!wmitrace.logsave

The !wmitrace.logsave extension writes the current contents of the trace buffers for a trace session to a file.

Syntax

!wmitrace.logsave LoggerID Filename

Parameters

LoggerID

Identifies the trace session. Logger ID is an ordinal number that the system assigns to each trace session on the computer.

Filename

Specifies a path (optional) and file name for the output file.

DLL

Comments

This extension displays only the traces that are in memory at the time. It does not display trace messages that have been flushed from the buffers and delivered to an event trace log file or to a trace consumer.

Trace session buffers store trace messages until they are flushed to a log file or to a trace consumer for a real-time display. This extension saves the contents the buffers that are in physical memory to the specified file.

The output is written in binary format. Typically, these files use the .etl (event trace log) filename extension.

Before using this extension, use !wmitrace.searchpath or !wmitrace.tmffile to indicate the location of the trace message format files to format the messages in the buffer so that they can be displayed in readable form.

When you use Tracelog to start a trace session with circular buffering (-buffering), you can use this extension to save the current buffer contents.

To find the logger ID of a trace session, use Tracelog to list the trace sessions and their basic properties. The command is tracelog -l.

Additional Information

For a conceptual overview of event tracing, see the Microsoft Windows SDK. For information about Tracelog, see "Tracelog" in the Windows Driver Kit (WDK).