1

I'm trying to trace ETW messages using the Microsoft Message Analyzer.

In my searching I found this thread about how to configure it on Windows 7:

But I do not understand the following steps:

  1. Verify that the MessageFileName and ResourceFileName file of iisres.dll is already on your Windows workstation.
  2. Export both of these registry keys to .reg files and import them to your Windows workstation.
  3. Launch Message Analyzer as a local admin on your Windows workstation, and verify that Microsoft-Windows-IIS-Logging is available as a Provider.

How do I verify that the MessageFileName and ResourceFileName file of iisres.dll are already on my workstation (are these sub files inside the iisres.dll)?

Which registry keys do I export/import from the server and to the workstation?

And how do I verify that the provider is in Message Analyzer?

magicandre1981
  • 1,145
  • 2
  • 11
  • 20
leeand00
  • 4,869
  • 15
  • 69
  • 110
  • My apologies if this question belongs somewhere, else like stackoverflow, if it does, please move it there. – leeand00 Apr 25 '19 at 15:14
  • run [perfview to capture the events](https://stackoverflow.com/a/54114220/1466046): `PerfView /OnlyProviders=Microsoft-Windows-IIS-Logging` – magicandre1981 Apr 28 '19 at 15:19

0 Answers0