FAQ Database Discussion Community

Semantic Logging Out-Of-Process ElasticSearch Configuration

I am trying to get ElasticSearch configured correctly with ETW/Out-Of-Process logging. I have successfully installed the latest version of the Out-Of-Process logger and followed the steps outlined on the SLAB site. My SemanticLogging-svc.xml looks like this: <?xml version="1.0" encoding="utf-8" ?> <configuration xmlns="http://schemas.microsoft.com/practices/2013/entlib/semanticlogging/etw" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"...

Activate Stacks only for some specific ETW Tasks in a provider?

Since Windows 7 it is possible to activate callstacks for usermode events. This works fine, but sometimes activating stacks for all tasks/Events in a provider is not needed and it would be nice to only activate stacks for some specific Tasks. Is this possible?

Missing ETW EventSource table in Azure SDK 2.6

I'm trying to use ETW for logging with several custom EventSource classes in Azure SDK 2.6. When testing locally with the compute/storage emulator, three of my custom WADMyEventXYZ tables show up; however, the final expected table "WADMyDataSets" never seems to be created. How should I determine what is causing this...

Using Logman does not collect events

HI I'm using logman to create an etl file of my WPP events. I use the following commands logman start "Session" -o "C:\\Trace.etl" -p "{2ad34227-4f02-4a89-8c0c-673b86619176}" 0xFFFF -ets logman stop "Session" -ets but I always get a 8KB file and when viewing with traceview with pdb/ etl files nothing exists there....

How can I capture process names using the TraceEvent library?

I'm using the TraceEvent library to capture ETW traces, but I'm not able to determine the name of the process that caused an event. Here is what I have so far: var session = new TraceEventSession(sessionName, null); session.EnableProvider(MyEventSource.Log.Guid, TraceEventLevel.Informational, options: TraceEventOptions.Stacks); Task.Delay(1000).ContinueWith(t => session.Stop()); // for testing, deal with it...

How do I listen to TPL TaskStarted/TaskCompleted ETW events

I am interested in listening to ETW (event tracing for Windows) TPL events, in particular I'd like to know when a Task starts and when it stops. Here's a sample program I've used for testing: using System; using System.Collections.Generic; using System.Diagnostics.Tracing; using System.Linq; using System.Text; using System.Threading; using System.Threading.Tasks; namespace...

Differences between the usage of log4net, ETW & TraceLogging

I have used Debug.WriteLine to debug an existing legacy application to find the program flow. Now I'm studying an event (message) based application which contains multiple services which react on events. It uses many cloud (like Azure) resources. I'm trying to understand the different logging system ETW (Event Tracing For...