InputType Complex Type

Defines an input data type.

<xs:complexType name="InputType">
    <xs:sequence>
        <xs:element name="description"
            type="string"
         />
        <xs:element name="outType"
            type="OutputType"
            minOccurs="0"
            maxOccurs="unbounded"
         />
        <xs:any
            processContents="lax"
            namespace="##other"
         />
    </xs:sequence>
    <xs:attribute name="name"
        type="QName"
        use="required"
     />
    <xs:attribute name="value"
        type="string"
        use="required"
     />
    <xs:attribute name="symbol"
        type="CSymbolType"
        use="required"
     />
</xs:complexType>

Child elements

Element	Type	Description
description	string	A description of the input type.
outType	OutputType	A list of output data types that determine how the data is rendered. You must specify at least one output type. Specify a list if the input type can be rendered as different output types. For example, the input type win:UInt16 can be rendered as an unsigned short, port number, or hexadecimal number. One of the output types that you specify must have the default attribute set to true.

Attributes

Name	Type	Description
name	QName	The name of the input type.
symbol	CSymbolType	The symbol to use to reference the input type in your application. The Message Compiler (MC.exe) uses the symbol to create a constant for the input type in the header file that the compiler generates.
value	string	A numeric identifier that uniquely identifies the input type in a list of input types that you define.

Remarks

The following lists the recognized input types that you can use in your manifest. The types are defined in the \Include\Winmeta.xml file that is included in the Windows SDK. The "Standard XML format" column indicates the canonical type for the specific input type. The "Output type" column lists the possible formats in which the data can be rendered. If you do not specify an output type for the data item, the service will use the first output type listed to render the data. For a description of the output types, see the OutputType complex type.

The following table lists values defined in the Winmeta.xml file.

Input type	Description	Output type
win:AnsiString	A string of 8-bit characters. By default or when used with the xs:string output type, the string is assumed to have been encoded using the event provider s ANSI code page. When used with the win:Xml, win:Json, or win:Utf8 output types, the string is assumed to have been encoded using UTF-8.	xs:string, win:Xml Starting with mc.exe version 10.0.14251 or later: win:Json win:Utf8
win:UnicodeString	A string of 16-bit characters. By default, assumed to have been encoded using UTF-16LE.	xs:string win:Xml Starting with mc.exe version 10.0.14251 or later: win:Json
win:Int8	A signed 8-bit integer. When used with the xs:string output type, this will be treated as a character.	xs:byte Starting with mc.exe version 10.0.14251 or later: xs:string
win:UInt8	An unsigned 8-bit integer. When used with the xs:string output type, this will be treated as a character.	xs:unsignedByte Starting with mc.exe version 10.0.14251 or later: xs:string
win:Int16	A signed 16-bit integer.	xs:short
win:UInt16	An unsigned 16-bit integer. When used with the win:Port output type, the data is treated as big-endian (network byte order). When used with the xs:string output type, this will be treated as a character.	xs:unsignedShort win:Port win:HexInt16 Starting with mc.exe version 10.0.14251 or later: xs:string
win:Int32	A signed 32-bit integer.	xs:int win:HResult
win:UInt32	An unsigned 32-bit integer.	xs:unsignedInt win:PID win:TID win:IPv4 win:ETWTIME win:Win32Error win:NTSTATUS win:HexInt32
win:Int64	A signed 64-bit integer.	xs:long
win:UInt64	An unsigned 64-bit integer.	xs:unsignedLong win:ETWTIME win:HexInt64
win:Float	An IEEE 4-byte floating-point number.	xs:float
win:Double	An IEEE 8-byte floating-point number.	xs:double
win:Boolean	A 32-bit value where 0 is false and 1 is true.	xs:boolean
win:Binary	Binary data of variable size. The size must be specified in the data definition as a constant or a reference to another (integer) data item.For an IP V6 address, the data should be an IN6_ADDR structure. For a socket address, the data should be a SOCKADDR_STORAGE structure. The AF_INET, AF_INET6, and AF_LINK address families are supported. Starting with mc.exe version 10.0.14251 or later, binary data can use output type win:Pkcs7WithTypeInfo. This data should be a PKCS#7 message (e.g. encrypted and/or signed data). The PKCS#7 message may optionally be followed by TraceLogging type information that indicates the type of the inner content. If present, the TraceLogging type information should immediately follow the PKCS#7 message (i.e. the type information is not included within the PKCS#7 content). To specify the input type of the inner content, append one byte with a value from the TlgIn_t enumeration (defined in TraceLoggingProvider.h). To specify the input and output types of the inner content, append one byte with a value from the TlgIn_t enumeration and with the byte s high bit set, and append a second byte with a value from the TlgOut_t enumeration.	xs:hexBinary win:IPv6 win:SocketAddress Starting with mc.exe version 10.0.14251 or later: win:Pkcs7WithTypeInfo
win:GUID	A GUID structure. On output, the GUID is rendered in the registry string form, {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}.	xs:GUID
win:Pointer	An unsigned 32-bit or 64-bit pointer value. The size depends on the architecture of the computer logging the event.	win:HexInt64
win:FILETIME	A FILETIME structure, 8-bytes.	xs:dateTime win:DateTimeCultureInsensitive
win:SYSTEMTIME	A SYSTEMTIME structure, 16-bytes.	xs:dateTime win:DateTimeCultureInsensitive
win:SID	A security identifier (SID) structure that uniquely identifies a user or group. On output, the SID is rendered in string form using the ConvertSidToStringSid function.	xs:string
win:HexInt32	A hexadecimal representation of an unsigned 32-bit integer	win:HexInt32 win:Win32Error win:NTSTATUS
win:HexInt64	A hexadecimal representation of an unsigned 64-bit integer.	win:HexInt64

If you use win:UInt32 to store an IPv4 address, the value must be in network byte order. To convert an IPv4 address string to an unsigned integer in network byte order, call the RtlIpv4StringToAddress or inet_addr function. To convert the unsigned integer to an IPv4 address string, call the RtlIpv4AddressToString or inet_ntoa function.

Requirements

Requirement	Value
Minimum supported client	Windows Vista [desktop apps only]
Minimum supported server	Windows Server 2008 [desktop apps only]