Geoff Chappell, Software Analyst
Bit fields in union with the Flags member were introduced to the WMI_LOGGER_CONTEXT for Windows Vista. Some bits had been their own (larger) members.
| Mask | Definition | Versions | Remarks |
|---|---|---|---|
| 0x00000001 |
ULONG Persistent : 1; |
6.0 and higher | |
| 0x00000002 |
ULONG AutoLogger : 1; |
6.0 and higher | |
| 0x00000004 |
ULONG FsReady : 1; |
6.0 and higher | |
| 0x00000008 |
ULONG RealTime : 1; |
6.0 and higher | |
| 0x00000010 |
ULONG Wow : 1; |
6.0 and higher | previously ULONG |
| 0x00000020 |
ULONG KernelTrace : 1; |
6.0 and higher | previously ULONG as KernelTraceOn |
| 0x00000040 |
ULONG NoMoreEnable : 1; |
6.0 and higher | |
| 0x00000080 |
ULONG StackTracing : 1; |
6.1 and higher | |
| 0x00000100 |
ULONG ErrorLogged : 1; |
6.1 and higher | |
| 0x00000200 |
ULONG RealtimeLoggerContextFreed : 1; |
6.1 and higher | previously BOOLEAN |
| 0x00000400 |
ULONG PebsTracing : 1; |
6.2 and higher | |
| 0x00000800 |
ULONG PmcCounters : 1; |
6.2 and higher | |
| 0x00001000 |
ULONG PageAlignBuffers : 1; |
6.2 and higher | |
| 0x00002000 |
ULONG StackLookasideListAllocated : 1; |
10.0 and higher | |
| 0x00004000 |
ULONG SecurityTrace : 1; |
10.0 and higher | |
| 0x00008000 |
ULONG LastBranchTracing : 1; |
1709 and higher | |
ULONG SpareFlags1 : 3; |
6.2 to 6.3 | ||
ULONG SpareFlags1 : 1; |
10.0 to 1703 | ||
| 0x00FF0000 |
ULONG SystemLoggerIndex : 8; |
6.2 and higher | |
| 0x01000000 |
ULONG StackCaching : 1; |
6.2 and higher | |
| 0x02000000 |
ULONG ProviderTracking : 1; |
1803 and higher | |
| 0x04000000 |
ULONG ProcessorTrace ; 1; |
1803 and higher | |
ULONG SpareFlags2 : 7; |
6.2 to 1709 | ||
ULONG SpareFlags2 : 5; |
1803 and higher |
The Persistent and AutoLogger bits are set from the 0x01 and 0x02 bits, respectively, in the Flags member of the WMI_LOGGER_INFORMATION.