EVENT_FIELD_TYPE enumeration (tdh.h)

Defines the provider information to retrieve.

Syntax

typedef enum _EVENT_FIELD_TYPE {
  EventKeywordInformation = 0,
  EventLevelInformation,
  EventChannelInformation,
  EventTaskInformation,
  EventOpcodeInformation,
  EventInformationMax
} EVENT_FIELD_TYPE;

Constants

EventKeywordInformation Value: 0 Keyword information defined in the manifest. For providers that define themselves using MOF classes, this type returns the enable flags values if the provider class includes the Flags property. For details, see the "Specifying level and enable flags values for a provider" section of Event Tracing MOF Qualifiers.
EventLevelInformation Level information defined in the manifest.
EventChannelInformation Channel information defined in the manifest.
EventTaskInformation Task information defined in the manifest.
EventOpcodeInformation Operation code information defined in the manifest.
EventInformationMax Reserved.

Remarks

If you specify EventOpcodeInformation when calling TdhQueryProviderFieldInformation, you must specify the EventFieldValue parameter as follows:

• Bits 0 - 15 must contain the task value
• Bits 16 - 23 must contain the opcode value

You can get the task and opcode values from EVENT_RECORD.EventHeader.EventDescriptor.

WMI MOF class supports retrieving keyword and level information only.

Requirements

Requirement	Value
Minimum supported client	Windows Vista [desktop apps only]
Minimum supported server	Windows Server 2008 [desktop apps only]
Header	tdh.h

See also

PROVIDER_FIELD_INFOARRAY

TdhEnumerateProviderFieldInformation

TdhQueryProviderFieldInformation