CORRELATION_VECTOR structure (ntddk.h)
Store the correlation vector that is used to reference events and the generated logs for diagnostic purposes.
Syntax
typedef struct CORRELATION_VECTOR {
CHAR Version;
CHAR Vector[RTL_CORRELATION_VECTOR_STRING_LENGTH];
} CORRELATION_VECTOR;
Members
Version
The version of the correlation vector. Possible values are:
- RTL_CORRELATION_VECTOR_VERSION_1
- RTL_CORRELATION_VECTOR_VERSION_2
- RTL_CORRELATION_VECTOR_VERSION_CURRENT
Vector[RTL_CORRELATION_VECTOR_STRING_LENGTH]
An array CHARs that represents the correlation vector.
Requirements
Requirement | Value |
---|---|
Minimum supported client | Windows 10, version 1709 |
Minimum supported server | Windows Server 2016 |
Header | ntddk.h |