microsoft / microsoft/windows-container-tools

TdhGetEventInformation returns 1168 for manifest based events

Open
#27 8 comments 0 reactions 1 assignee View on GitHub

@bobsira is already working on this.

Since Jun 27, 2022.

needs-investigation
Dominant language
C++
Stars
277
Forks
77
No merged PRs in 30d

Description

Hello , I am no expert in ETW but I know I have an event stream that has some custom properties and I want to use this tool to print them out to STDOUT.

I running the code from master to debug the issue and am getting the 1168 error while querying for information via TdhGetEventInformation

image

The configuration file is verry simple :

{
  "LogConfig": {
    "sources": [
      {
        "type": "ETW",
        "providers": [
          {
            "ProviderGuid": "AAAAAAAA-AAAA-AAAA-AAAA-AAAAAAAAAA",
            "level": "Error"
          }
        ]
      }
    ]
  }
}

Do I need to do something extra for manifest based/ extra properties event ?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.