Xperf Actions

Xperf actions are trace processing components that collate event information to produce text reports. Actions produce summarized reports that are specific to a set of events such as registry accesses, context switches, file accesses, or system configuration.

All actions are invoked using the following command-line pattern:

xperf -i input.etl -o output.txt -a <action_name> [action_parameters]

Where input.etl is the name of the trace file, output.txt is the name of the report file, and <action_name> is the name of the action. The action name is always preceded by the -a command-line switch. The action name can be followed by one or more action-specific parameters.

In This Section

Action	Description
boot	Shows boot and shut down statistics.
bootprefetch	Shows boot pre-fetching events.
cpudisk	Shows CPU/disk activity.
cswitch	Shows context switch data.
diskio	Shows disk I/O statistics.
diskidlehistogram	Shows a histogram of disk activity and idle times.
dpcisr	Shows deferred procedure call and interrupt service routine statistics.
drvdelay	Shows driver delays.
dumper	Dumps events in text form.
filename	Shows file names.
focuschange	Shows the Windows thread focus change events.
hardfault	Shows hard fault statistics by process and file.
heap	Shows process heap information.
marks	Shows marks information.
pagefault	Shows page fault information.
perfctrs	Shows process performance counters.
pnp	Shows Plug and Play events.
prefetch	Shows prefetch information.
process	Shows process, thread, and image information.
profile	Shows sampled profiler data.
registry	Shows registry access statistics.
services	Shows service status information.
shutdown	Shows shutdown statistics.
spinlock	Shows spinlock information.
stack	Shows stack information.
suspend	Shows suspend transition information.
sysconfig	Shows system configuration information.
tracestats	Shows trace statistics.
winlogon	Shows Winlogon events.

Related topics

Xperf Command-Line Reference