EVT_CHANNEL_CLOCK_TYPE enumeration (winevt.h)
Defines the values that specify the type of time stamp to use when logging events channel.
Syntax
typedef enum _EVT_CHANNEL_CLOCK_TYPE {
EvtChannelClockTypeSystemTime = 0,
EvtChannelClockTypeQPC
} EVT_CHANNEL_CLOCK_TYPE;
Constants
EvtChannelClockTypeSystemTime Value: 0 Uses the system time for the time stamp. The system time provides a low-resolution (10 milliseconds) time stamp but is comparatively less expensive to retrieve. System time is the default. Note that if the volume of events is high, the resolution for system time may not be fine enough to determine the sequence of events. If multiple events contain the same time stamp, the events may be delivered in the wrong order. |
EvtChannelClockTypeQPC Uses the query performance counter (QPC) for the time stamp. The QPC time stamp provides a high-resolution (100 nanoseconds) time stamp but is comparatively more expensive to retrieve. You should use this resolution if you have high event rates or if the consumer merges events from different buffers. Note that on older computers, the time stamp may not be accurate because the counter sometimes skips forward due to hardware errors. |
Requirements
Requirement | Value |
---|---|
Minimum supported client | Windows Vista [desktop apps only] |
Minimum supported server | Windows Server 2008 [desktop apps only] |
Header | winevt.h |
See also
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for