EtwSetInformation - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
// wdm.h

NTSTATUS EtwSetInformation(
  [in]           REGHANDLE        RegHandle,
  [in]           EVENT_INFO_CLASS InformationClass,
  [in, optional] PVOID            EventInformation,
  [in]           ULONG            InformationLength
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Windows Driver Kit DDI reference (nf-wdm-etwsetinformation)

Description

The EtwSetInformation provides special-purpose information to modify a kernel-mode ETW provider registration. The EtwSetInformation function is the kernel-mode equivalent of the EventSetInformation function.

Parameters

RegHandle [in]

The registration handle of the ETW provider to modify. The registration handle is returned by EtwRegister.

InformationClass [in]

The type (EVENT_INFO_CLASS) of operation to perform on the registration object.

EventInformation [in, optional]

The input buffer.

InformationLength [in]

Size of the input buffer.

Return value

If the function succeeds, the return value is STATUS_SUCCESS.

Return code Description
STATUS_INVALID_HANDLE This error is returned if the RegHandle parameter is not a valid registration handle.
STATUS_INVALID_PARAMETER One or more of the parameters is not valid.
STATUS_INVALID_DEVICE_REQUEST The request is not supported.

Remarks

See also

EventSetInformation

EVENT_INFO_CLASS