Interface Winevt.EVT_EVENT_METADATA_PROPERTY_ID

Enclosing interface:
Winevt

public static interface Winevt.EVT_EVENT_METADATA_PROPERTY_ID
Defines the identifiers that identify the metadata properties of an event definition.
See Also:
  • Field Details

    • EventMetadataEventID

      static final int EventMetadataEventID
      Identifies the value attribute of the event definition. The variant type for this property is EvtVarTypeUInt32.
      See Also:
    • EventMetadataEventVersion

      static final int EventMetadataEventVersion
      Identifies the version attribute of the event definition. The variant type for this property is EvtVarTypeUInt32.
      See Also:
    • EventMetadataEventChannel

      static final int EventMetadataEventChannel
      Identifies the channel attribute of the event definition. The variant type for this property is EvtVarTypeUInt32. This property does not contain the channel identifier that you specified in the event definition but instead contains the value attribute of the channel. The value is zero if the event definition does not specify a channel.
      See Also:
    • EventMetadataEventLevel

      static final int EventMetadataEventLevel
      Identifies the level attribute of the event definition. The variant type for this property is EvtVarTypeUInt32. This property does not contain the level name that you specified in the event definition but instead contains the value attribute of the level. The value is zero if the event definition does not specify a level.
      See Also:
    • EventMetadataEventOpcode

      static final int EventMetadataEventOpcode
      Identifies the opcode attribute of the event definition. The variant type for this property is EvtVarTypeUInt32. This property does not contain the opcode name that you specified in the event definition but instead contains the value attribute of the opcode. The value is zero if the event definition does not specify an opcode.
      See Also:
    • EventMetadataEventTask

      static final int EventMetadataEventTask
      dentifies the task attribute of the event definition. The variant type for this property is EvtVarTypeUInt32. This property does not contain the task name that you specified in the event definition but instead contains the value attribute of the task. The value is zero if the event definition does not specify a task.
      See Also:
    • EventMetadataEventKeyword

      static final int EventMetadataEventKeyword
      Identifies the keyword attribute of the event definition. The variant type for this property is EvtVarTypeUInt64. This property does not contain the list of keyword names that you specified in the event definition but instead contains a 64-bitmask of all the keywords. The top 16 bits of the mask are reserved for internal use and should be ignored when determining the keyword bits that the event definition set.
      See Also:
    • EventMetadataEventMessageID

      static final int EventMetadataEventMessageID
      Identifies the message attribute of the event definition. The variant type for this property is EvtVarTypeUInt32. The property contains the resource identifier that is assigned to the message string. To get the message string, call the EvtFormatMessage function. If the event definition does not specify a message, the value is -1.
      See Also:
    • EventMetadataEventTemplate

      static final int EventMetadataEventTemplate
      Identifies the template attribute of the event definition. The variant type for this property is EvtVarTypeString. This property does not contain the template name that you specified in the event definition but instead contains an XML string that includes the template node and each data node; the string does not include the UserData. The value is an empty string if the event definition does not specify a template.
      See Also:
    • EvtEventMetadataPropertyIdEND

      static final int EvtEventMetadataPropertyIdEND
      This enumeration value marks the end of the enumeration values.
      See Also: