EventTrace class

Article
01/07/2021

An abstract class from which all event trace classes are derived.

The following syntax is simplified from MOF code.

Syntax

[abstract]
class EventTrace
{
  uint16 EventSize;
  uint16 ReservedHeaderField;
  uint8  EventType;
  uint8  TraceLevel;
  uint16 TraceVersion;
  uint64 ThreadId;
  uint64 TimeStamp;
  uint8  EventGuid[];
  uint32 KernelTime;
  uint32 UserTime;
  uint32 InstanceId;
  uint8  ParentGuid[];
  uint32 ParentInstanceId;
  uint32 MofData;
  uint32 MofLength;
};

Members

The EventTrace class has these types of members:

Properties

Properties

The EventTrace class has these properties.

EventGuid

Data type: uint8 array
Access type: Read-only
Qualifiers: WmiDataId (8), Max (16)

Event trace class GUID of this event.

EventSize

Data type: uint16
Access type: Read-only
Qualifiers: WmiDataId (1)

Total number of bytes of the event.

EventType

Data type: uint8
Access type: Read-only
Qualifiers: WmiDataId (3)

Provider-defined event type. Tells you which event type class to use to decipher the provider-defined event data (the data pointed to by MofData.

InstanceId

Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId (11)

Identifier of this event instance.

KernelTime

Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId (9)

Elapsed execution time for kernel-mode instructions, in CPU ticks.

MofData

Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId (14), Pointer

Pointer to the provider-specific event data.

MofLength

Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId (15)

Length of the provider-specific event data.

ParentGuid

Data type: uint8 array
Access type: Read-only
Qualifiers: WmiDataId (12), Max (16)

Event trace class GUID of the parent instance.

ParentInstanceId

Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId (13)

Identifier of the parent instance data.

ReservedHeaderField

Data type: uint16
Access type: Read-only
Qualifiers: WmiDataId (2)

Reserved.

ThreadId

Data type: uint64
Access type: Read-only
Qualifiers: WmiDataId (6), Pointer

Identifies the thread that generated the event.

TimeStamp

Data type: uint64
Access type: Read-only
Qualifiers: WmiDataId (7)

Contains the date and time when the event occurred.

TraceLevel

Data type: uint8
Access type: Read-only
Qualifiers: WmiDataId (4)

Provider-defined value that defines the severity level used to generate the event.

TraceVersion

Data type: uint16
Access type: Read-only
Qualifiers: WmiDataId (5)

Provider-defined version number of the event trace class used to generate the event.

UserTime

Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId (10)

Elapsed execution time for user-mode instructions, in CPU ticks.

Remarks

Do not use these properties.

Requirements

Requirement	Value
Minimum supported client	Windows 2000 Professional [desktop apps only]
Minimum supported server	Windows 2000 Server [desktop apps only]
MOF	Wmi.mof

Share via