Microsoft (R) tracelog.exe (6.1.7600.16385)
© Microsoft Corporation. All rights reserved.
Usage: tracelog [actions] [options] | [-h | -help | -?]
actions:
-start [LoggerName] Starts up the [LoggerName] trace session
-stop [LoggerName] Stops the [LoggerName] trace session
-update [LoggerName] Updates the [LoggerName] trace session
-enable [LoggerName] Enables providers for the [LoggerName] session
-enableex [LoggerName] Enables providers for the [LoggerName] session
using EnableTraceEx2
-timeout <n> Forces enable to be synchronous with timeout value in ms
-capturestate [LoggerName] Request provider to log state information
-disable [LoggerName] Disables providers for the [LoggerName] session
-disableex [LoggerName] Disables providers for the [LoggerName] session
using EnableTraceEx
-flush [LoggerName] Flushes the [LoggerName] active buffers
-addautologger [LoggerName] creates the registry keys [LoggerName]
autologger session. Users must provide
session GUID using -sessionguid parameter
-remove GlobalLogger Removes registry keys that activate GlobalLogger
-enumguid Enumerate Registered Trace Guids
-enumguidex [#<guid>] Enumerate Registered Trace Guids
-q [LoggerName] Query status of [LoggerName] trace session
-l List all trace sessions
-lp Lists the providers enabled to each session returned by a query
-x Stops all active trace sessions
options:
-b <n> Sets buffer size to <n> Kbytes
-min <n> Sets minimum buffers
-max <n> Sets maximum buffers
-f <name> Log to file <name>
-kb Use KiloBytes for Log File size.
-append Append to file
-prealloc Pre-allocate
-seq <n> Sequential logfile of up to n Mbytes
-cir <n> Circular logfile of n Mbytes
-newfile <n> Log to a new file after every n Mbytes.
File name needs to contain %d
-UseSystemTime Use System Time clock
-UsePerfCounter Use Perf Counter clock
-UseCPUCycle Use CPU Cycle count clock
-ft <n> Set flush timer to n seconds
-paged Use pageable memory for buffers
-noprocess Disable Process Start/End tracing
-nothread Disable Thread Start/End tracing
-nodisk Disable Disk I/O tracing
-nonet Disable Network TCP/IP tracing
-fio Enable file I/O tracing
-pf Enable page faults tracing
-hf Enable hard faults tracing
-img Enable image load tracing
-cm Enable registry calls tracing
-um Enable Process Private tracing
-guid <file> Enable tracing for providers in file
#<guid> Enable tracing for a provider by guid
-rt Enable tracing in real time mode
-kd Enable tracing in kernel debugger
-age <n> Modify aging decay time to n minutes
-level <n> Enable Level passed to the providers
-matchanykw <n> MatchAnyKeyword to the providers
-matchallkw <n> MatchAllKeyword to the providers
-enableproperty <n> Enable tracing with enable property (enableex/disableex only)
-sourceguid #<guid> Enable tracing with Source Guid (enableex/disableex only)
-flag <n> Enable Flags passed to the providers
-eflag <n> <flag...> Enable kernel events using extended flags
-dpcisr Enable kerenl events for DPC/ISR analysis
-ls Generate Local Sequence Numbers
-gs Generate Global Squence Numbers
-heap Use this for Heap Guid
-critsec Use this for CritSec Guid
-pids <n> <pid1 pid2 ... >
Tracing for Heap and CritSec for different process
-buffering Enable tracing in buffering mode
-secure Enable tracing in secure mode
-sessionguid Autologger session GUID Registry value
-lowcapacity Don't create buffers per processor
-h
-help
-? Display usage information