mirror of
https://github.com/repnz/etw-providers-docs
synced 2026-06-08 17:06:44 +00:00
repnz
78 lines
5.1 KiB
XML
78 lines
5.1 KiB
XML
<instrumentationManifest xmlns="http://schemas.microsoft.com/win/2004/08/events">
|
|
<instrumentation xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events">
|
|
<events>
|
|
<provider name="Microsoft-Windows-FileHistory-Engine" guid="{b447b4de-7780-11e0-ada3-18a90531a85a}" resourceFileName="Microsoft-Windows-FileHistory-Engine" messageFileName="Microsoft-Windows-FileHistory-Engine" symbol="MicrosoftWindowsFileHistoryEngine" source="Xml" >
|
|
<keywords>
|
|
</keywords>
|
|
<tasks>
|
|
<task name="task_0" message="$(string.task_task_0)" value="0"/>
|
|
<task name="UsnJournalScan" message="$(string.task_UsnJournalScan)" value="1"/>
|
|
<task name="BackupOneFile" message="$(string.task_BackupOneFile)" value="2"/>
|
|
<task name="BackupAllFiles" message="$(string.task_BackupAllFiles)" value="3"/>
|
|
<task name="CatalogFlush" message="$(string.task_CatalogFlush)" value="4"/>
|
|
<task name="BackupSizeQuotaChange" message="$(string.task_BackupSizeQuotaChange)" value="5"/>
|
|
<task name="UsnEventProcessing" message="$(string.task_UsnEventProcessing)" value="6"/>
|
|
<task name="ScanAndBackup" message="$(string.task_ScanAndBackup)" value="7"/>
|
|
</tasks>
|
|
<events>
|
|
<event value="1" symbol="UsnJournalScanStart" version="0" task="UsnJournalScan" opcode="win:Start" level="win:Always"/>
|
|
<event value="2" symbol="UsnJournalScanStop" version="0" task="UsnJournalScan" opcode="win:Stop" level="win:Always"/>
|
|
<event value="3" symbol="BackupOneFileStart" version="0" task="BackupOneFile" opcode="win:Start" level="win:Always" template="BackupOneFileStartArgs"/>
|
|
<event value="4" symbol="BackupOneFileStop" version="0" task="BackupOneFile" opcode="win:Stop" level="win:Always" template="BackupOneFileStartArgs"/>
|
|
<event value="5" symbol="BackupAllFilesStart" version="0" task="BackupAllFiles" opcode="win:Start" level="win:Always"/>
|
|
<event value="6" symbol="BackupAllFilesStop" version="0" task="BackupAllFiles" opcode="win:Stop" level="win:Always" template="BackupAllFilesStopArgs"/>
|
|
<event value="7" symbol="CatalogFlushStart" version="0" task="CatalogFlush" opcode="win:Start" level="win:Always"/>
|
|
<event value="8" symbol="CatalogFlushStop" version="0" task="CatalogFlush" opcode="win:Stop" level="win:Always"/>
|
|
<event value="9" symbol="BackupSizeQuotaChange" version="0" task="BackupSizeQuotaChange" level="win:Always" template="BackupSizeQuotaChangeArgs"/>
|
|
<event value="10" symbol="UsnEventProcessingStart" version="0" task="UsnEventProcessing" opcode="win:Start" level="win:Always"/>
|
|
<event value="11" symbol="UsnEventProcessingStop" version="0" task="UsnEventProcessing" opcode="win:Stop" level="win:Always"/>
|
|
<event value="12" symbol="ScanAndBackupStart" version="0" task="ScanAndBackup" opcode="win:Start" level="win:Always"/>
|
|
<event value="13" symbol="ScanAndBackupStop" version="0" task="ScanAndBackup" opcode="win:Stop" level="win:Always"/>
|
|
<event value="100" symbol="task_0" version="0" task="task_0" level="win:Error" template="task_0Args"/>
|
|
<event value="101" symbol="task_0101" version="0" task="task_0" level="win:Error" template="task_0Args"/>
|
|
<event value="102" symbol="task_0102" version="0" task="task_0" level="win:Error" template="task_0102Args"/>
|
|
<event value="103" symbol="task_0103" version="0" task="task_0" level="win:Warning" template="task_0102Args"/>
|
|
<event value="104" symbol="task_0104" version="0" task="task_0" level="win:Warning" template="task_0Args"/>
|
|
<event value="105" symbol="task_0105" version="0" task="task_0" level="win:Informational" template="task_0Args"/>
|
|
</events>
|
|
<templates>
|
|
<template tid="BackupOneFileStartArgs">
|
|
<data name="SourcePath" inType="win:UnicodeString"/>
|
|
<data name="DestPath" inType="win:UnicodeString"/>
|
|
<data name="Size" inType="win:Int64"/>
|
|
</template>
|
|
<template tid="BackupAllFilesStopArgs">
|
|
<data name="TotalSize" inType="win:Int64"/>
|
|
<data name="TotalFiles" inType="win:UInt64"/>
|
|
</template>
|
|
<template tid="BackupSizeQuotaChangeArgs">
|
|
<data name="OldQuota" inType="win:UInt64"/>
|
|
<data name="NewQuota" inType="win:UInt64"/>
|
|
</template>
|
|
<template tid="task_0Args">
|
|
<data name="Path" inType="win:UnicodeString"/>
|
|
</template>
|
|
<template tid="task_0102Args">
|
|
<data name="Path" inType="win:UnicodeString"/>
|
|
<data name="Hr" inType="win:UInt32"/>
|
|
</template>
|
|
</templates>
|
|
</provider>
|
|
</events>
|
|
</instrumentation>
|
|
<localization>
|
|
<resources culture="en-US">
|
|
<stringTable>
|
|
<string id="task_task_0" value="task_0"/>
|
|
<string id="task_UsnJournalScan" value="UsnJournalScan"/>
|
|
<string id="task_BackupOneFile" value="BackupOneFile"/>
|
|
<string id="task_BackupAllFiles" value="BackupAllFiles"/>
|
|
<string id="task_CatalogFlush" value="CatalogFlush"/>
|
|
<string id="task_BackupSizeQuotaChange" value="BackupSizeQuotaChange"/>
|
|
<string id="task_UsnEventProcessing" value="UsnEventProcessing"/>
|
|
<string id="task_ScanAndBackup" value="ScanAndBackup"/>
|
|
</stringTable>
|
|
</resources>
|
|
</localization>
|
|
</instrumentationManifest>
|