ns-evntrace-etw_trace_partition_information.md

UID	title	description	helpviewer_keywords	old-location	tech.root	ms.assetid	ms.date	ms.keywords	req.header	req.include-header	req.target-type	req.target-min-winverclnt	req.target-min-winversvr	req.kmdf-ver	req.umdf-ver	req.ddi-compliance	req.unicode-ansi	req.idl	req.max-support	req.namespace	req.assembly	req.type-library	req.lib	req.dll	req.irql	targetos	req.typenames	req.redist	ms.custom	f1_keywords	dev_langs	topic_type	api_type	api_location	api_name
NS:evntrace._ETW_TRACE_PARTITION_INFORMATION	ETW_TRACE_PARTITION_INFORMATION (evntrace.h)	Contains partition information pulled from an ETW trace.	*PETW_TRACE_PARTITION_INFORMATION ETW_TRACE_PARTITION_INFORMATION ETW_TRACE_PARTITION_INFORMATION structure [ETW] PETW_TRACE_PARTITION_INFORMATION PETW_TRACE_PARTITION_INFORMATION structure pointer [ETW] Process VmDirectUvm VmHost VmHostedUvm _ETW_TRACE_PARTITION_INFORMATION etw.etw_trace_partition_information evntrace/ETW_TRACE_PARTITION_INFORMATION evntrace/PETW_TRACE_PARTITION_INFORMATION	etw\etw_trace_partition_information.htm	ETW	8D8F8E79-B273-417A-B8C2-6CE4FC454C07	12/05/2018	*PETW_TRACE_PARTITION_INFORMATION, ETW_TRACE_PARTITION_INFORMATION, ETW_TRACE_PARTITION_INFORMATION structure [ETW], PETW_TRACE_PARTITION_INFORMATION, PETW_TRACE_PARTITION_INFORMATION structure pointer [ETW], Process, VmDirectUvm, VmHost, VmHostedUvm, _ETW_TRACE_PARTITION_INFORMATION, etw.etw_trace_partition_information, evntrace/ETW_TRACE_PARTITION_INFORMATION, evntrace/PETW_TRACE_PARTITION_INFORMATION	evntrace.h		Windows	Windows 10, version 1709 [desktop apps only]	Windows Server 2016 [desktop apps only]													Windows	ETW_TRACE_PARTITION_INFORMATION, *PETW_TRACE_PARTITION_INFORMATION		19H1	_ETW_TRACE_PARTITION_INFORMATION evntrace/_ETW_TRACE_PARTITION_INFORMATION PETW_TRACE_PARTITION_INFORMATION evntrace/PETW_TRACE_PARTITION_INFORMATION ETW_TRACE_PARTITION_INFORMATION evntrace/ETW_TRACE_PARTITION_INFORMATION	c++	APIRef kbSyntax	HeaderDef	evntrace.h	ETW_TRACE_PARTITION_INFORMATION

-description

Contains partition information pulled from an ETW trace. Most commonly used as a return structure for QueryTraceProcessingHandle.

-struct-fields

-field PartitionId

GUID to identify the machine.

-field ParentId

GUID that identifies the partition instance that contains the traced partition. If the traced partition is a host, then ParentId will be 0.

-field QpcOffsetFromRoot

Reserved for future use.

-field PartitionType

Enumeration value of the container type. the value may be one of the following:

• Process (1): For events originating from inside a "Windows Server Container".

• VmHost (2): For events originating from inside a "Hyper-V Container".

• VmHostedUvm (3): For events originating from a "Hyper-V Container" template virtual machine.

• VmDirectUvm (4): For events originating from applications running with Microsoft Defender Application Guard (MDAG).