Crate win_etw_metadata

Definitions for metadata used by Event Tracing for Windows.

These definitions are used by the win_etw_macros crate to describe the schema of events. Most applications will not need to use these definitions directly.

Structs

• InFlag
  Defines the input type of a field. In traceloggingprovider.h, this is the ’TlgIn_t` enumerated type.
• Level
  Predefined event tracing levels
• OutFlag
  Specifies how a field should be interpreted or displayed.
• TraceLoggingMetadata
  This structure describes the start of the ETW metadata section. A single static instance of this structure is placed in PE/COFF modules, and it identifies the start of the ETW metadata section. In this implementation, that single instance is ETW_TRACE_LOGGING_METADATA.

Constants

• METADATA_FLAGS_POINTER_WIDTH
  The bit flag which indicates the size of pointers on the target architecture. The value of this constant depends on the target architecture.
• METADATA_MAGIC
  The value stored in TraceLoggingMetadata::magic.
• METADATA_SIGNATURE
  The value stored in TraceLoggingMetadata::signature. In little-endian ASCII, this is “ETW0”.
• METADATA_VERSION
  The version of the metadata emitted. Currently, there is only one version.
• MICROSOFT_EVENTTAG_AGGREGATE
  Event category defined by WIL
• MICROSOFT_EVENTTAG_CORE_DATA
  Event category defined by WIL
• MICROSOFT_EVENTTAG_COSTDEFERRED_LATENCY
  Event category defined by WIL
• MICROSOFT_EVENTTAG_CRITICAL_PERSISTENCE
  Event category defined by WIL
• MICROSOFT_EVENTTAG_DROP_PII
  Event category defined by WIL
• MICROSOFT_EVENTTAG_DROP_PII_EXCEPT_IP
  Event category defined by WIL
• MICROSOFT_EVENTTAG_DROP_USER_IDS
  Event category defined by WIL
• MICROSOFT_EVENTTAG_HASH_PII
  Event category defined by WIL
• MICROSOFT_EVENTTAG_INJECT_XTOKEN
  Event category defined by WIL
• MICROSOFT_EVENTTAG_MARK_PII
  Event category defined by WIL
• MICROSOFT_EVENTTAG_NORMAL_LATENCY
  Event category defined by WIL
• MICROSOFT_EVENTTAG_NORMAL_PERSISTENCE
  Event category defined by WIL
• MICROSOFT_EVENTTAG_REALTIME_LATENCY
  Event category defined by WIL
• MICROSOFT_KEYWORD_CRITICAL_DATA
  Event category for critical data (specified via keyword)
• MICROSOFT_KEYWORD_MEASURES
  Event category for measures (specified via keyword)
• MICROSOFT_KEYWORD_TELEMETRY
  Event category for telemetry (specified via keyword)