Event Tracing for Windows

Setting up an autologger with WPR

Sowoon Pyo June 25, 2021 Jun 25, 2021 06/25/21

WPR supports configuring an autologger. Setting up the autologger and collecting the autologger trace is as easy as starting/stopping the trace. This article introduces how to start, stop, and cancel the autologger as well as export the autologger registry keys.

WPR fails to start, insufficient system resources?

Sowoon Pyo March 31, 2021 Mar 31, 2021 03/31/21

From time to time, I get questions about insufficient system resource error (0x800705aa) when starting the trace using WPR. The error can be frustrating, especially when there is enough memory and storage space left on the system. Some people try to solve the issue by increasing the system resources such as killing some apps and services. It ...

Controlling the event session name with the instance name

Sowoon Pyo January 27, 2021 Jan 27, 2021 01/27/21

In this post, I explained what the session name is in ETW and how to set the session name through WPR with the instancename option.

Authoring Custom Profiles – Part 2

Sowoon Pyo December 10, 2020 Dec 10, 2020 12/10/20

In this post, we enhance the simple custom profile for WPR by adding the system tracing session. Because kernel events provide critical information about processes, threads, modules, and more, collecting the system events greatly extends your ability to analyze traces and diagnose issues.

Authoring custom profiles – Part 1

Sowoon Pyo November 10, 2020 Nov 10, 2020 11/10/20

This is the first post in a multi-part series about authoring custom profiles for Windows Performance Recorder (WPR.) In a previous post, we have looked at how to start a trace with built-in profiles. The built-in profiles offer wide variety of preset profiles that we can use for different scenarios. There are built-in profiles for CPU ...

Performance and Diagnostics

Event Tracing for Windows - Performance and Diagnostics