EVENT_FILTER_EVENT_ID structure (evntprov.h)
The EVENT_FILTER_EVENT_ID structure defines event IDs used in an EVENT_FILTER_DESCRIPTOR structure for an event ID or stack walk filter.
Syntax
typedef struct _EVENT_FILTER_EVENT_ID {
BOOLEAN FilterIn;
UCHAR Reserved;
USHORT Count;
USHORT Events[ANYSIZE_ARRAY];
} EVENT_FILTER_EVENT_ID, *PEVENT_FILTER_EVENT_ID;
Members
FilterIn
A value that indicates whether filtering should be enabled or disabled for the event IDs passed in the Events member.
When this member is TRUE, filtering is enabled for the specified event IDs. When this member is FALSE, filtering is disabled for the event IDs.
Reserved
A reserved value.
Count
The number of event IDs in the Events member.
Events[ANYSIZE_ARRAY]
An array of event IDs.
Remarks
The EVENT_FILTER_EVENT_ID structure is used in the EVENT_FILTER_DESCRIPTOR structure when the Type member of the EVENT_FILTER_DESCRIPTOR is set to EVENT_FILTER_TYPE_EVENT_ID or EVENT_FILTER_TYPE_STACKWALK. This corresponds to an event ID filter (one of the possible scope filters) or a stack walk filter. The EVENT_FILTER_EVENT_ID structure contains an array of event IDs and a Boolean value that indicates if filtering is enabled or disabled for the specified event IDs.
Requirements
Requirement | Value |
---|---|
Minimum supported client | Windows 8.1 [desktop apps only] |
Minimum supported server | Windows Server 2012 R2 [desktop apps only] |
Header | evntprov.h |