Edit

Share via

!wmitrace.eventlogdump

  • Article

The !wmitrace.eventlogdump extension displays the contents of the specified logger. The display is formatted like an event log.

!wmitrace.eventlogdump { LoggerID | LoggerName }

Parameters

LoggerID
Specifies the trace session. LoggerID is an ordinal number that the system assigns to each trace session on the computer.

LoggerName
Specifies the trace session. LoggerName is the text name that was specified when the trace session was started.

DLL

Wmitrace.dll

This extension is available in Windows 2000 and later versions of Windows. If you want to use this extension with Windows 2000, you must first copy the Wmitrace.dll file from the winxp subdirectory of the Debugging Tools for Windows installation directory to the w2kfre subdirectory.

Additional Information

For a conceptual overview of event tracing, see the Microsoft Windows SDK. For information about tracing tools, see the Windows Driver Kit (WDK).

Remarks

This extension is similar to the !wmitrace.logdump extension, except that the output of !wmitrace.eventlogdump is formatted in event log style, and the output of !wmitrace.logdump is formatted in Windows software trace preprocessor (WPP) style. You should choose the extension whose format is appropriate for the data you wish to display.

To find the logger ID of a trace session, use the !wmitrace.strdump extension. Alternatively, you can use the Tracelog command tracelog -l to list the trace sessions and their basic properties, including the logger ID.