TraceLevel represents provider-defined value that specifies the level of detail included in the event. Higher levels imply that you get lower levels a

EnableProperty enables a property of a provider session is subscribing for. For more info about available properties check original API reference: ht

Event is a single event record received from ETW provider. The only thing that is parsed implicitly is an EventHeader (which just translated from C st

EventCallback is any function that could handle an ETW event. EventCallback is called synchronously and sequentially on every event received by Sessio

EventDescriptor contains low-level metadata that defines received event. Most of fields could be used to refine events filtration. For detailed infor

EventHeader contains an information that is common for every ETW event record. EventHeader fields is self-descriptive. If you need more info refer to

EventInstanceInfo defines the relationship between events if its provided.

EventStackTrace describes a call trace of the event occurred.

ExistsError is returned by NewSession if the session name is already taken. Having ExistsError you have an option to force kill the session: var e

ExtendedEventInfo contains additional information about received event. All ExtendedEventInfo fields are optional and are nils being not set by provid

Option is any function that modifies SessionOptions. Options will be called on default config in NewSession. Subsequent options that modifies same fie

Session represents a Windows event tracing session that is ready to start events processing. Session subscribes to the given ETW provider only on `.Pr

SessionOptions describes Session subscription options. Most of options will be passed to EnableTraceEx2 and could be refined in its docs: https://doc

propertyParser is used for parsing properties from raw EVENT_RECORD structure.