MZ @ !L!This program cannot be run in DOS mode.
$ Rؕ3}3}3}H̴3}H̱3}Rich3} PE L ! 6 @ 4 .rsrc @ @ p 0 H 8 P h x ( @ X p 0 @ P ` x h l 4 ) 6 @/ 5 ? lR L ] o :
}
5 L f M U I C O U N T E R S . X S D
E V E N T S . X S D W I N M E T A . X M L YL<ގ]h ΩR`a(PG M U I e n - U S N o t f o u n d : ' % 1 ' . + M e s s a g e I d n o t f o u n d i n s t r i n g t a b l e : ' % 1 ' . % D u p l i c a t e s t r i n g I d s p e c i f i e d : ' % 1 ' . 9 F o r P r o v i d e r ' % 1 ' a t t r i b u t e r e s o u r c e F i l e N a m e i s r e q u i r e d . 8 F o r P r o v i d e r ' % 1 ' a t t r i b u t e m e s s a g e F i l e N a m e i s r e q u i r e d . S P r o v i d e r ' % 1 ' , p a r a m e t e r f i l e n a m e c a n n o t b e s p e c i f i e d w i t h o u t a m e s s a g e f i l e n a m e . ) D u p l i c a t e p r o v i d e r n a m e s p e c i f i e d : ' % 1 ' . 0 D u p l i c a t e p r o v i d e r G U I D ' % 1 ' i n p r o v i d e r : ' % 2 ' . + D u p l i c a t e p r o v i d e r s y m b o l s p e c i f i e d : ' % 1 ' . U I n v a l i d v a l u e % 1 ! u ! ( 0 x % 1 ! x ! ) s p e c i f i e d f o r l e v e l ' % 2 ' . V a l u e s 0 t h r u 1 5 a r e r e s e r v e d . ! D u p l i c a t e l e v e l n a m e u s e d : ' % 1 ' . : D u p l i c a t e l e v e l v a l u e % 1 ! u ! ( 0 x % 1 ! x ! ) u s e d i n l e v e l : ' % 2 ' . # D u p l i c a t e l e v e l s y m b o l u s e d : ' % 1 ' . J I n v a l i d v a l u e % 1 ! u ! ( 0 x % 1 ! x ! ) s p e c i f i e d f o r t a s k ' % 2 ' . V a l u e 0 i s r e s e r v e d . D u p l i c a t e t a s k n a m e u s e d : ' % 1 ' . PA8 D u p l i c a t e t a s k v a l u e % 1 ! u ! ( 0 x % 1 ! x ! ) u s e d i n t a s k : ' % 2 ' . " D u p l i c a t e t a s k s y m b o l u s e d : ' % 1 ' . - D u p l i c a t e e v e n t g u i d ' % 1 ' u s e d f o r t a s k ' % 2 ' . c I n v a l i d v a l u e % 1 ! u ! ( 0 x % 1 ! x ! ) s p e c i f i e d f o r o p c o d e ' % 2 ' . O p c o d e v a l u e s s h o u l d b e b e t w e e n 1 0 a n d 2 3 9 . " D u p l i c a t e o p c o d e n a m e u s e d : ' % 1 ' . < D u p l i c a t e o p c o d e v a l u e % 1 ! u ! ( 0 x % 1 ! x ! ) u s e d i n o p c o d e : ' % 2 ' . $ D u p l i c a t e o p c o d e s y m b o l u s e d : ' % 1 ' . w I n v a l i d v a l u e % 1 ! u ! ( 0 x % 1 ! x ! ) s p e c i f i e d f o r c h a n n e l ' % 2 ' . V a l u e s f o r u s e r - d e f i n e d c h a n n e l s s h o u l d b e b e t w e e n 1 6 a n d 2 5 5 . ] C h a n n e l ' % 1 ' i s t h e 9 t h c h a n n e l f o r t h i s p r o v i d e r . O n l y 8 c h a n n e l s a l l o w e d f o r o n e p r o v i d e r . / D u p l i c a t e c h a n n e l I d ' % 1 ' u s e d i n c h a n n e l ' % 2 ' . G D u p l i c a t e c h a n n e l n a m e u s e d : ' % 1 ' . C h a n n e l n a m e s a r e c a s e - i n s e n s i t i v e . < D u p l i c a t e c h a n n e l v a l u e % 1 ! u ! ( 0 x % 1 ! x ! ) u s e d i n c h a n n e l ' % 2 ' . 4 D u p l i c a t e c h a n n e l s y m b o l ' % 1 ' u s e d f o r c h a n n e l ' % 2 ' . @ D u p l i c a t e p r o p e r t y n a m e : ' % 1 ' s p e c i f i e d w i t h i n t e m p l a t e - ' % 2 ' . M F o r p r o p e r t y ' % 1 ' , p r o p e r t y ' % 2 ' r e f e r e n c e d b y a t t r i b u t e c o u n t w a s n o t f o u n d . O F o r p r o p e r t y ' % 1 ' , p r o p e r t y ' % 2 ' r e f e r e n c e d b y a t t r i b u t e l e n g t h w a s n o t f o u n d . . K F o r p r o p e r t y ' % 1 ' , p r o p e r t y ' % 2 ' r e f e r e n c e d b y a t t r i b u t e c o u n t i s a s t r u c t . L F o r p r o p e r t y ' % 1 ' , p r o p e r t y ' % 2 ' r e f e r e n c e d b y a t t r i b u t e l e n g t h i s a s t r u c t . D F o r p r o p e r t y ' % 1 ' , w i t h i n T y p e w i n : B i n a r y , l e n g t h m u s t b e s p e c i f i e d . > F o r p r o p e r t y ' % 1 ' , l e n g t h i s n o t a l l o w e d f o r t h e g i v e n i n T y p e . d F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , t o o m a n y k e y w o r d s s p e c i f i e d . M a x i m u m k e y w o r d s a l l o w e d i s 4 8 . L F o r e v e n t ' % 1 ' , I d % 2 ! u ! ( 0 x % 2 ! x ! ) w a s s p e c i f i e d w h i c h i s b i g g e r t h a n U S H O R T . F T w o e v e n t s h a v e t h e s a m e I d % 1 ! u ! ( 0 x % 1 ! x ! ) a n d V e r s i o n % 2 ! u ! ( 0 x % 2 ! x ! ) . # D u p l i c a t e e v e n t s y m b o l u s e d : ' % 1 ' . j F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , w i n : E v e n t l o g C l a s s i c k e y w o r d i s n o t a l l o w e d w i t h a n y o t h e r k e y w o r d . I F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , v e r s i o n a t t r i b u t e i s n o t a l l o w e d . I F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , c h a n n e l a t t r i b u t e i s n o t a l l o w e d . H F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , o p c o d e a t t r i b u t e i s n o t a l l o w e d . R F o r k e y w o r d ' % 1 ' , ' m a s k ' a t t r i b u t e i s i n v a l i d . O n e a n d o n l y o n e b i t s h o u l d b e s e t . T F o r k e y w o r d ' % 1 ' , w i t h m a s k 0 x % 2 ! I 6 4 x ! , m a s k b i t c a n o n l y b e o n e o f t h e l o w 4 8 b i t s . " D u p l i c a t e k e y w o r d n a m e u s e d : ' % 1 ' . 7 D u p l i c a t e k e y w o r d m a s k 0 x % 1 ! I 6 4 x ! u s e d i n k e y w o r d ' % 2 ' . 3 D u p l i c a t e k e y w o r d s y m b o l ' % 1 ' u s e d i n k e y w o r d ' % 2 ' . D u p l i c a t e t e m p l a t e I d ' % 1 ' u s e d . a F a i l e d t o l o a d m s x m l 6 . d l l . P l e a s e e n s u r e t h a t M S X M L 6 . 0 i s i n s t a l l e d o n t h e s y s t e m a n d t r y a g a i n . F a i l e d t o C o C r e a t e S c h e m a c a c h e . * F a i l e d t r y i n g t o a d d s c h e m a f i l e t o c a c h e . * F a i l e d t o a d d s c h e m a t o s c h e m a c o l l e c t i o n . , F a i l e d t o s e t a s y n c p r o p e r t y o n D O M D o c u m e n t . * F a i l e d t o q u e r y I X M L D O M D o c u m e n t i n t e r f a c e . F M S X M L S c h e m a V a l i d a t i o n E r r o r 0 x % 1 ! x ! . A t L i n e = % 2 ! d ! , C o l u m n = % 3 ! d ! , % 4 PA, O u t T y p e : ' % 1 ' i s i n v a l i d f o r I n T y p e : ' % 2 ' . I n T y p e : ' % 1 ' n o t f o u n d . D u p l i c a t e m a p n a m e u s e d : ' % 1 ' . 2 O n l y o n e b i t m a y b e s e t i n b i t m a p : ' % 1 ' 0 x % 2 ! x ! . A u t o m a t i c s t r i n g I d g e n e r a t i o n l o g i c c a n o n l y s u p p o r t 1 6 e v e n t p r o v i d e r s . B e y o n d t h a t , s t r i n g I d s m u s t b e e x p l i c i t l y a s s i g n e d u s i n g < m e s s a g e > e n t r i e s . D u p l i c a t e m e s s a g e I D w a s s p e c i f i e d - 0 x % 1 ! x ! . T h i s c a n h a p p e n w h e n a n a u t o - g e n e r a t e d m e s s a g e I d c o n f l i c t s w i t h t h o s e e x p l i c i t l y s p e c i f i e d u s i n g a < m e s s a g e T a b l e > o r a . m c f i l e . $ D u p l i c a t e F i l t e r S y m b o l u s e d : ' % 1 ' . G T w o F i l t e r s h a v e t h e s a m e I d : % 1 ! u ! ( 0 x % 1 ! x ! ) a n d V e r s i o n : % 2 ! u ! ( 0 x % 2 ! x ! ) . O U s e r D a t a n o t a l l o w e d f o r t e m p l a t e w i t h T I d ' % 1 ' , s i n c e i t i s a f i l t e r t e m p l a t e . ^ S t r u c t n o t a l l o w e d f o r p r o p e r t y ' % 1 ' o f t e m p l a t e w i t h T I d ' % 2 ' , s i n c e i t i s a f i l t e r t e m p l a t e . ] A r r a y n o t a l l o w e d f o r p r o p e r t y ' % 1 ' o f t e m p l a t e w i t h T I d ' % 2 ' , s i n c e i t i s a f i l t e r t e m p l a t e . PAJ M a p n o t a l l o w e d f o r t e m p l a t e w i t h T I d ' % 1 ' , s i n c e i t i s a f i l t e r t e m p l a t e . i A t t r i b u t e o u t T y p e i s r e q u i r e d f o r p r o p e r t y ' % 1 ' o f t e m p l a t e w i t h T I d ' % 2 ' , s i n c e i t i s a f i l t e r t e m p l a t e . " D u p l i c a t e F i l t e r N a m e u s e d : ' % 1 ' . L R e q u i r e d a t t r i b u t e ' c h i d ' i s m i s s i n g f o r t h e c h a n n e l e l e m e n t w i t h n a m e ' % 1 ' . O F o r c h a n n e l ' % 1 ' , v a l u e o f a t t r i b u t e ' a c c e s s ' i s n o t a v a l i d S D D L s t r i n g : ' % 2 ' . I A < m e s s a g e > e l e m e n t h a s r e f e r e n c e t o a n o n - e x i s t e n t < s t r i n g > e n t r y : ' % 1 ' . B T w o < m e s s a g e > e n t r i e s a r e r e f e r r i n g t h e s a m e < s t r i n g > e n t r y : ' % 1 ' . A F o r T e m p l a t e w i t h T I d ' % 1 ' , o n l y o n e < b i n a r y > e l e m e n t i s a l l o w e d . . T w o < m e s s a g e > e n t r i e s h a v e t h e s a m e M I d : ' % 1 ' . m F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , a t t r i b u t e ' m e s s a g e ' i s r e q u i r e d , s i n c e i t l o g g e d t o a n A d m i n C h a n n e l . F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , l e v e l m u s t b e s p e c i f i e d a n d i t s h o u l d b e o n e o f C r i t i c a l , E r r o r , W a r n i n g , o r I n f o r m a t i o n a l , s i n c e i t i s l o g g e d t o a n A d m i n C h a n n e l . 1 T w o < m e s s a g e > e n t r i e s h a v e t h e s a m e s y m b o l : ' % 1 ' . E T h e i n s t r u m e n t a t i o n n o d e i s e i t h e r m i s s i n g o r i n t h e w r o n g n a m e s p a c e . L F o r < d a t a > e l e m e n t ' % 1 ' , t h e p r e f i x o f ' % 2 ' i s n o t i n t h e w i n m e t a n a m e s p a c e . F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , a t t r i b u t e ' f i e l d ' i s n o t a l l o w e d , s i n c e p r o v i d e r i s u s e r M o d e . F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , a t t r i b u t e ' s t r u c t ' i s r e q u i r e d , s i n c e p r o v i d e r i s k e r n e l M o d e . F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , a t t r i b u t e ' f i e l d ' i s r e q u i r e d , s i n c e p r o v i d e r i s k e r n e l M o d e . x F o r < c o u n t e r S e t > e l e m e n t ' % 1 ' , u n d e r < p r o v i d e r > ' % 2 ' , c h i l d e l e m e n t < s t r u c t s > i s r e q u i r e d , s i n c e p r o v i d e r i s k e r n e l M o d e . y F o r < c o u n t e r S e t > e l e m e n t ' % 1 ' , u n d e r < p r o v i d e r > ' % 2 ' , c h i l d e l e m e n t < s t r u c t s > i s n o t a l l o w e d , s i n c e p r o v i d e r i s u s e r M o d e . V F o r < p r o v i d e r > e l e m e n t ' % 1 ' , a t t r i b u t e s y m b o l i s r e q u i r e d , s i n c e p r o v i d e r i s u s e r M o d e . [ F o r < p r o v i d e r > e l e m e n t ' % 1 ' , a t t r i b u t e s y m b o l i s n o t a l l o w e d , s i n c e p r o v i d e r i s k e r n e l M o d e . F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , ' i d ' c a n n o t b e g r e a t e r t h a n 6 3 s i n c e p r o v i d e r i s k e r n e l M o d e . F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , a t t r i b u t e ' a g g r e g a t e ' i s n o t a l l o w e d s i n c e t h e p a r e n t c o u n t e r S e t h a s e i t h e r s i n g l e o r m u l t i p l e i n s t a n c e s . F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , a t t r i b u t e ' b a s e I D ' i s r e q u i r e d . H e r e i s t h e l i s t o f c o u n t e r t y p e s t h a t r e q u i r e a b a s e I D a n d t h e r e q u i r e d t y p e s o f t h e i r b a s e c o u n t e r s :
p e r f _ a v e r a g e _ b u l k
p e r f _ a v e r a g e _ t i m e r
B a s e : p e r f _ a v e r a g e _ b a s e
p e r f _ 1 0 0 n s e c _ m u l t i _ t i m e r
p e r f _ 1 0 0 n s e c _ m u l t i _ t i m e r _ i n v
p e r f _ c o u n t e r _ m u l t i _ t i m e r
p e r f _ c o u n t e r _ m u l t i _ t i m e r _ i n v
B a s e : p e r f _ c o u n t e r _ m u l t i _ b a s e
p e r f _ r a w _ f r a c t i o n
B a s e : p e r f _ r a w _ b a s e
p e r f _ l a r g e _ r a w _ f r a c t i o n
p e r f _ p r e c i s i o n _ s y s t e m _ t i m e r
p e r f _ p r e c i s i o n _ 1 0 0 n s _ t i m e r
B a s e : p e r f _ l a r g e _ r a w _ b a s e
p e r f _ s a m p l e _ f r a c t i o n
B a s e : p e r f _ s a m p l e _ b a s e
Q S t r i n g t a b l e r e f e r e n c e s n o t a l l o w e d . P l e a s e i n l i n e t h e v a l u e o f t h e s t r i n g : ' % 1 ' . 7 F o r M a p ' % 1 ' , d u p l i c a t e v a l u e % 2 ! u ! ( 0 x % 2 ! x ! ) s p e c i f i e d . 5 F o r P a t t e r n M a p ' % 1 ' , d u p l i c a t e v a l u e ' % 2 ' s p e c i f i e d . F o r t e m p l a t e ' % 1 ' , i n v a l i d C u s t o m X m l s p e c i f i e d . C u s t o m X m l m u s t h a v e a t o p - l e v e l e l e m e n t a n d i t s h o u l d b e i n i t s o w n n a m e s p a c e . A l s o , t h e v a l u e o f p r o p e r t y i n s e r t s s h o u l d n o t b e g r e a t e r t h a n t h e n u m b e r o f t o p - l e v e l p r o p e r t i e s i n t h e t e m p l a t e : % 2 . T h e < e v e n t s > n o d e i s e i t h e r m i s s i n g o r i n t h e w r o n g n a m e s p a c e . T h e < e v e n t s > n o d e m u s t b e p r e s e n t u n d e r < i n s t r u m e n t a t i o n > n o d e a n d s h o u l d b e i n t h e f o l l o w i n g n a m e s p a c e : ' h t t p : / / s c h e m a s . m i c r o s o f t . c o m / w i n / 2 0 0 4 / 0 8 / e v e n t s ' . d F o r p r o p e r t y ' % 1 ' , i n T y p e m u s t b e o n e o f U I n t 8 , U I n t 1 6 , U I n t 3 2 , o r H e x I n t 3 2 , s i n c e m a p i s s p e c i f i e d . PAs F o r p r o p e r t y ' % 1 ' , p r o p e r t y ' % 2 ' r e f e r e n c e d b y a t t r i b u t e c o u n t m u s t h a v e i n T y p e U I n t 8 , U I n t 1 6 , U I n t 3 2 , o r H e x I n t 3 2 . [ F o r p r o p e r t y ' % 1 ' , p r o p e r t y ' % 2 ' r e f e r e n c e d b y a t t r i b u t e c o u n t c a n n o t h a v e a t t r i b u t e c o u n t . t F o r p r o p e r t y ' % 1 ' , p r o p e r t y ' % 2 ' r e f e r e n c e d b y a t t r i b u t e l e n g t h m u s t h a v e i n T y p e U I n t 8 , U I n t 1 6 , U I n t 3 2 , o r H e x I n t 3 2 . ] F o r p r o p e r t y ' % 1 ' , p r o p e r t y ' % 2 ' r e f e r e n c e d b y a t t r i b u t e l e n g t h c a n n o t h a v e a t t r i b u t e l e n g t h . F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , a p r o p e r t y i n s e r t i n t h e e v e n t m e s s a g e i s r e f e r e n c i n g a n o n - e x i s t e n t p r o p e r t y . E v e n t o n l y h a s % 3 ! u ! p r o p e r t i e s : ' % 4 ' . n F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , f o r m a t s p e c i f i c a t i o n f i e l d s a r e n o t a l l o w e d i n p r o p e r t y i n s e r t s : ' % 3 ' . B L e n g t h o f C h a n n e l N a m e m u s t b e b e t w e e n 1 a n d 2 5 6 c h a r a c t e r s : ' % 1 ' . I n v a l i d C h a n n e l N a m e : % 1 . F o l l o w i n g c h a r a c t e r s a r e n o t a l l o w e d i n a c h a n n e l n a m e : a s c i i v a l u e < 3 1 , d o u b l e q u o t e , ' > ' , ' < ' , ' & ' , ' | ' , ' \ ' , ' ' ' , ' : ' , ' * ' , a n d ' ? ' . C L e n g t h o f P r o v i d e r N a m e m u s t b e b e t w e e n 1 a n d 2 5 6 c h a r a c t e r s : ' % 1 ' . I n v a l i d P r o v i d e r N a m e : % 1 . F o l l o w i n g c h a r a c t e r s a r e n o t a l l o w e d i n a P r o v i d e r n a m e : a s c i i v a l u e < 3 1 , d o u b l e q u o t e , ' > ' , ' < ' , ' & ' , ' | ' , ' \ ' , ' ' ' , ' : ' , ' * ' , a n d ' ? ' . ! F a i l e d t o s e t s e l e c t i o n l a n g u a g e . " F a i l e d t o s e t s e l e c t i o n n a m e s p a c e . J F a i l e d t r y i n g t o p a r s e f i l e % 1 , a n d f a i l e d t o r e t r i e v e r e a s o n f o r f a i l u r e . * U n k n o w n e r r o r 0 x % 1 ! x ! r e c e i v e d f r o m m s x m l . _ T h i s e l e m e n t i s r e f e r e n c e d b y % 1 ! u ! o t h e r e l e m e n t ( s ) . P l e a s e r e m o v e r e f e r e n c e s b e f o r e d e l e t i n g . S p e c i f y a n a m e f o r t h e m a p . ~F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , a t t r i b u t e s ' p e r f T i m e I D ' a n d ' p e r f F r e q I D ' a r e r e q u i r e d , a n d t h e c o u n t e r s r e f e r e n c e d b y t h o s e a t t r i b u t e s s h o u l d b e o f t y p e p e r f _ c o u n t e r _ l a r g e _ r a w c o u n t . T h i s r u l e a p p l i e s t o c o u n t e r s o f f o l l o w i n g t y p e s :
p e r f _ c o u n t e r _ o b j _ t i m e _ q u e u e l e n _ t y p e
p e r f _ o b j _ t i m e _ t i m e r
p e r f _ e l a p s e d _ t i m e
p e r f _ p r e c i s i o n _ o b j e c t _ t i m e r
iF o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , a t t r i b u t e ' m u l t i C o u n t e r I D ' i s r e q u i r e d , a n d t h e c o u n t e r r e f e r e n c e d b y t h a t a t t r i b u t e s h o u l d b e o f t y p e p e r f _ c o u n t e r _ r a w c o u n t . T h i s r u l e a p p l i e s t o f o l l o w i n g c o u n t e r t y p e s :
p e r f _ c o u n t e r _ m u l t i _ t i m e r
p e r f _ c o u n t e r _ m u l t i _ t i m e r _ i n v
p e r f _ 1 0 0 n s e c _ m u l t i _ t i m e r
p e r f _ 1 0 0 n s e c _ m u l t i _ t i m e r _ i n v
T w o p r o v i d e r s h a v e d e f i n e d a c h a n n e l w i t h d u p l i c a t e n a m e : ' % 1 ' . A g i v e n c h a n n e l n a m e c a n o n l y b e d e f i n e d b y o n e p r o v i d e r , o t h e r p r o v i d e r s s h o u l d u s e < i m p o r t C h a n n e l > e l e m e n t t o r e f e r a n e x i s t i n g c h a n n e l . T w o o r m o r e e v e n t s l o g g i n g t o l e g a c y ' S y s t e m ' , ' S e c u r i t y ' o r ' A p p l i c a t i o n ' c h a n n e l s a r e r e f e r e n c i n g t h e s a m e m e s s a g e s t r i n g ' % 1 ' . G i v e e a c h s u c h e v e n t a u n i q u e m e s s a g e s t r i n g . S t r i n g ' % 1 ' i s g i v e n I d % 2 ! u ! ( 0 x % 2 ! x ! ) i n a . m c f i l e . C h a n g e t h e I d o f t h i s s t r i n g t o b e t h e s a m e a s t h a t o f t h e e v e n t r e f e r e n c i n g t h i s s t r i n g , s i n c e t h e e v e n t i s l o g g i n g t o ' S y s t e m ' , ' S e c u r i t y ' o r ' A p p l i c a t i o n ' c h a n n e l . S t r i n g ' % 1 ' i s e x p l i c i t l y a s s i g n e d I d % 2 ! u ! ( 0 x % 2 ! x ! ) u s i n g a < m e s s a g e > e l e m e n t . C h a n g e t h e I d o f t h i s s t r i n g t o b e t h e s a m e a s t h a t o f t h e e v e n t r e f e r e n c i n g t h i s s t r i n g , s i n c e t h e e v e n t i s l o g g i n g t o ' S y s t e m ' , ' S e c u r i t y ' o r ' A p p l i c a t i o n ' c h a n n e l . t F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , s i n c e O p c o d e ' % 3 ' i s l o c a l t o T a s k ' % 4 ' , e v e n t m u s t r e f e r e n c e t h e T a s k ' % 4 ' . n F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , O p c o d e ' % 3 ' i s l o c a l t o T a s k ' % 4 ' , b u t e v e n t i s r e f e r e n c i n g T a s k ' % 5 ' . F o r e v e n t ' % 1 ' , w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) , O p c o d e ' % 3 ' i s g l o b a l , a n d i t s v a l u e c o l l i d e s w i t h t h a t o f l o c a l O p c o d e ' % 4 ' o f t h e T a s k ' % 5 ' t h a t t h e e v e n t i s r e f e r e n c i n g . 3 D u p l i c a t e I d % 1 ! u ! ( 0 x % 1 ! x ! ) u s e d i n C o u n t e r : ' % 2 ' . * D u p l i c a t e U r i ' % 1 ' u s e d i n C o u n t e r : ' % 2 ' . ; D u p l i c a t e N a m e ' % 1 ' u s e d i n C o u n t e r w i t h I d % 2 ! u ! ( 0 x % 2 ! x ! ) . - D u p l i c a t e S y m b o l ' % 1 ' u s e d i n C o u n t e r : ' % 2 ' . . D u p l i c a t e G u i d ' % 1 ' u s e d i n C o u n t e r S e t : ' % 2 ' . - D u p l i c a t e U r i ' % 1 ' u s e d i n C o u n t e r S e t : ' % 2 ' . & D u p l i c a t e C o u n t e r S e t N a m e u s e d : ' % 1 ' . PA0 D u p l i c a t e S y m b o l ' % 1 ' u s e d i n C o u n t e r S e t : ' % 2 ' . M a p ' % 1 ' c a n n o t b e e m p t y . 7 M i s s i n g A t t r i b u t e ' i d ' o n o n e o f t h e < s t r i n g > e l e m e n t s . 6 F o r S t r i n g w i t h I d ' % 1 ' , a t t r i b u t e ' v a l u e ' i s m i s s i n g . * D u p l i c a t e C o u n t e r S t r u c t N a m e u s e d : ' % 1 ' . u F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , B a s e I d v a l u e r e f e r s t o a n o n - e x i s t e n t c o u n t e r . y F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , P e r f T i m e I d v a l u e r e f e r s t o a n o n - e x i s t e n t c o u n t e r . y F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , P e r f F r e q I d v a l u e r e f e r s t o a n o n - e x i s t e n t c o u n t e r . } F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , M u l t i C o u n t e r I d v a l u e r e f e r s t o a n o n - e x i s t e n t c o u n t e r . s F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , B a s e I d i s n o t a l l o w e d f o r t h i s c o u n t e r t y p e . w F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , P e r f T i m e I d i s n o t a l l o w e d f o r t h i s c o u n t e r t y p e . w F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , P e r f F r e q I d i s n o t a l l o w e d f o r t h i s c o u n t e r t y p e . { F o r < c o u n t e r > e l e m e n t w i t h I d % 1 ! u ! ( 0 x % 1 ! x ! ) , u n d e r < c o u n t e r S e t > ' % 2 ' , M u l t i C o u n t e r I d i s n o t a l l o w e d f o r t h i s c o u n t e r t y p e . F a i l e d t o a c q u i r e S c h e m a V e r s i o n . T h i s c a n b e d u e t o o n e o f t h e f o l l o w i n g r e a s o n s :
1 . T h e < c o u n t e r s > n o d e i s e i t h e r m i s s i n g o r i n t h e w r o n g n a m e s p a c e .
2 . T h e < c o u n t e r s > n o d e d o e s n o t h a v e t h e s c h e m a V e r s i o n a t t r i b u t e .
3 . T h e s c h e m a V e r s i o n a t t r i b u t e v a l u e i s a m a l f o r m e d f l o a t i n g p o i n t s t r i n g .
I f t h i s i s a l e g a c y m a n i f e s t a n d t h e e r r o r w a s r e c e i v e d f r o m c t r p p . e x e ,
r u n c t r p p . e x e w i t h - l e g a c y s w i t c h . I t i s r e c o m m e n d e d t o a l w a y s u s e
E C M a n g e n . e x e t o c r e a t e c o u n t e r m a n i f e s t s t o e n s u r e v a l i d i t y . PA U n r e c o g n i z e d C o u n t e r m a n i f e s t v e r s i o n . H i g h e s t m a j o r v e r s i o n s u p p o r t e d i s % 1 ! u ! . T r y f i x i n g t h e v e r s i o n o r g e t t h e l a t e s t c o p y o f t h e t o o l . Z A t t r i b u t e ' r e s o u r c e B a s e ' i s n o t a l l o w e d o n < p r o v i d e r > e l e m e n t b e g i n n i n g s c h e m a V e r s i o n 2 . 0 . F o r C o u n t e r S e t ' % 1 ' , b a d n a m e I D % 2 ! u ! ( 0 x % 2 ! x ! ) w a s s p e c i f i e d . n a m e I D a t t r i b u t e i s r e q u i r e d , a n d m u s t b e g l o b a l l y u n i q u e . I n a d d i t i o n , R e s o u r c e I d s i n t h e f i l e m u s t b e e i t h e r a l l o d d o r a l l e v e n . F o r C o u n t e r S e t ' % 1 ' , b a d d e s c r i p t i o n I D % 2 ! u ! ( 0 x % 2 ! x ! ) w a s s p e c i f i e d . d e s c r i p t i o n I D a t t r i b u t e i s r e q u i r e d , a n d m u s t b e g l o b a l l y u n i q u e . I n a d d i t i o n , R e s o u r c e I d s i n t h e f i l e m u s t b e e i t h e r a l l o d d o r a l l e v e n . F o r C o u n t e r ' % 1 ' , b a d n a m e I D % 2 ! u ! ( 0 x % 2 ! x ! ) w a s s p e c i f i e d . n a m e I D a t t r i b u t e i s r e q u i r e d , a n d m u s t b e g l o b a l l y u n i q u e . I n a d d i t i o n , R e s o u r c e I d s i n t h e f i l e m u s t b e e i t h e r a l l o d d o r a l l e v e n . F o r C o u n t e r ' % 1 ' , b a d d e s c r i p t i o n I D % 2 ! u ! ( 0 x % 2 ! x ! ) w a s s p e c i f i e d . d e s c r i p t i o n I D a t t r i b u t e i s r e q u i r e d , a n d m u s t b e g l o b a l l y u n i q u e . I n a d d i t i o n , R e s o u r c e I d s i n t h e f i l e m u s t b e e i t h e r a l l o d d o r a l l e v e n . W I n v a l i d t a s k m e s s a g e f o r t a s k ' % 1 ' . I n s e r t i o n s t r i n g s a r e n o t a l l o w e d i n t a s k m e s s a g e s . [ I n v a l i d o p c o d e m e s s a g e f o r t a s k ' % 1 ' . I n s e r t i o n s t r i n g s a r e n o t a l l o w e d i n o p c o d e m e s s a g e s . ] I n v a l i d c h a n n e l m e s s a g e f o r t a s k ' % 1 ' . I n s e r t i o n s t r i n g s a r e n o t a l l o w e d i n c h a n n e l m e s s a g e s . ] I n v a l i d k e y w o r d m e s s a g e f o r t a s k ' % 1 ' . I n s e r t i o n s t r i n g s a r e n o t a l l o w e d i n k e y w o r d m e s s a g e s . PA4 V S _ V E R S I O N _ I N F O @% @%? S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n ^ F i l e D e s c r i p t i o n E v e n t T r a c e H e l p e r L i b r a r y r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) 0 I n t e r n a l N a m e t d h . d l l . L e g a l C o p y r i g h t M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . @ O r i g i n a l F i l e n a m e t d h . d l l . m u i j % P r o d u c t N a m e M i c r o s o f t W i n d o w s O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n
Hex 1-8 digits in size
Hex 1-8 digits in size or unsignedInt
A Valid C Symbol or an empty string
Only five counterAttribute elements allowed, they should all be unique.
This attribute is required for schemaVersion >= 2.0.
Resource ID of the name string. This attribute is required
for schemaVersion >= 2.0. It is not allowed for older versions.
This attribute is required for schemaVersion >= 2.0.
Resource ID of the description string. This attribute is required
for schemaVersion >= 2.0. It is not allowed for older versions.
If providerType=userMode, required.
If providerType=kernelMode, not allowed.
If providerType=userMode, required.
If providerType=kernelMode, not allowed.
If providerType=userMode, required.
If providerType=kernelMode, not allowed.
Resource ID of the name string. This attribute is required
for schemaVersion >= 2.0, and not allowed for older versions.
Resource ID of the description string. This attribute is required
for schemaVersion >= 2.0, and not allowed for older versions.
Provider Symbol is required for User Mode providers.
This attribute is not allowed for schemaVersion >= 2.0.
Counter Set GUID should be unique across the entire document. The
counter set registration fails if the GUID is already registered.
To update a counter set that is registered, you must first
uninstall the counter set and register it again.
A globally unique identifier in Registry format.
e.g. {12345678-4321-ABCD-1234-9ABCDEF012345678}.
Use GUIDGen.exe or UUIDGen.exe to create a GUID.
Symbol is used for code-generation. It should be a valid C Symbol or an empty string.
Is used for code-generation on namespaces which should be valid C++ symbols.
E.g. Namespace1._Namespace2.Namespace2
Hex 1-2 digits in size
Hex 1-4 digits in size
Hex 1-8 digits in size
Hex 1-16 digits in size.
Hex 1-2 digits in size or unsignedByte
Hex 1-4 digits in size or unsignedShort
UnsignedInt or Hex 1-8 digits in size.
Hex 1-16 digits in size or unsignedLong
Length property name string or unsignedShort
Count property name string or unsignedShort
Value of this attribute should be of the form $(string.stringTableId),
where stringTableId is the 'id' attribute of a <string> element
defined in the <stringTable> section. Or it could be of the form
$(mc.mcSymbolId), where mcSymbolId is the symbol of a message string
defined in a .mc file.
A fully-qualified path to a file. Standard Windows environment variables are
allowed. Typically, the file is of type .exe, .dll, or .sys.
Each keyword must have a unique name, which is used to reference the keyword
from the events section of the manifest.
Mask is a 64-bit value, in which, only one bit is set. Mask value cannot be zero.
Leftmost 16 bits of the mask are reserved for use by winmeta.xml.
Use keywords to group events together. At run-time, it is possible to enable
events belonging to only certain groups (i.e. keywords). This is one way to
filter out unwanted events at the time of logging.
Use opcodes, in conjunction with a task, to describe different milestones within
an activity.
Use levels to control the verbosity of events during logging. At run-time,
a provider can be enabled with a certain level value, and only events with
a level value less than or equal to the specified value will get logged.
Use tasks to describe an activity. Use opcodes to describe each unit of work
within an activity.
Channel logging config
Channel publishing config
Amount of memory allocated for the session buffers (KB)
Number of etl files to create across enablement
Minimum number of session buffers
Maximum number of session buffers
Buffer flush interval (sec)
Clock resolution
Default publishing session/security if not specified explicitly by the channel access attribute.
Use channels to describe the destinations for your events. Each channel you
define here will show up in the Windows Event Viewer.
Represents binary data in classic eventlog API
Use templates to describe the payload logged by an event. Different events can
share a template.
Also referred to as the Event-Id. An ETW event is uniquely identified by the
{Provider-Guid,Event-Id,Event-Version} tuple.
Reference to a <level> element defined in the <levels> section.
Refer to a level by its attribute 'name'.
It is advisable to increment the version of an event if its template is modified
between releases.
Use this to indicate that this event has been removed and will not be logged
by this version of the provider. The description of the event should be retained
in this manifest so that if an etl file collected from an older version of the
provider on a different machine is brought to this machine, it can be correctly
decoded on this machine.
Use this to indicate if the template associated with this event contains
valid WinRT types i.e. the event payload fields can come from arguments
of projected WinRT methods. Ignore this attribute if the component which
is hosting the provider does not use WinRT projection APIs to log the event.
List all events logged by the provider in this section.
Name of the executable file to which the provider's metadata resource is linked,
usually the same as the provider's binary.
Name of the executable file to which the provider's localizable message resource
is linked, usually the same as the provider's binary.
P
Events for Classic ETW tracing.
Events for all installed system services. This channel is secured to applications running under
system service accounts or user applications running under local adminstrator privileges.
Events for all user-level applications. This channel is not secured and open to any applications.
Applications which log extensive information should define an application-specific channel.
The Windows Audit Log. For exclusive use of the Windows Local Security Authority. User events
may appear as audits if supported by the underlying application.
Log Always
Only critical errors
All errors, includes win:Critical
All warnings, includes win:Error
All informational content, including win:Warning
All tracing, including previous levels
undefined task
An informational event
An activity start event
An activity end event
A trace collection start event
A trace collection end event
An extensional event
A reply event
An event representing the activity resuming from the suspension
An event representing the activity is suspended, pending another activity's completion
An event representing the activity is transferred to another component, and can continue to work
An event representing receiving an activity transfer from another component
Wild card value
Attached to all events providing response time information
Attached to all WDI context events
Attached to all WDI diag events
Attached to all SQM events
Attached to all failed security audits
Attached to all successful security audits
Attached to transfer events where the related Activity ID is a computed value and not a GUID
Attached to events raised using classic eventlog API
A NULL-terminated UNICODE string.
A NULL-terminated ANSI string.
A signed 8-bit integer.
An unsigned 8-bit integer.
An integer in hex format
A signed 16-bit integer.
An unsigned 16-bit integer
An integer in hex format
A signed 32-bit integer.
A message string corresponding to system HResult error code.
An unsigned 32-bit integer.
Deprecated, same as win:HexInt32.
A message string corresponding to system win32 error code.
A message string corresponding to system NTSTATUS error code.
An integer in hex format
A signed 64-bit integer.
An unsigned 64-bit integer.
An integer in hex format
An IEEE 4-byte floating-point value
An IEEE 8-byte floating-point value
A 32-bit value where 0 is false, 1 is true.
Variable size binary data.
A DCE-compliant 128-bit UUID. XML spec: {12345678-1234-4667-1234-123456789abc}
A pointer; sized to the current platform (32-bit or 64-bit). XML spec: hex representation of a pointer
A Windows FILETIME struct.
DateTime string without any marker related with culture. Ex) Left-To-Right
A Windows SYSTEMTIME struct.
DateTime string without any marker related with culture. Ex) Left-To-Right
A self-relative Windows SID structure. XML spec: S-1-0-0.
A hexidecimal representation of an unsigned 32-bit integer.
Deprecated, same as win:HexInt32.
A message string corresponding to system win32 error code.
A message string corresponding to system NTSTATUS error code.
A hexidecimal representation of an unsigned 64-bit integer.
PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD