mirror of
https://github.com/repnz/etw-providers-docs
synced 2026-06-08 17:06:44 +00:00
74 lines
3.8 KiB
XML
74 lines
3.8 KiB
XML
<instrumentationManifest xmlns="http://schemas.microsoft.com/win/2004/08/events">
|
|
<instrumentation xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events">
|
|
<events>
|
|
<provider name="Microsoft-Windows-RPC-Events" guid="{f4aed7c7-a898-4627-b053-44a7caa12fcd}" resourceFileName="Microsoft-Windows-RPC-Events" messageFileName="Microsoft-Windows-RPC-Events" symbol="MicrosoftWindowsRPCEvents" source="Xml" >
|
|
<keywords>
|
|
</keywords>
|
|
<tasks>
|
|
<task name="task_0" message="$(string.task_task_0)" value="0"/>
|
|
</tasks>
|
|
<events>
|
|
<event value="2" symbol="task_0" version="0" task="task_0" level="win:Error" template="task_0Args"/>
|
|
<event value="3" symbol="task_03" version="0" task="task_0" level="win:Error" template="task_0Args"/>
|
|
<event value="4" symbol="task_04" version="0" task="task_0" level="win:Error" template="task_04Args"/>
|
|
<event value="5" symbol="task_05" version="0" task="task_0" level="win:Error" template="task_0Args"/>
|
|
<event value="6" symbol="task_06" version="0" task="task_0" level="win:Error" template="task_06Args"/>
|
|
<event value="7" symbol="task_07" version="0" task="task_0" level="win:Error" template="task_0Args"/>
|
|
<event value="8" symbol="task_08" version="0" task="task_0" level="win:Error" template="task_08Args"/>
|
|
<event value="9" symbol="task_09" version="0" task="task_0" level="win:Warning" template="task_09Args"/>
|
|
<event value="10" symbol="task_010" version="0" task="task_0" level="win:Error" template="task_010Args"/>
|
|
<event value="11" symbol="task_011" version="0" task="task_0" level="win:Warning" template="task_011Args"/>
|
|
</events>
|
|
<templates>
|
|
<template tid="task_0Args">
|
|
<data name="ApplicationName" inType="win:UnicodeString"/>
|
|
<data name="ProcessId" inType="win:HexInt32"/>
|
|
<data name="RPCProtocolSequence" inType="win:UnicodeString"/>
|
|
<data name="InterfaceGUID" inType="win:GUID"/>
|
|
</template>
|
|
<template tid="task_04Args">
|
|
<data name="ApplicationName" inType="win:UnicodeString"/>
|
|
<data name="ProcessId" inType="win:HexInt32"/>
|
|
</template>
|
|
<template tid="task_06Args">
|
|
<data name="ApplicationName" inType="win:UnicodeString"/>
|
|
<data name="ProcessId" inType="win:HexInt32"/>
|
|
<data name="RPCProtocolSequence" inType="win:UnicodeString"/>
|
|
</template>
|
|
<template tid="task_08Args">
|
|
<data name="ApplicationName" inType="win:UnicodeString"/>
|
|
<data name="ProcessId" inType="win:HexInt32"/>
|
|
<data name="RPCProtocolSequence" inType="win:UnicodeString"/>
|
|
<data name="RPCEndpoint" inType="win:UnicodeString"/>
|
|
<data name="InterfaceGUID" inType="win:GUID"/>
|
|
<data name="RPCStatus" inType="win:HexInt32"/>
|
|
</template>
|
|
<template tid="task_09Args">
|
|
<data name="ApplicationName" inType="win:UnicodeString"/>
|
|
<data name="ProcessId" inType="win:UnicodeString"/>
|
|
</template>
|
|
<template tid="task_010Args">
|
|
<data name="ApplicationName" inType="win:UnicodeString"/>
|
|
<data name="ProcessId" inType="win:UnicodeString"/>
|
|
<data name="ExpectedInterfaceID" inType="win:UnicodeString"/>
|
|
<data name="ReceivedInterfaceID" inType="win:UnicodeString"/>
|
|
</template>
|
|
<template tid="task_011Args">
|
|
<data name="ApplicationName" inType="win:UnicodeString"/>
|
|
<data name="ProcessId" inType="win:UnicodeString"/>
|
|
<data name="InterfaceId" inType="win:GUID"/>
|
|
<data name="Method" inType="win:Int32"/>
|
|
</template>
|
|
</templates>
|
|
</provider>
|
|
</events>
|
|
</instrumentation>
|
|
<localization>
|
|
<resources culture="en-US">
|
|
<stringTable>
|
|
<string id="task_task_0" value="task_0"/>
|
|
</stringTable>
|
|
</resources>
|
|
</localization>
|
|
</instrumentationManifest>
|