Edit

Share via

CLASSIC_EVENT_ID structure (evntrace.h)

  • Article

Identifies the kernel event for which you want to enable call stack tracing. Used with the TraceStackTracingInfo class of TraceSetInformation.

Syntax

typedef struct _CLASSIC_EVENT_ID {
  GUID  EventGuid;
  UCHAR Type;
  UCHAR Reserved[7];
} CLASSIC_EVENT_ID, *PCLASSIC_EVENT_ID;

Members

EventGuid

The GUID that identifies the kernel event class.

Type

The event type that identifies the event within the kernel event class to enable.

Reserved[7]

Reserved.

Remarks

Useful values for the GUID and Type fields can be determined from consulting the WMI classes in the root\wmi namespace. These values may also be located in wmicore.mof where they are originally defined.

For example, to enable the read event type for disk IO events, set GUID to 3d6fa8d4-fe05-11d0-9dda-00c04fd7ba7c and Type to 10.

Requirements

Requirement Value
Minimum supported client Windows 7 [desktop apps only]
Minimum supported server Windows Server 2008 R2 [desktop apps only]
Header evntrace.h

See also

TraceSetInformation

TRACE_QUERY_INFO_CLASS