Microsoft-Windows-Disk
22 events across 3 channels
| Event ID | Title | Channel |
|---|---|---|
| 1 | Disk Cache Information | Operational |
| 201 | Request servicing time taken by lower driver stack(s). | Analytic |
| 202 | Dispatching a read request. | Diagnose |
| 203 | Dispatching a write request. | Diagnose |
| 204 | Dispatching a read request. | Diagnose |
| 205 | Dispatching a write request. | Diagnose |
| 206 | Dispatching a read request. | Diagnose |
| 207 | Dispatching a write request. | Diagnose |
| 208 | Completing an IO (read/write) request. | Diagnose |
| 209 | Retrying an IO (read/write) request. | Diagnose |
| 210 | Flush request. | Diagnose |
| 211 | Flush request. | Diagnose |
| 212 | Dispatching an IOCTL. | Diagnose |
| 213 | Dispatching a WMI request. | Diagnose |
| 214 | Completing a non-read/write request. | Diagnose |
| 215 | Dispatching a power request. | Diagnose |
| 216 | Completing a power request. | Diagnose |
| 217 | Dispatching a PnP request. | Diagnose |
| 218 | Completing a PnP request. | Diagnose |
| 219 | Completing a PnP enumeration request. | Diagnose |
| 220 | Performing a queue-related operation. | Diagnose |
| 221 | Dispatching a PassThrough request. | Diagnose |
Event ID 1 — Disk Cache Information
Event ID 201 — Request servicing time taken by lower driver stack(s).
Event ID 202 — Dispatching a read request.
Event ID 203 — Dispatching a write request.
Event ID 204 — Dispatching a read request.
Event ID 205 — Dispatching a write request.
Event ID 206 — Dispatching a read request.
Event ID 207 — Dispatching a write request.
Event ID 208 — Completing an IO (read/write) request.
Event ID 209 — Retrying an IO (read/write) request.
Event ID 210 — Flush request.
Event ID 211 — Flush request.
Event ID 212 — Dispatching an IOCTL.
Event ID 213 — Dispatching a WMI request.
Event ID 214 — Completing a non-read/write request.
Description
Completing a non-read/write request.
Message #
Fields #
| Name | Description |
|---|---|
DeviceNumber UInt32 | — |
Irp Pointer | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 215 — Dispatching a power request.
Event ID 216 — Completing a power request.
Description
Completing a power request.
Message #
Fields #
| Name | Description |
|---|---|
DeviceNumber UInt32 | — |
Irp Pointer | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 217 — Dispatching a PnP request.
Event ID 218 — Completing a PnP request.
Description
Completing a PnP request.
Message #
Fields #
| Name | Description |
|---|---|
DeviceNumber UInt32 | — |
Irp Pointer | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 219 — Completing a PnP enumeration request.
Description
Completing a PnP enumeration request.
Message #
Fields #
| Name | Description |
|---|---|
DeviceNumber UInt32 | — |
Irp Pointer | — |
NumberOfChildren UInt32 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 220 — Performing a queue-related operation.
Description
Performing a queue-related operation.
Message #
Fields #
| Name | Description |
|---|---|
DeviceNumber UInt32 | — |
QueueTag HexInt32 | — |
Operation UInt8 | — Known values
|
Status HexInt32 | — NTSTATUS reference |