This is probably not the correct interpretation of this error.
The Win32 error above is more likely to indicate the actual problem.
Flags
Severity
Success
This code indicates success, rather than an error.
This may not be the correct interpretation of this code,
or possibly the program is handling errors incorrectly.
I am attempting to get a working ETW consumer of events from the Microsoft-Windows-Kernel-Process provider. I am mostly following Microsoft's "Using TdhGetProperty to Consume Event Data" example, found here. The session starts, I can see it in the output of logman query -ets. My problem is when I get to [...] read more