FileIo_Name class

This class is the event type class for file I/O events.

The following syntax is simplified from MOF code.

Syntax

[EventType{0, 32, 35, 36}, EventTypeName{"Name", "FileCreate", "FileDelete", "FileRundown"}]
class FileIo_Name : FileIo
{
  uint32 FileObject;
  string FileName;
};

Members

The FileIo_Name class has these types of members:

• Properties

Properties

The FileIo_Name class has these properties.

FileName

Data type: string

Access type: Read-only

Qualifiers: WmiDataId(2), StringTermination("NullTerminated"), Format("w")

Full path to the file, not including the drive letter.

FileObject

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(1), Pointer

Match the value of this pointer to the FileObject pointer value in a DiskIo_TypeGroup1 event to determine the type of I/O operation.

Remarks

Windows Server 2003: To retrieve the drive letter for the file name path, use the FileObject property value to map to the corresponding DiskIo_TypeGroup1 event. From the DiskIo_TypeGroup1 event, use the DiskNumber and ByteOffset property values to map to the corresponding SystemConfig_LogDisk event (ByteOffset maps to StartOffset). The DriveLetterString property contains the drive letter.

Requirements

See also

FileIo