Microsoft-Windows-VIRTDISK

10 events across 1 channel

Event IDTitleChannel
1Opening backing store VhdFileName as type VhdVirtualStorageType.Microsoft-Windows-VIRTDISK-Analytic
2Opened backing store, returning handle VhdHandle, status VhdStatus.Microsoft-Windows-VIRTDISK-Analytic
3Attaching using handle VhdHandle.Microsoft-Windows-VIRTDISK-Analytic
4Attached with status VhdStatus.Microsoft-Windows-VIRTDISK-Analytic
5Detaching using handle VhdHandle.Microsoft-Windows-VIRTDISK-Analytic
6Detached with status VhdStatus.Microsoft-Windows-VIRTDISK-Analytic
1000TraceData.Microsoft-Windows-VIRTDISK-Analytic
1001TraceData.Microsoft-Windows-VIRTDISK-Analytic
1002TraceData.Microsoft-Windows-VIRTDISK-Analytic
1003TraceData.Microsoft-Windows-VIRTDISK-Analytic

Event ID 1 — Opening backing store VhdFileName as type VhdVirtualStorageType.

Provider
Microsoft-Windows-VIRTDISK
Channel
Microsoft-Windows-VIRTDISK-Analytic
Task
Openvirtualdisk.
Opcode
Start

Description

Opening backing store VhdFileName as type VhdVirtualStorageType.

Message #

Opening backing store %1 as type %2.

Fields #

NameDescription
VhdFileName UnicodeString
VhdVirtualStorageType UInt32

Event ID 2 — Opened backing store, returning handle VhdHandle, status VhdStatus.

Provider
Microsoft-Windows-VIRTDISK
Channel
Microsoft-Windows-VIRTDISK-Analytic
Task
Openvirtualdisk.
Opcode
Stop

Description

Opened backing store, returning handle VhdHandle, status VhdStatus.

Message #

Opened backing store, returning handle %1, status %2.

Fields #

NameDescription
VhdHandle Pointer
VhdStatus UInt32

Event ID 3 — Attaching using handle VhdHandle.

Provider
Microsoft-Windows-VIRTDISK
Channel
Microsoft-Windows-VIRTDISK-Analytic
Task
Attachvirtualdisk.
Opcode
Start

Description

Attaching using handle VhdHandle.

Message #

Attaching using handle %1.

Fields #

NameDescription
VhdHandle Pointer

Event ID 4 — Attached with status VhdStatus.

Provider
Microsoft-Windows-VIRTDISK
Channel
Microsoft-Windows-VIRTDISK-Analytic
Task
Attachvirtualdisk.
Opcode
Stop

Description

Attached with status VhdStatus.

Message #

Attached with status %1.

Fields #

NameDescription
VhdStatus UInt32

Event ID 5 — Detaching using handle VhdHandle.

Provider
Microsoft-Windows-VIRTDISK
Channel
Microsoft-Windows-VIRTDISK-Analytic
Task
Detachvirtualdisk.
Opcode
Start

Description

Detaching using handle VhdHandle.

Message #

Detaching using handle %1.

Fields #

NameDescription
VhdHandle Pointer

Event ID 6 — Detached with status VhdStatus.

Provider
Microsoft-Windows-VIRTDISK
Channel
Microsoft-Windows-VIRTDISK-Analytic
Task
Detachvirtualdisk.
Opcode
Stop

Description

Detached with status VhdStatus.

Message #

Detached with status %1.

Fields #

NameDescription
VhdStatus UInt32

Event ID 1000 — TraceData.

Provider
Microsoft-Windows-VIRTDISK
Channel
Microsoft-Windows-VIRTDISK-Analytic

Message #

%1

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 1001 — TraceData.

Provider
Microsoft-Windows-VIRTDISK
Channel
Microsoft-Windows-VIRTDISK-Analytic

Message #

%1

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 1002 — TraceData.

Provider
Microsoft-Windows-VIRTDISK
Channel
Microsoft-Windows-VIRTDISK-Analytic

Message #

%1

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32

Event ID 1003 — TraceData.

Provider
Microsoft-Windows-VIRTDISK
Channel
Microsoft-Windows-VIRTDISK-Analytic

Message #

%1

Fields #

NameDescription
TraceData UnicodeString
VmName UnicodeString
VmId UnicodeString
StackFrameCount UInt32
StackFrame Pointer
ModuleCount UInt32
Module Int32