Questions tagged [etw-eventsource]

Event Tracing for Windows (ETW) is a fast, scalable logging mechanism built into the Windows operating system. The EventSource class simplifies writing ETW provider as simple as writing just a few lines of code instead of creating a XML manifest, using the tool (MC.exe) to generate source code and registering the provider using the tool WEVTUTIL when the application was deployed.

Event Tracing for Windows (ETW) is a fast, scalable logging mechanism built into the Windows operating system. The EventSource class simplifies writing ETW provider as simple as writing just a few lines of code instead of creating a XML manifest, using the tool (MC.exe) to generate source code and registering the provider using the tool WEVTUTIL when the application was deployed.

Small Demo Example:

sealed class MinimalEventSource : EventSource
{
    public void Load(long ImageBase, string Name) { WriteEvent(1, ImageBase, Name); }

    public static MinimalEventSource Log = new MinimalEventSource();
}

Calling in code:

MinimalEventSource.Log.Load(10, “MyFile”);
68 questions
0
votes
2 answers

EventSource events show empty in Windows Performance Analyzer

I can successfully generate ETW events with EventSource in a C# console app; however if I store the events in a an ETL file and use Windows Performance Analyzer, the columns corresponding to the payload values, the event name and the provider name…
rcxr
  • 31
  • 3
0
votes
0 answers

How to create an EventSource without admin rights?

I have an scenario where I have to create event sources without admin rights as the app needs to do it at runtime. The installer executes with admin rights so what I can do it to modify whatever it needs to be modified to avoid the need of admin…
Ignacio Soler Garcia
  • 21,122
  • 31
  • 128
  • 207
0
votes
1 answer

Concurrency Visualizer unable to see custom ETW event

I have a custom EventSource that I am using to log an ETW event: [EventSource(Name = "MyEventSource")] public class MyEventSource : EventSource { [Event(1, Message = "Test", Level = EventLevel.Informational)] public void Run(long fundId,…
Zelestor
  • 93
  • 6
0
votes
1 answer

How can I get fileversion information from a ETL file

With the Microsoft TraceEvent Library it is possible to parse ETL files which are generated by xperf, WPR or PerfView. I found out that the Event ImageIDFileVersion in TracEvent shows me the file version and the Event ImageGroup shows me the file…
magicandre1981
  • 27,895
  • 5
  • 86
  • 127
0
votes
1 answer

System.Diagnostic.Tracing.EventSource - no events in EventListener

I am experiencing some trouble with the .NET 4.5 System.Diagnostic.Tracing.EventSource. You can find the complete EventSource implementation at the end of this post. When I create a listener for this EventSource it never receives an event. All tips,…
Simon Smeets
  • 581
  • 6
  • 17
0
votes
1 answer

Why is the SLAB service warning of dropped events for my ETW event source?

I'm getting this error on one of my servers: EventId : 806, Level : Warning, Message : Some events will be lost because of bu ffer overruns or schema synchronization delays in trace session: Microsoft-Seman ticLogging-Etw-Mobile2ConsoleListener.,…
jaffa
  • 26,770
  • 50
  • 178
  • 289
0
votes
0 answers

Has Microsoft.Diagnostics.Tracing.EventSource dropped support for Channels?

I've just upgraded my service to use the latest NuGet ETW package, previously using the beta version. However, it seems channel support has been dropped from the event source. Does anyone have an idea what has happened here?
jaffa
  • 26,770
  • 50
  • 178
  • 289
-1
votes
1 answer

ETW Logging - TraceEventSession enable multiple event provider for listener

I am developing a ETW listener to listen to all available event sources in my system. Q1: Please find the sample code below: providerName = "ETW-TEST-APPLICATION"; sessionName = "ETW-TEST-APPLICATION"; using (var session = new…
KRP
  • 131
  • 1
  • 3
  • 15
1 2 3 4
5