifies the length of time, in 100-nanosecond units, the process has executed in user mode.

KernelModeTime

xs: unsignedLong

A 64-bit unsigned integer value that specifies the length of time, in 100-nanosecond units, the process has executed in kernel mode.

ReadOperationCount

xs: unsignedLong

A 64-bit unsigned integer value that specifies the number of read operations that have been performed by the process.

WriteOperationCount

xs: unsignedLong

A 64-bit unsigned integer value that specifies the number of write operations that have been performed by the process.

OtherOperationCount

xs: unsignedLong

A 64-bit unsigned integer value that specifies the number of non-read and non-write operations that have been performed by the process.

ReadTransferCount

xs: unsignedLong

A 64-bit unsigned integer value that specifies the amount of data, in bytes, that has been read by the process.

WriteTransferCount

xs: unsignedLong

A 64-bit unsigned integer value that specifies the amount of data, in bytes, that has been written by the process.

OtherTransferCount

xs: unsignedLong

A 64-bit unsigned integer value that specifies the amount of data, in bytes, that has been transferred by the process.

WorkingSetSize

xs: unsignedLong

A 64-bit unsigned integer value that specifies the working set size, in bytes, for the process.

VirtualSize

xs:double

A 64-bit unsigned integer value that specifies the size of virtual memory, in bytes, for the process.

PrivatePageCount

xs: unsignedLong

A 64-bit unsigned integer value that specifies the number of private memory pages used by the process.

ImageName

xs:string

A string that specifies the image name associated with the process.

ResourceGroupName

xs:string

A string that specifies the resource group name associated with the process.

UserName

xs:string

A string that specifies the user name associated with the process.

DomainName

xs:string

A string that specifies the domain name associated with the process.

ImagePath

xs:string

A string that specifies the image path.

ProcessCommandLine

xs:string

A string that specifies the contents of the command line for invoking the process.

PolicyName

xs:string

A string that specifies the name of the resource allocation policy (RAP) associated with the process.

CreationTime

xs:unsignedLong

A 64-bit unsigned integer that specifies the creation time of the process. Its lower 32 bits represent the dwLowDateTime field, and its higher 32 bits represent the dwHighDateTime field of the FILETIME structure as specified in [MS-DTYP] section 2.3.3.

CreationSystemTime

xs:unsignedLong

A 64-bit unsigned integer that specifies the time the data was entered into the database. Its lower 32 bits represent the dwLowDateTime field, and its higher 32 bits represent the dwHighDateTime field of the FILETIME structure as specified in [MS-DTYP] section 2.3.3.

PolicySetTime

xs:unsignedLong

A 64-bit unsigned integer that specifies the time that the RAP was set as the current resource policy. Its lower 32 bits represent the dwLowDateTime field, and its higher 32 bits represent the dwHighDateTime field of the FILETIME structure as specified in [MS-DTYP] section 2.3.3.

ProcessId

xs:unsignedInt

A 32-bit integer value that uniquely distinguishes a process while it runs.

ParentProcessId

xs: unsignedInt

A 32-bit integer value that specifies the <ProcessId> of the parent process.

SessionId

xs: unsignedInt

A 32-bit integer value that specifies the identifier of the session to which this process belongs.

ThreadCount

xs: unsignedInt

A 32-bit integer value that specifies the number of active threads for the process.

PageFaultCount

xs: unsignedInt

A 32-bit integer value that specifies the number of page faults generated by the process.

PageFileUsage

xs: unsignedInt

A 32-bit integer value that specifies the amount of the page file, in kilobytes, used by the process.

PeakPageFileUsage

xs: unsignedInt

A 32-bit integer value that specifies the maximum usage of the page file, in kilobytes, by the process.

QuotaNonPagedPoolUsage

xs: unsignedInt

A 32-bit integer value that specifies the quota amount of non-paged pool usage, in kilobytes, for the process.

QuotaPagedPoolUsage

xs: unsignedInt

A 32-bit integer value that specifies the quota amount of paged pool usage, in kilobytes, for the process.

QuotaPeakNonPagedPoolUsage

xs: unsignedInt

A 32-bit integer value that specifies the maximum quota amount of non-paged pool usage, in kilobytes, for the process.

QuotaPeakPagedPoolUsage

xs: unsignedInt

A 32-bit integer value that specifies the maximum quota amount of non-paged pool usage, in kilobytes, for the process.

Additional XML data formats are specified in section 2.2.5.