MSFT_WmiCancelNotificationSink class

An instance of the abstract MSFT_WmiCancelNotificationSink class is generated when an event sink is canceled.

The following syntax is simplified from Managed Object Format (MOF) code and includes all inherited properties. Properties and methods are in alphabetic order, not MOF order.

Syntax

class MSFT_WmiCancelNotificationSink : MSFT_WmiEssEvent
{
  uint8  SECURITY_DESCRIPTOR[];
  uint64 TIME_CREATED;
  string Namespace;
  string Query;
  string QueryLanguage;
  uint64 Sink;
  string UserSID[];
};

Members

The MSFT_WmiCancelNotificationSink class has these types of members:

Properties

The MSFT_WmiCancelNotificationSink class has these properties.

Namespace

Data type: string

Access type: Read-only

Namespace in which the event occurred.

Query

Data type: string

Access type: Read-only

The event query asynchronous call which created the sink.

QueryLanguage

Data type: string

Access type: Read-only

Query language used in the Query property. Currently only WMI Query Language (WQL) is supported.

Example: "WQL"

SECURITY_DESCRIPTOR

Data type: uint8 array

Access type: Read-only

Descriptor that the event provider uses to determine which users can receive the event. For more information, see WMI Security Constants.

This property is inherited from __Event.

Sink

Data type: uint64

Access type: Read-only

Pointer to the sink that is canceled.

TIME_CREATED

Data type: uint64

Access type: Read-only

Unique value that indicates the time the event is generated. This is a 64-bit value that represents the number of 100-nanosecond intervals after January 1, 1601. The information is in the Coordinated Universal Time (UTC) format.

For more information about using uint64 values in scripts, see Scripting in WMI.

This property is inherited from __Event.

UserSID

Data type: string array

Access type: Read-only

SID of the user for whom this startup command runs. The User property can be empty but the UserSID can still have a value if the user name cannot be resolved, for example, the case of a deleted user. This property allows distinguishing between commands associated with two different users with unresolved names. The value of UserSID may be NULL when not actually associated with a user. For example, a startup command may exist for "All Users".

Example: "S-1-5-21-1579938362-1064596589-3161144252-1006"

Examples

For an example, see MSFT_WmiRegisterNotificationEvent.

Requirements

Minimum supported client
Windows Vista
Minimum supported server
Windows Server 2008
Namespace
Root\CIMV2
MOF
System.mof
DLL
WmiPrvSD.dll

See also

MSFT_WmiEssEvent

WMI Service Event Troubleshooting Classes

WMI Troubleshooting

WMI Troubleshooting

Monitoring Events