FileIo_Name class
This class is the event type class for file I/O events.
The following syntax is simplified from MOF code.
[EventType{0, 32, 35, 36}, EventTypeName{"Name", "FileCreate", "FileDelete", "FileRundown"}]
class FileIo_Name : FileIo
{
uint32 FileObject;
string FileName;
};
The FileIo_Name class has these types of members:
The FileIo_Name class has these properties.
-
FileName
-
-
Data type: string
-
Access type: Read-only
-
Qualifiers: WmiDataId(2), StringTermination("NullTerminated"), Format("w")
Full path to the file, not including the drive letter.
-
-
FileObject
-
-
Data type: uint32
-
Access type: Read-only
-
Qualifiers: WmiDataId(1), Pointer
Match the value of this pointer to the FileObject pointer value in a DiskIo_TypeGroup1 event to determine the type of I/O operation.
-
Windows Server 2003: To retrieve the drive letter for the file name path, use the FileObject property value to map to the corresponding DiskIo_TypeGroup1 event. From the DiskIo_TypeGroup1 event, use the DiskNumber and ByteOffset property values to map to the corresponding SystemConfig_LogDisk event (ByteOffset maps to StartOffset). The DriveLetterString property contains the drive letter.
Requirement | Value |
---|---|
Minimum supported client |
Windows Vista [desktop apps only] |
Minimum supported server |
Windows Server 2008 [desktop apps only] |