Struct ferrisetw::schema::SchemaLocator

pub struct SchemaLocator { /* fields omitted */ }

Represents a cache of Schemas already located

This cache is implemented as a HashMap where the key is a combination of the following elements of an Event Record

• EventHeader.ProviderId
• EventHeader.EventDescriptor.Id
• EventHeader.EventDescriptor.Opcode
• EventHeader.EventDescriptor.Version
• EventHeader.EventDescriptor.Level

Credits: KrabsETW::schema_locator

Implementations

impl SchemaLocator

pub fn event_schema(
    &mut self,
    event: EventRecord
) -> Result<Schema, SchemaError>

Use the event_schema function to retrieve the Schema of an ETW Event

Arguments

• event - The EventRecord that's passed to the callback

Remark

This is the first function that should be called within a Provider callback, if everything works as expected this function will return a Result with the Schema that represents the ETW event that triggered the callback

This function can fail, if it does it will return a SchemaError

Example

let my_callback = |record: EventRecord, schema_locator: &mut SchemaLocator| {
    let schema = schema_locator.event_schema(record)?;
};

Trait Implementations

impl Debug for SchemaLocator

fn fmt(&self, _f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SchemaLocator

fn default() -> SchemaLocator

Returns the "default value" for a type.