Share via


MSFT_EtwTraceProvider class

Represents an Event Tracing for Windows (ETW) trace provider.

The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties.

Syntax

[UMLPackagePath("CIM::Core::CoreElements"), dynamic, provider("EventTracingManagement"), Version("1.0"), AMENDMENT]
class MSFT_EtwTraceProvider : CIM_LogicalElement
{
  string   InstanceID;
  string   Caption;
  string   Description;
  string   ElementName;
  datetime InstallDate;
  uint16   OperationalStatus[];
  string   StatusDescriptions[];
  string   Status;
  uint16   HealthState;
  uint16   CommunicationStatus;
  uint16   DetailedStatus;
  uint16   OperatingStatus;
  uint16   PrimaryStatus;
  string   Name;
  string   Guid;
  string   AutologgerName;
  string   SessionName;
  uint8    Level;
  uint64   MatchAnyKeyword;
  uint64   MatchAllKeyword;
  uint32   Property;
};

Members

The MSFT_EtwTraceProvider class has these types of members:

Properties

The MSFT_EtwTraceProvider class has these properties.

AutologgerName

Data type: string

Access type: Read-only

Qualifiers: key

The name of the autologger configuration for the provider. This property is only specified when the provider is a member of an autologger configuration.

Caption

Data type: string

Access type: Read-only

Qualifiers: MaxLen (64)

A short one-line description of the object.

This property is inherited from CIM_ManagedElement.

CommunicationStatus

Data type: uint16

Access type: Read-only

The ability of the instrumentation to communicate with this element. A NULL value indicates that instrumentation does not support this property.

The possible values are.

Unknown (0)

The instrumentation cannot report on the CommunicationStatus property at this time.

Not Available (1)

The instrumentation is capable of reporting this property, but intentionally does not for this element.

Communication OK (2)

The instrumentation has established communication with the element.

Lost Communication (3)

The element has been contacted in the past, but is currently unreachable.

No Contact (4)

The instrumentation has contact information for this element, but has never been able to communicate with it.

DMTF Reserved

Reserved.

Vendor Reserved

Reserved.

Description

Data type: string

Access type: Read-only

A textual description of the object.

This property is inherited from CIM_ManagedElement.

DetailedStatus

Data type: uint16

Access type: Read-only

Qualifiers: ModelCorrespondence ("CIM_EnabledLogicalElement.PrimaryStatus", "CIM_ManagedSystemElement.HealthState")

Additional status details that complement the PrimaryStatus property. A NULL value indicates that the instrumentation does not support this property.

The possible values are.

Not Available (0)

The instrumentation is capable of reporting this property, but intentionally does not report it for this element.

No Additional Information (1)

No details have to be added to the PrimaryStatus property, for example when the PrimaryStatus is set to OK.

Stressed (2)

The element functions, but requires attention. Overload and overheated are examples of Stressed states.

Predictive Failure (3)

The element functions nominally, but predicts a failure in the near future.

Non-Recoverable Error (4)

The element is in an error condition that requires intervention.

Supporting Entity in Error (5)

An element on which the element depends is in error. This element might be OK but cannot function because of the state of a dependent element. An example is a network service or endpoint that cannot function due to lower-layer networking problems.

DMTF Reserved

Reserved.

Vendor Reserved

Reserved.

ElementName

Data type: string

Access type: Read-only

A user-friendly name for the object. This property allows each instance to define a user-friendly name in addition to its key properties, identity data, and description information.

This property is inherited from CIM_ManagedElement.

Guid

Data type: string

Access type: Read-only

Qualifiers: key

A GUID that uniquely identifies the provider installation.

HealthState

Data type: uint16

Access type: Read-only

The current health of the element. This attribute expresses the health of this element, but not necessarily the health of its subcomponents.

The possible values are.

Unknown (0)

The implementation cannot report on HealthState at this time.

OK (5)

The element is fully functional and operates within normal operational parameters and without error.

Degraded/Warning (10)

The element is in working order, and all functionality is provided. However, the element does not function to the best of its abilities. For example, the element might not operate at optimal performance, or it might report recoverable errors.

Minor failure (15)

All functionality is available, but some functionality might be degraded.

Major failure (20)

The element is failing. It is possible that some or all of the functionality of this component is degraded or does not work.

Critical failure (25)

The element is nonfunctional, and recovery might not be possible.

Non-recoverable error (30)

The element has completely failed, and recovery is not possible. All functionality that this element provides has been lost.

DMTF Reserved

Reserved.

InstallDate

Data type: datetime

Access type: Read-only

When the object was installed. The lack of a value does not indicate that the object is not installed.

InstanceID

Data type: string

Access type: Read-only

Opaquely and uniquely identifies an instance of this class within the scope of the instantiating Namespace.

The value of this property must be unique within the NameSpace.

This property is inherited from CIM_ManagedElement.

Level

Data type: uint8

Access type: Read-only

The maximum event level to capture with the trace events.

MatchAllKeyword

Data type: uint64

Access type: Read-only

A bitmask of flags that further restricts the categories of events to capture, in addition to those specified in the MatchAnyKeyword property.

MatchAnyKeyword

Data type: uint64

Access type: Read-only

A bitmask of flags that indicate the categories of events to capture.

Name

Data type: string

Access type: Read-only

Qualifiers: MaxLen (1024)

The name of the provider

OperatingStatus

Data type: uint16

Access type: Read-only

Qualifiers: ModelCorrespondence ("CIM_EnabledLogicalElement.EnabledState")

The current operational condition of the element. A NULL value indicates that the instrumentation does not support this property.

The possible values are.

Unknown (0)

The instrumentation cannot report on the OperatingStatus property at this time.

Not Available (1)

The instrumentation is capable of reporting this property, but intentionally does not report it for this element.

Servicing (2)

The element is being configured, maintained, cleaned, or otherwise administered.

Starting (3)

The element is being initialized.

Stopping (4)

The element is being brought to an orderly stop.

Stopped (5)

The element is intentionally stopped.

Aborted (6)

The element stopped in an unexpected way.

Dormant (7)

The element is inactive or quiesced.

Completed (8)

The element completed its operation. We recommend using a PrimaryStatus property value of OK, Error, or Degraded to indicate success or failure of the operation.

Migrating (9)

The element is being moved between host elements.

Emigrating (10)

The element is being moved away from the host element.

Immigrating (11)

The element is being moved to a new host element.

Snapshotting (12)

A snapshot copy of the element is being created.

Shutting Down (13)

The element is being brought to an abrupt stop.

In Test (14)

The element is performing test functions.

Transitioning (15)

The element is between states and is not fully available in either state. Use another value that indicates a more specific transition if one is available.

In Service (16)

The element is in service and operational.

DMTF Reserved

Reserved.

Vendor Reserved

Reserved.

OperationalStatus

Data type: uint16 array

Access type: Read-only

Qualifiers: ArrayType ("Indexed"), ModelCorrespondence ("CIM_ManagedSystemElement.StatusDescriptions")

An array that contains indicators of the current status of the element. The first value of the OperationalStatus property should contain the primary status for the element.

Note

The OperationalStatus property replaces the deprecated Status property. Due to the widespread use of the existing Status property in management applications, we strongly recommend that providers or instrumentation provide both the Status and OperationalStatus properties. When instrumented, Status, because it is a single-valued property, should also provide the primary status of the element.

The possible values are.

Unknown (0)

The implementation cannot report on the OperationalStatus property at this time.

Other (1)

An undefined state.

OK (2)

Full functionality without errors.

Degraded (3)

The element is in working order and all functionality is provided. However, the element does not function to the best of its abilities. For example, the element might not operate at optimal performance, or it might report recoverable errors.

Stressed (4)

The element functions, but requires attention. Overload and overheated are examples of Stressed states.

Predictive Failure (5)

The element functions nominally, but predicts a failure in the near future.

Error (6)

An error has occurred.

Non-Recoverable Error (7)

A nonrecoverable error has occurred.

Starting (8)

The job is starting.

Stopping (9)

The job is stopping.

Stopped (10)

The element has been intentionally stopped.

In Service (11)

The element is being configured, maintained, cleaned, or otherwise administered.

No Contact (12)

The monitoring system has information about this element, but has never been able to establish communications with it.

Lost Communication (13)

The monitoring system has successfully contacted this element in the past, but it is currently unavailable.

Aborted (14)

The job stopped in an unexpected way. The state and configuration of the job might require an update.

Dormant (15)

The job is inactive.

Supporting Entity in Error (16)

An element on which this job depends is in error. This element might be OK but cannot function because of the state of a dependent element. An example is a network service or endpoint that cannot function due to lower-layer networking problems.

Completed (17)

The job has completed its operation. This value should be combined with either OK, Error, or Degraded to indicate to a client whether the completed operation Completed with OK and passed, or completed with Error and failed, or completed with Degraded and finished the operation, but did not complete OK or did not report an error.

Power Mode (18)

The element has additional power model information that is contained in the associated power management service.

DMTF Reserved

Reserved.

Vendor Reserved

Reserved.

PrimaryStatus

Data type: uint16

Access type: Read-only

Qualifiers: ModelCorrespondence ("CIM_ManagedSystemElement.DetailedStatus", "CIM_ManagedSystemElement.HealthState")

A high-level status value.

The possible values are.

Unknown (0)

OK (1)

Degraded (2)

Error (3)

DMTF Reserved

4 32767

Vendor Reserved

32768 = *value*

Property

Data type: uint32

Access type: Read-only

A bitmask of property flags that indicate the optional information to include.

The possible values for a trace session are:

0

None.

1

A security identifier (SID).

2

A target specific ID (TSID).

4

A stack trace.

The possible values for an autologging configuration are:

0

None.

1

The user's security identifier (SID).

2

The terminal session identifier.

SessionName

Data type: string

Access type: Read-only

Qualifiers: key

The session name for the provider. This property is only specified when the provider is a member of a session.

Status

Data type: string

Access type: Read-only

Qualifiers: Deprecated ("CIM_ManagedSystemElement.OperationalStatus"), MaxLen (10)

The primary status of the object.

Note

This property is deprecated. It is replaced by the OperationalStatus property. If you choose to use the Status property for backward compatibility, it should be secondary to the OperationalStatus property.

The possible values are.

"OK"

"Error"

"Degraded"

"Unknown"

"Pred Fail"

"Starting"

"Stopping"

"Service"

"Stressed"

"NonRecover"

"No Contact"

"Lost Comm"

"Stopped"

StatusDescriptions

Data type: string array

Access type: Read-only

Qualifiers: ArrayType ("Indexed"), ModelCorrespondence ("CIM_ManagedSystemElement.OperationalStatus")

An array that contains descriptions of the corresponding values in the OperationalStatus array.

Requirements

Minimum supported client
Windows 10 [desktop apps only]
Minimum supported server
Windows Server 2016
Namespace
Root\Microsoft\Windows\EventTracingManagement
MOF
EventTracingManagement.Mof
DLL
EventTracingManagement.dll

See also

CIM_LogicalElement

Event Tracing Management WMI Provider