Microsoft-Windows-DirectComposition

Event	Title	Channel	Sample	Rule
1	RESOURCE_CREATION	Diagnostic	Y	N
2	BEGIN_DRAWStart	Diagnostic	Y	N
3	BEGIN_DRAWStop	Diagnostic	Y	N
4	END_DRAWStart	Diagnostic	Y	N
5	END_DRAWStop	Diagnostic	Y	N
6	TRIMStart	Diagnostic	N	N
7	TRIMStop	Diagnostic	N	N
8	RESIZEStart	Diagnostic	N	N
9	RESIZEStop	Diagnostic	N	N
10	UPDATE_TOKENStart	Diagnostic	Y	N
11	UPDATE_TOKENStop	Diagnostic	Y	N
12	SUSPEND_DRAWStart	Diagnostic	Y	N
13	SUSPEND_DRAWStop	Diagnostic	Y	N
14	RESUME_DRAWStart	Diagnostic	Y	N
15	RESUME_DRAWStop	Diagnostic	Y	N
16	ATLAS_ALLOCATE	Diagnostic	Y	N
17	ATLAS_FREE	Diagnostic	Y	N
18	ATLAS_ENTRY_ALLOCATE	Diagnostic	Y	N
19	ATLAS_ENTRY_FREE	Diagnostic	Y	N
20	ATLAS_UTILIZATION	Diagnostic	Y	N
21	SCROLLStart	Diagnostic	N	N
22	SCROLLStop	Diagnostic	N	N
23	DEVICE_CREATE	Diagnostic	Y	N
24	DEVICE_DESTROY	Diagnostic	Y	N
25	DEVICE_COMMIT	Diagnostic	Y	N
26	ATLAS_USE_INFO	Diagnostic	Y	N
27	ATLAS_ENTRY_MARK_FOR_DISPOSE	Diagnostic	Y	N
28	ATLAS_ENTRY_MARK_AVAILABLE	Diagnostic	Y	N
29	ATLAS_ENTRY_REUSE	Diagnostic	Y	N
30	RESOURCE_RELEASE	Diagnostic	Y	N
31	CREATE_CLUMP	Diagnostic	Y	N
32	DESTROY_CLUMP	Diagnostic	Y	N
33	PUSH_DOWNStart	Diagnostic	N	N
34	PUSH_DOWNStop	Diagnostic	N	N
35	RECLUMPStart	Diagnostic	N	N
36	RECLUMPStop	Diagnostic	N	N
37	VIRTUAL_SURFACE_COUNTERS	Diagnostic	Y	N
38	CAP_ALLOCATION_STATS	Diagnostic	Y	N
39	CAP_RELEASE_SURFACE	Diagnostic	N	N
40	BLOCK_FOR_EXCESSIVE_PENDINGStart	Diagnostic	N	N
41	BLOCK_FOR_EXCESSIVE_PENDINGStop	Diagnostic	N	N
42	OFFER_RECLAIM	Diagnostic	N	N
43	OFFER_RECLAIM43	Diagnostic	N	N
44	CAP_MAXIMUM	Diagnostic	Y	N
45	CAP_MAXIMUM	Diagnostic	Y	N
46	CREATE_SHARED_MEMORY_SECTION	Diagnostic	Y	N
47	DESTROY_SHARED_MEMORY_SECTION	Diagnostic	N	N
48	ALLOCATE_FROM_SHARED_MEMORY_SECTION	Diagnostic	Y	N
49	FREE_FROM_SHARED_MEMORY_SECTION	Diagnostic	Y	N
50	ANIMATION_SCENARIO_BEGIN	Diagnostic	N	N
51	ANIMATION_SCENARIO_REFERENCE	Diagnostic	N	N
52	ANIMATION_SCENARIO_UNREFERENCE	Diagnostic	N	N
53	PRIMITIVE_GROUP_UPDATE	Diagnostic	Y	N
54	ATLAS_RESIZE	Diagnostic	Y	N
55	VISUAL_SET_INTERACTION	Diagnostic	Y	N
56	VISUAL_SET_INPUTSINK	Diagnostic	Y	N
57	VISUAL_REDIRECT_MOUSE	Diagnostic	N	N
58	INTERACTION_CONFIGURATION	Diagnostic	Y	N
59	INTERACTION_CAPTURE_POINTER	Diagnostic	N	N
60	FLIP_CONSUME_PRESENTStart	Diagnostic	N	N
61	FLIP_CONSUME_PRESENTStop	Diagnostic	N	N
62	FLIP_CONSUME_PRESENT_CALLOUTStart	Diagnostic	N	N
63	FLIP_CONSUME_PRESENT_CALLOUTStop	Diagnostic	N	N
64	FLIP_PRODUCE_PRESENTStart	Diagnostic	N	N
65	FLIP_PRODUCE_PRESENTStop	Diagnostic	N	N
66	ANIMATION_ENDED	Diagnostic	Y	N
67	REGISTERANIMATIONTARGET	Diagnostic	Y	N
68	EXPRESSIONANIMATOR_INIT	Diagnostic	Y	N
69	EXPRESSIONANIMATOR_RELEASE_RESOURCES	Diagnostic	Y	N
70	SHAREALLOCATIONBASE_ONMARSHALERRELEASE	Diagnostic	N	N
71	SHAREALLOCATIONBASE_DISPOSEONDELAYEDDESTRUCTION	Diagnostic	Y	N
72	DELEGATEDINKTRAIL_COOKIEPUSHED	Diagnostic	N	N
73	DELEGATEDINKTRAIL_REMOVETRAILPOINTS	Diagnostic	N	N
74	DELEGATEDINKTRAIL_STARTNEWTRAIL	Diagnostic	N	N
75	WINCOMP_EFFECT_CREATE	Diagnostic	N	N

Event ID 1: RESOURCE_CREATION

Channel: Diagnostic
Level: Verbose
Task: RESOURCE_CREATION

Fields #

Name	Description
`channelHandle` UInt32
`resourceHandle` UInt32
`externalHandleAndChannel` UInt64
`resourceType` UInt32
`createShared` Boolean
`openShared` Boolean
`resourcePointer` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 1,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 9548,
      "thread_id": 2944
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:20.351Z",
    "version": 0
  },
  "event_data": {
    "channelHandle": 69,
    "createShared": true,
    "externalHandleAndChannel": 9223372333207519233,
    "openShared": false,
    "resourceHandle": 1,
    "resourcePointer": 1952349749280,
    "resourceType": 196
  },
  "message": ""
}

Event ID 2: BEGIN_DRAWStart

Channel: Diagnostic
Level: Verbose
Task: BEGIN_DRAW
Opcode: Start

Fields #

Name	Description
`channelHandle` UInt32
`resourceType` UInt32
`resourcePointer` UInt64
`left` Int32
`top` Int32
`right` Int32
`bottom` Int32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 2,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.164Z",
    "version": 0
  },
  "event_data": {
    "bottom": 1,
    "channelHandle": 1176302592,
    "left": 0,
    "resourcePointer": 2320485493312,
    "resourceType": 42,
    "right": 1,
    "top": 0
  },
  "message": ""
}

Event ID 3: BEGIN_DRAWStop

Channel: Diagnostic
Level: Verbose
Task: BEGIN_DRAW
Opcode: Stop

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 3,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.164Z",
    "version": 0
  },
  "event_data": {},
  "message": ""
}

Event ID 4: END_DRAWStart

Channel: Diagnostic
Level: Verbose
Task: END_DRAW
Opcode: Start

Fields #

Name	Description
`channelHandle` UInt32
`resourceType` UInt32
`resourcePointer` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 4,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {
    "channelHandle": 1176302592,
    "resourcePointer": 2320820934288,
    "resourceType": 84
  },
  "message": ""
}

Event ID 5: END_DRAWStop

Channel: Diagnostic
Level: Verbose
Task: END_DRAW
Opcode: Stop

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 5,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {},
  "message": ""
}

Event ID 6: TRIMStart

Channel: Diagnostic
Task: TRIM
Opcode: Start

Fields #

Name	Description
`channelHandle` UInt32
`resourceType` UInt32
`resourcePointer` UInt64

Event ID 7: TRIMStop

Channel: Diagnostic
Task: TRIM
Opcode: Stop

Event ID 8: RESIZEStart

Channel: Diagnostic
Task: RESIZE
Opcode: Start

Fields #

Name	Description
`channelHandle` UInt32
`resourceType` UInt32
`resourcePointer` UInt64

Event ID 9: RESIZEStop

Channel: Diagnostic
Task: RESIZE
Opcode: Stop

Event ID 10: UPDATE_TOKENStart

Channel: Diagnostic
Level: Verbose
Task: UPDATE_TOKEN
Opcode: Start

Fields #

Name	Description
`channelHandle` UInt32
`resourceType` UInt32
`resourcePointer` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 10,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {
    "channelHandle": 1176302592,
    "resourcePointer": 2320467203456,
    "resourceType": 42
  },
  "message": ""
}

Event ID 11: UPDATE_TOKENStop

Channel: Diagnostic
Level: Verbose
Task: UPDATE_TOKEN
Opcode: Stop

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 11,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {},
  "message": ""
}

Event ID 12: SUSPEND_DRAWStart

Channel: Diagnostic
Level: Verbose
Task: SUSPEND_DRAW
Opcode: Start

Fields #

Name	Description
`channelHandle` UInt32
`resourceType` UInt32
`resourcePointer` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 12,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {
    "channelHandle": 1176302592,
    "resourcePointer": 2320485493312,
    "resourceType": 42
  },
  "message": ""
}

Event ID 13: SUSPEND_DRAWStop

Channel: Diagnostic
Level: Verbose
Task: SUSPEND_DRAW
Opcode: Stop

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 13,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {},
  "message": ""
}

Event ID 14: RESUME_DRAWStart

Channel: Diagnostic
Level: Verbose
Task: RESUME_DRAW
Opcode: Start

Fields #

Name	Description
`channelHandle` UInt32
`resourceType` UInt32
`resourcePointer` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 14,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {
    "channelHandle": 1176302592,
    "resourcePointer": 2320485493312,
    "resourceType": 42
  },
  "message": ""
}

Event ID 15: RESUME_DRAWStop

Channel: Diagnostic
Level: Verbose
Task: RESUME_DRAW
Opcode: Stop

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 15,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {},
  "message": ""
}

Event ID 16: ATLAS_ALLOCATE

Channel: Diagnostic
Level: Verbose
Task: ATLAS_ALLOCATE

Fields #

Name	Description
`Id` UInt64
`Width` UInt32
`Height` UInt32
`BitDepth` UInt32
`IsTexturingAtlas` Boolean
`ChannelHandle` UInt32
`PixelFormat` UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 16,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 14040
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 17:30:17.222Z",
    "version": 0
  },
  "event_data": {
    "BitDepth": 32,
    "ChannelHandle": 2033616736,
    "Height": 448,
    "Id": 2267935568,
    "IsTexturingAtlas": true,
    "PixelFormat": 65,
    "Width": 640
  },
  "message": ""
}

Event ID 17: ATLAS_FREE

Channel: Diagnostic
Level: Verbose
Task: ATLAS_FREE

Fields #

Name	Description
`Id` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 17,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 12820
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 16:48:43.319Z",
    "version": 0
  },
  "event_data": {
    "Id": 2071728944
  },
  "message": ""
}

Event ID 18: ATLAS_ENTRY_ALLOCATE

Channel: Diagnostic
Level: Verbose
Task: ATLAS_ENTRY_ALLOCATE

Fields #

Name	Description
`AtlasId` UInt64
`X` UInt32
`Y` UInt32
`Width` UInt32
`Height` UInt32
`EntryId` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 18,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {
    "AtlasId": 2320467182688,
    "EntryId": 2286088294944,
    "Height": 3,
    "Width": 3,
    "X": 9,
    "Y": 1
  },
  "message": ""
}

Event ID 19: ATLAS_ENTRY_FREE

Channel: Diagnostic
Level: Verbose
Task: ATLAS_ENTRY_FREE

Fields #

Name	Description
`AtlasId` UInt64
`X` UInt32
`Y` UInt32
`Width` UInt32
`Height` UInt32
`EntryId` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 19,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 9672
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:14.979Z",
    "version": 0
  },
  "event_data": {
    "AtlasId": 148750832,
    "EntryId": 52098352,
    "Height": 14,
    "Width": 59,
    "X": 447,
    "Y": 35
  },
  "message": ""
}

Event ID 20: ATLAS_UTILIZATION

Channel: Diagnostic
Level: Verbose
Task: ATLAS_UTILIZATION

Fields #

Name	Description
`Id` UInt64
`Width` UInt32
`Height` UInt32
`BitDepth` UInt32
`PercentUsed` Float

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 20,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 9672
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:14.979Z",
    "version": 0
  },
  "event_data": {
    "BitDepth": 32,
    "Height": 448,
    "Id": 148750832,
    "PercentUsed": 9.072265625,
    "Width": 640
  },
  "message": ""
}

Event ID 21: SCROLLStart

Channel: Diagnostic
Task: SCROLL
Opcode: Start

Fields #

Name	Description
`channelHandle` UInt32
`resourceType` UInt32
`resourcePointer` UInt64

Event ID 22: SCROLLStop

Channel: Diagnostic
Task: SCROLL
Opcode: Stop

Event ID 23: DEVICE_CREATE

Channel: Diagnostic
Level: Verbose
Task: DEVICE_CREATE

Fields #

Name	Description
`DeviceId` UInt64
`ChannelHandle` UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 23,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 9548,
      "thread_id": 2944
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:14.116Z",
    "version": 0
  },
  "event_data": {
    "ChannelHandle": 2397632880,
    "DeviceId": 1952358094000
  },
  "message": ""
}

Event ID 24: DEVICE_DESTROY

Channel: Diagnostic
Level: Verbose
Task: DEVICE_DESTROY

Fields #

Name	Description
`DeviceId` UInt64
`ChannelHandle` UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 24,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 9548,
      "thread_id": 2944
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:20.353Z",
    "version": 0
  },
  "event_data": {
    "ChannelHandle": 10,
    "DeviceId": 1952352320048
  },
  "message": ""
}

Event ID 25: DEVICE_COMMIT

Channel: Diagnostic
Also via: realtime ETW trace
Level: Verbose
Task: DEVICE_COMMIT
Opcode: win:Info

Fields #

Name	Description
`DeviceId` UInt64
`ChannelHandle` UInt32
`LastCommittedBatchId` UInt32
`LastConfirmedBatchId` UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-DirectComposition",
    "guid": "{C44219D0-F344-11DF-A5E2-B307DFD72085}",
    "event_source_name": "",
    "event_id": 25,
    "version": 0,
    "level": 5,
    "task": 17,
    "opcode": 0,
    "keywords": "0x0000000000000006",
    "time_created": "2026-06-02T05:15:49.912+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 1648,
      "thread_id": 1704
    },
    "channel": "ETW Trace",
    "computer": "JD-DC01-2022",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "ChannelHandle": 4246923248,
    "DeviceId": 1889737972112,
    "LastCommittedBatchId": 16,
    "LastConfirmedBatchId": 16
  },
  "message": "DEVICE_COMMIT"
}

Event ID 26: ATLAS_USE_INFO

Channel: Diagnostic
Level: Verbose
Task: ATLAS_USE_INFO

Fields #

Name	Description
`Id` UInt64
`Owner` UInt64
`UseType` UInt32
`XData` Int32
`YData` Int32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 26,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.164Z",
    "version": 0
  },
  "event_data": {
    "Id": 2320477469264,
    "Owner": 2320485493312,
    "UseType": 4,
    "XData": 0,
    "YData": 0
  },
  "message": ""
}

Event ID 27: ATLAS_ENTRY_MARK_FOR_DISPOSE

Channel: Diagnostic
Level: Verbose
Task: ATLAS_ENTRY_MARK_FOR_DISPOSE

Fields #

Name	Description
`Id` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 27,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {
    "Id": 2286023995696
  },
  "message": ""
}

Event ID 28: ATLAS_ENTRY_MARK_AVAILABLE

Channel: Diagnostic
Level: Verbose
Task: ATLAS_ENTRY_MARK_AVAILABLE

Fields #

Name	Description
`Id` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 28,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 9672
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:14.979Z",
    "version": 0
  },
  "event_data": {
    "Id": 52098352
  },
  "message": ""
}

Event ID 29: ATLAS_ENTRY_REUSE

Channel: Diagnostic
Level: Verbose
Task: ATLAS_ENTRY_REUSE

Fields #

Name	Description
`AtlasId` UInt64
`X` UInt32
`Y` UInt32
`Width` UInt32
`Height` UInt32
`EntryId` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 29,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.164Z",
    "version": 0
  },
  "event_data": {
    "AtlasId": 2320467182688,
    "EntryId": 2320477469264,
    "Height": 3,
    "Width": 3,
    "X": 6,
    "Y": 1
  },
  "message": ""
}

Event ID 30: RESOURCE_RELEASE

Channel: Diagnostic
Level: Verbose
Task: RESOURCE_RELEASE

Fields #

Name	Description
`channelHandle` UInt32
`resourceHandle` UInt32
`resourcePointer` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 30,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 9548,
      "thread_id": 2944
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:13.579Z",
    "version": 0
  },
  "event_data": {
    "channelHandle": 2443178720,
    "resourceHandle": 1,
    "resourcePointer": 1952430424096
  },
  "message": ""
}

Event ID 31: CREATE_CLUMP

Channel: Diagnostic
Level: Verbose
Task: CREATE_CLUMP

Fields #

Name	Description
`clumpPointer` UInt64
`virtualSurfacePointer` UInt64
`left` UInt32
`top` UInt32
`right` UInt32
`bottom` UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 31,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {
    "bottom": 1,
    "clumpPointer": 2320821641152,
    "left": 0,
    "right": 1,
    "top": 0,
    "virtualSurfacePointer": 2320820934288
  },
  "message": ""
}

Event ID 32: DESTROY_CLUMP

Channel: Diagnostic
Level: Verbose
Task: DESTROY_CLUMP

Fields #

Name	Description
`clumpPointer` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 32,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {
    "clumpPointer": 2320821643136
  },
  "message": ""
}

Event ID 33: PUSH_DOWNStart

Channel: Diagnostic
Task: PUSH_DOWN
Opcode: Start

Fields #

Name	Description
`surfacePointer` UInt64

Event ID 34: PUSH_DOWNStop

Channel: Diagnostic
Task: PUSH_DOWN
Opcode: Stop

Fields #

Name	Description
`surfacePointer` UInt64

Event ID 35: RECLUMPStart

Channel: Diagnostic
Task: RECLUMP
Opcode: Start

Fields #

Name	Description
`surfacePointer` UInt64

Event ID 36: RECLUMPStop

Channel: Diagnostic
Task: RECLUMP
Opcode: Stop

Fields #

Name	Description
`surfacePointer` UInt64

Event ID 37: VIRTUAL_SURFACE_COUNTERS

Channel: Diagnostic
Level: Verbose
Task: VIRTUAL_SURFACE_COUNTERS

Fields #

Name	Description
`percentValidTiles` UInt32
`pixelsPerClump` UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 37,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.165Z",
    "version": 0
  },
  "event_data": {
    "percentValidTiles": 100,
    "pixelsPerClump": 1
  },
  "message": ""
}

Event ID 38: CAP_ALLOCATION_STATS

Channel: Diagnostic
Level: Verbose
Task: CAP_ALLOCATION_STATS

Fields #

Name	Description
`ChannelHandle` UInt32
`LastCommittedBatchId` UInt32
`largeSurfacesTotalAllocated` UInt64
`largeSurfacesInUseAllocated` UInt64
`largeSurfacesInUseActual` UInt64
`largeSurfacesPeakInUseActual` UInt64
`largeSurfacesAllowed` UInt64
`poolsTotalAllocated` UInt64
`poolsInUseAllocated` UInt64
`poolsInUseActual` UInt64
`poolsPeakInUseActual` UInt64
`poolsAllowed` UInt64
`largeSurfacesPendingRelease` UInt64
`poolsPendingRelease` UInt64
`largeSurfacesMaxStructuralWaste` UInt64
`poolsMaxStructuralWaste` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 38,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 1584,
      "thread_id": 1760
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:13.349Z",
    "version": 0
  },
  "event_data": {
    "ChannelHandle": 3,
    "LastCommittedBatchId": 2692970,
    "largeSurfacesAllowed": 0,
    "largeSurfacesInUseActual": 0,
    "largeSurfacesInUseAllocated": 0,
    "largeSurfacesMaxStructuralWaste": 0,
    "largeSurfacesPeakInUseActual": 0,
    "largeSurfacesPendingRelease": 0,
    "largeSurfacesTotalAllocated": 0,
    "poolsAllowed": 614400,
    "poolsInUseActual": 41752,
    "poolsInUseAllocated": 614400,
    "poolsMaxStructuralWaste": 572648,
    "poolsPeakInUseActual": 41752,
    "poolsPendingRelease": 0,
    "poolsTotalAllocated": 614400
  },
  "message": ""
}

Event ID 39: CAP_RELEASE_SURFACE

Channel: Diagnostic
Task: CAP_RELEASE_SURFACE

Fields #

Name	Description
`Id` UInt64
`Width` UInt32
`Height` UInt32

Event ID 40: BLOCK_FOR_EXCESSIVE_PENDINGStart

Channel: Diagnostic
Task: BLOCK_FOR_EXCESSIVE_PENDING
Opcode: Start

Fields #

Name	Description
`Id` UInt64

Event ID 41: BLOCK_FOR_EXCESSIVE_PENDINGStop

Channel: Diagnostic
Task: BLOCK_FOR_EXCESSIVE_PENDING
Opcode: Stop

Fields #

Name	Description
`Id` UInt64

Event ID 42: OFFER_RECLAIM

Channel: Diagnostic
Task: OFFER_RECLAIM

Fields #

Name	Description
`Id` UInt64
`Width` UInt32
`Height` UInt32

Event ID 43: OFFER_RECLAIM43

Channel: Diagnostic
Task: OFFER_RECLAIM

Fields #

Name	Description
`Id` UInt64
`Width` UInt32
`Height` UInt32
`PixelsDiscarded` Boolean
`SurfaceInvalid` Boolean

Event ID 44: CAP_MAXIMUM

Channel: Diagnostic
Also via: realtime ETW trace
Level: Verbose
Task: CAP_MAXIMUM
Opcode: Start

Fields #

Name	Description
`Id` UInt64

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-DirectComposition",
    "guid": "{C44219D0-F344-11DF-A5E2-B307DFD72085}",
    "event_source_name": "",
    "event_id": 44,
    "version": 0,
    "level": 5,
    "task": 32,
    "opcode": 1,
    "keywords": "0x0000000000000006",
    "time_created": "2026-06-02T05:15:49.912+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 1648,
      "thread_id": 1704
    },
    "channel": "ETW Trace",
    "computer": "JD-DC01-2022",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Id": 4
  },
  "message": "CAP_MAXIMUM"
}

Event ID 45: CAP_MAXIMUM

Channel: Diagnostic
Also via: realtime ETW trace
Level: Verbose
Task: CAP_MAXIMUM
Opcode: Stop

Fields #

Name	Description
`Id` UInt64

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-DirectComposition",
    "guid": "{C44219D0-F344-11DF-A5E2-B307DFD72085}",
    "event_source_name": "",
    "event_id": 45,
    "version": 0,
    "level": 5,
    "task": 32,
    "opcode": 2,
    "keywords": "0x0000000000000006",
    "time_created": "2026-06-02T05:15:49.912+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 1648,
      "thread_id": 1704
    },
    "channel": "ETW Trace",
    "computer": "JD-DC01-2022",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Id": 4
  },
  "message": "CAP_MAXIMUM"
}

Event ID 46: CREATE_SHARED_MEMORY_SECTION

Channel: Diagnostic
Level: Verbose
Task: CREATE_SHARED_MEMORY_SECTION

Fields #

Name	Description
`section` UInt64
`size` UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 46,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 9672
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 08:27:57.305Z",
    "version": 0
  },
  "event_data": {
    "section": 279320080,
    "size": 16384
  },
  "message": ""
}

Event ID 47: DESTROY_SHARED_MEMORY_SECTION

Channel: Diagnostic
Task: DESTROY_SHARED_MEMORY_SECTION

Fields #

Name	Description
`section` UInt64
`size` UInt32

Event ID 48: ALLOCATE_FROM_SHARED_MEMORY_SECTION

Channel: Diagnostic
Level: Verbose
Task: ALLOCATE_FROM_SHARED_MEMORY_SECTION

Fields #

Name	Description
`section` UInt64
`allocationSize` UInt32
`sectionSize` UInt32
`heap` Boolean

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 48,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.166Z",
    "version": 0
  },
  "event_data": {
    "allocationSize": 425,
    "heap": true,
    "section": 2320485496672,
    "sectionSize": 16384
  },
  "message": ""
}

Event ID 49: FREE_FROM_SHARED_MEMORY_SECTION

Channel: Diagnostic
Level: Verbose
Task: FREE_FROM_SHARED_MEMORY_SECTION

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 49,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.166Z",
    "version": 0
  },
  "event_data": {},
  "message": ""
}

Event ID 50: ANIMATION_SCENARIO_BEGIN

Channel: Diagnostic
Task: ANIMATION_SCENARIO_BEGIN

Fields #

Name	Description
`deviceId` UInt64
`channelHandle` UInt32
`version` UInt16
`scenarioPriority` UInt16
`flags` UInt16
`qpcInitiate` UInt64
`qpcInput` UInt64
`msIntendedDuration` UInt32
`scenarioGuid` GUID
`scenarioName` UnicodeString
`scenarioDetails` UnicodeString

Event ID 51: ANIMATION_SCENARIO_REFERENCE

Channel: Diagnostic
Task: ANIMATION_SCENARIO_REFERENCE

Fields #

Name	Description
`deviceId` UInt64
`channelHandle` UInt32
`scenarioGuid` GUID
`uniqueKey` UInt64

Event ID 52: ANIMATION_SCENARIO_UNREFERENCE

Channel: Diagnostic
Task: ANIMATION_SCENARIO_UNREFERENCE

Fields #

Name	Description
`deviceId` UInt64
`channelHandle` UInt32
`scenarioGuid` GUID
`uniqueKey` UInt64

Event ID 53: PRIMITIVE_GROUP_UPDATE

Channel: Diagnostic
Level: Verbose
Task: PRIMITIVE_GROUP_UPDATE

Fields #

Name	Description
`channelHandle` UInt32
`resourceHandle` UInt32
`flags` UInt32
`batchCount` UInt32
`totalPrimitiveCount` UInt32
`boundsLeft` Float
`boundsTop` Float
`boundsRight` Float
`boundsBottom` Float
`singlePrimitiveInfoLength` UInt16
`surfaceInfoLength` UInt16
`surfaceInfo` Binary
`primitivesLength` UInt16
`primitives` Binary

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 53,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.166Z",
    "version": 0
  },
  "event_data": {
    "batchCount": 1,
    "boundsBottom": 1.0,
    "boundsLeft": 0.0,
    "boundsRight": 1.0,
    "boundsTop": 0.0,
    "channelHandle": 58,
    "flags": 3,
    "primitives": "00000000000000000000803F0000803F250C0000",
    "primitivesLength": 20,
    "resourceHandle": 39,
    "singlePrimitiveInfoLength": 20,
    "surfaceInfo": "20127B4514020000",
    "surfaceInfoLength": 8,
    "totalPrimitiveCount": 1
  },
  "message": ""
}

Event ID 54: ATLAS_RESIZE

Channel: Diagnostic
Level: Verbose
Task: ATLAS_RESIZE

Fields #

Name	Description
`TargetX` UInt32
`TargetY` UInt32
`MinX` UInt32
`MinY` UInt32
`MaxX` UInt32
`MaxY` UInt32
`RequestX` UInt32
`RequestY` UInt32
`ShrinkX` UInt32
`ShrinkY` UInt32
`GrowX` UInt32
`GrowY` UInt32
`AtlasX` UInt32
`AtlasY` UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 54,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 14040
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 17:30:17.222Z",
    "version": 0
  },
  "event_data": {
    "AtlasX": 640,
    "AtlasY": 448,
    "GrowX": 96,
    "GrowY": 64,
    "MaxX": 1282,
    "MaxY": 864,
    "MinX": 640,
    "MinY": 448,
    "RequestX": 52,
    "RequestY": 11,
    "ShrinkX": 640,
    "ShrinkY": 448,
    "TargetX": 960,
    "TargetY": 640
  },
  "message": ""
}

Event ID 55: VISUAL_SET_INTERACTION

Channel: Diagnostic
Level: Verbose
Task: VISUAL_SET_INTERACTION

Fields #

Name	Description
`Channel` UInt32
`visualHandle` UInt32
`interactionHandle` UInt32
`visualAndChannelHandle` UInt64
`interactionAndChannelHandle` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 55,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 14040
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 17:30:25.463Z",
    "version": 0
  },
  "event_data": {
    "Channel": 2033616736,
    "interactionAndChannelHandle": 17957689410573042578,
    "interactionHandle": 914,
    "visualAndChannelHandle": 17957689410573042549,
    "visualHandle": 885
  },
  "message": ""
}

Event ID 56: VISUAL_SET_INPUTSINK

Channel: Diagnostic
Level: Verbose
Task: VISUAL_SET_INPUTSINK

Fields #

Name	Description
`visualAndChannelHandle` UInt64
`inputSinkHandle` Pointer

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 56,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 12820
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 16:48:46.119Z",
    "version": 0
  },
  "event_data": {
    "inputSinkHandle": "0x7D98",
    "visualAndChannelHandle": 9223372358977323305
  },
  "message": ""
}

Event ID 57: VISUAL_REDIRECT_MOUSE

Channel: Diagnostic
Task: VISUAL_REDIRECT_MOUSE

Fields #

Name	Description
`Channel` UInt32
`visualHandle` UInt32
`visualAndChannelHandle` UInt64
`windowHandle` Pointer
`mouseConfigMask` UInt32
`mouseConfigValues` UInt32

Event ID 58: INTERACTION_CONFIGURATION

Channel: Diagnostic
Level: Verbose
Task: INTERACTION_CONFIGURATION

Fields #

Name	Description
`Channel` UInt32
`interactionHandle` UInt32
`interactionAndChannelHandle` UInt64
`propertyId` UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 58,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 14040
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 17:30:25.462Z",
    "version": 0
  },
  "event_data": {
    "Channel": 3107899552,
    "interactionAndChannelHandle": 13348326935093051395,
    "interactionHandle": 3,
    "propertyId": 1
  },
  "message": ""
}

Event ID 59: INTERACTION_CAPTURE_POINTER

Channel: Diagnostic
Task: INTERACTION_CAPTURE_POINTER

Fields #

Name	Description
`Channel` UInt32
`interactionHandle` UInt32
`interactionAndChannelHandle` UInt64
`captureType` UInt32
`pointerId` UInt32
`pointerTimeStamp` UInt64

Event ID 60: FLIP_CONSUME_PRESENTStart

Channel: Diagnostic
Task: FLIP_CONSUME_PRESENT
Opcode: Start

Event ID 61: FLIP_CONSUME_PRESENTStop

Channel: Diagnostic
Task: FLIP_CONSUME_PRESENT
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 62: FLIP_CONSUME_PRESENT_CALLOUTStart

Channel: Diagnostic
Task: FLIP_CONSUME_PRESENT_CALLOUT
Opcode: Start

Event ID 63: FLIP_CONSUME_PRESENT_CALLOUTStop

Channel: Diagnostic
Task: FLIP_CONSUME_PRESENT_CALLOUT
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 64: FLIP_PRODUCE_PRESENTStart

Channel: Diagnostic
Task: FLIP_PRODUCE_PRESENT
Opcode: Start

Event ID 65: FLIP_PRODUCE_PRESENTStop

Channel: Diagnostic
Task: FLIP_PRODUCE_PRESENT
Opcode: Stop

Fields #

Name	Description
`presentId` UInt64
`result` UInt32

Event ID 66: ANIMATION_ENDED

Channel: Diagnostic
Level: Verbose
Task: ANIMATION_ENDED

Fields #

Name	Description
`eventType` UInt32
`resourceHandle` UInt32
`callbackId` UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 66,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 9672
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 08:27:57.353Z",
    "version": 0
  },
  "event_data": {
    "callbackId": 1600132638,
    "eventType": 16,
    "resourceHandle": 4361
  },
  "message": ""
}

Event ID 67: REGISTERANIMATIONTARGET

Channel: Diagnostic
Level: Verbose
Task: REGISTERANIMATIONTARGET

Fields #

Name	Description
`objectHandle` UInt32
`propertyHandle` UInt32
`animatorResourceHandle` UInt32
`animatorCallbackId` UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 67,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 9672
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 08:27:57.299Z",
    "version": 0
  },
  "event_data": {
    "animatorCallbackId": 1669338463,
    "animatorResourceHandle": 4283,
    "objectHandle": 4282,
    "propertyHandle": 1
  },
  "message": ""
}

Event ID 68: EXPRESSIONANIMATOR_INIT

Channel: Diagnostic
Level: Verbose
Task: EXPRESSIONANIMATOR_INIT

Fields #

Name	Description
`expressionAnimatorInstance` UInt64
`nodesBuffer` UInt64
`cacheBuffer` UInt64
`cacheBufferParam` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 68,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 9672
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 08:27:57.299Z",
    "version": 0
  },
  "event_data": {
    "cacheBuffer": 126951104,
    "cacheBufferParam": 126951104,
    "expressionAnimatorInstance": 321421856,
    "nodesBuffer": 126951024
  },
  "message": ""
}

Event ID 69: EXPRESSIONANIMATOR_RELEASE_RESOURCES

Channel: Diagnostic
Level: Verbose
Task: EXPRESSIONANIMATOR_RELEASE_RESOURCES

Fields #

Name	Description
`expressionAnimatorInstance` UInt64
`nodesBuffer` UInt64
`cacheBuffer` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 69,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 8992,
      "thread_id": 9672
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 16:48:50.407Z",
    "version": 0
  },
  "event_data": {
    "cacheBuffer": 123415728,
    "expressionAnimatorInstance": 2044049456,
    "nodesBuffer": 123414736
  },
  "message": ""
}

Event ID 70: SHAREALLOCATIONBASE_ONMARSHALERRELEASE

Channel: Diagnostic
Task: SHAREALLOCATIONBASE_ONMARSHALERRELEASE

Fields #

Name	Description
`instance` UInt64

Event ID 71: SHAREALLOCATIONBASE_DISPOSEONDELAYEDDESTRUCTION

Channel: Diagnostic
Level: Verbose
Task: SHAREALLOCATIONBASE_DISPOSEONDELAYEDDESTRUCTION

Fields #

Name	Description
`instance` UInt64

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-DirectComposition/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 71,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-Windows-DirectComposition",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 23:45:15.166Z",
    "version": 0
  },
  "event_data": {
    "instance": 2320875587808
  },
  "message": ""
}

Event ID 72: DELEGATEDINKTRAIL_COOKIEPUSHED

Channel: Diagnostic
Task: DELEGATEDINKTRAIL_COOKIEPUSHED

Fields #

Name	Description
`CookieTracker` Pointer
`CookieValue` UInt32

Event ID 73: DELEGATEDINKTRAIL_REMOVETRAILPOINTS

Channel: Diagnostic
Task: DELEGATEDINKTRAIL_REMOVETRAILPOINTS

Fields #

Name	Description
`InkTrail` Pointer
`GenerationId` UInt32
`LookupId` UInt32

Event ID 74: DELEGATEDINKTRAIL_STARTNEWTRAIL

Channel: Diagnostic
Task: DELEGATEDINKTRAIL_STARTNEWTRAIL

Fields #

Name	Description
`InkTrail` Pointer
`PrevGenerationId` UInt32
`Color_R` Float
`Color_G` Float
`Color_B` Float
`Color_A` Float

Event ID 75: WINCOMP_EFFECT_CREATE

Channel: Diagnostic
Task: WINCOMP_EFFECT_CREATE

Fields #

Name	Description
`channelHandle` UInt32
`resourceHandle` UInt32
`Graph` AnsiString

Provenance

ETW provider GUID {C44219D0-F344-11DF-A5E2-B307DFD72085}

Defined in dcomp.dll, which carries the event manifest.

WS2022-20348.4893, sample captured from a live trace, binary version 10.0.20348.4647, captured 2026-06-02 — Manifest XML pack, 1.9 MB
WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.4647, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB