Edit

Share via

QueryTraceProcessingHandle function (evntrace.h)

  • Article

Retrieves information about an ETW trace processing session opened by OpenTrace.

Syntax

ETW_APP_DECLSPEC_DEPRECATED ULONG WMIAPI QueryTraceProcessingHandle(
  [in]            PROCESSTRACE_HANDLE          ProcessingHandle,
  [in]            ETW_PROCESS_HANDLE_INFO_TYPE InformationClass,
  [in, optional]  PVOID                        InBuffer,
  [in]            ULONG                        InBufferSize,
  [out, optional] PVOID                        OutBuffer,
  [in]            ULONG                        OutBufferSize,
  [out]           PULONG                       ReturnLength
);

Parameters

[in] ProcessingHandle

A valid handle created with OpenTrace that the data should be queried from.

[in] InformationClass

An ETW_PROCESS_HANDLE_INFO_TYPE value that specifies what kind of operation will be done on the handle.

[in, optional] InBuffer

Reserved for future use. May be null.

[in] InBufferSize

Size in bytes of the InBuffer.

[out, optional] OutBuffer

Buffer provided by the caller to receive output data.

[in] OutBufferSize

Size in bytes of OutBuffer.

[out] ReturnLength

The size in bytes of the data that the API wrote into OutBuffer. Used for variable length returns.

Return value

If the function succeeds, the return value is ERROR_SUCCESS.

If the function fails, the return value is one of the system error codes.

Requirements

Requirement Value
Minimum supported client Windows 10, version 1709
Minimum supported server Windows Server, version 1709
Target Platform Windows
Header evntrace.h
Library AdvAPI32.lib
DLL AdvAPI32.dll