Expand description
Definitions for metadata used by Event Tracing for Windows.
These definitions are used by the win_etw_macros crate to describe the schema of events.
Most applications will not need to use these definitions directly.
Structs§
- InFlag
- Defines the input type of a field. In traceloggingprovider.h, this is the ’TlgIn_t` enumerated type.
- Level
- Predefined event tracing levels
- OutFlag
- Specifies how a field should be interpreted or displayed.
- Trace
Logging Metadata - This structure describes the start of the ETW metadata section. A single static instance of
this structure is placed in PE/COFF modules, and it identifies the start of the ETW metadata
section. In this implementation, that single instance is
ETW_TRACE_LOGGING_METADATA.
Constants§
- METADATA_
FLAGS_ POINTER_ WIDTH - The bit flag which indicates the size of pointers on the target architecture. The value of this constant depends on the target architecture.
- METADATA_
MAGIC - The value stored in
TraceLoggingMetadata::magic. - METADATA_
SIGNATURE - The value stored in
TraceLoggingMetadata::signature. In little-endian ASCII, this is “ETW0”. - METADATA_
VERSION - The version of the metadata emitted. Currently, there is only one version.
- MICROSOFT_
EVENTTAG_ AGGREGATE - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ CORE_ DATA - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ COSTDEFERRED_ LATENCY - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ CRITICAL_ PERSISTENCE - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ DROP_ PII - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ DROP_ PII_ EXCEPT_ IP - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ DROP_ USER_ IDS - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ HASH_ PII - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ INJECT_ XTOKEN - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ MARK_ PII - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ NORMAL_ LATENCY - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ NORMAL_ PERSISTENCE - Event category defined by WIL
- MICROSOFT_
EVENTTAG_ REALTIME_ LATENCY - Event category defined by WIL
- MICROSOFT_
KEYWORD_ CRITICAL_ DATA - Event category for critical data (specified via keyword)
- MICROSOFT_
KEYWORD_ MEASURES - Event category for measures (specified via keyword)
- MICROSOFT_
KEYWORD_ TELEMETRY - Event category for telemetry (specified via keyword)