Microsoft KB Archive/302552

= HOW TO: Create and Configure Performance Monitor Trace Logs in Windows 2000 =

PSS ID Number: 302552

Article Last Modified on 11/4/2003

-

The information in this article applies to:


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Professional

-



This article was previously published under Q302552



IN THIS TASK

 * SUMMARY
 * ** How to Create a Trace Log
 * How to Configure Trace Logs
 * *** Define Trace Providers and Events
 * Define Trace Buffers

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SUMMARY
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

This step-by-step article describes how to create and configure Trace logs.

back to the top

How to Create a Trace Log
To create or modify a log configuration, you must have Full Control permission for the following registry key that controls the Performance Logs and Alerts service:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysmonLog\Log Queries

To create a trace log:
 * 1) Click Start, point to Programs, point to Administrative Tools, and then click Performance.
 * 2) Double-click Performance Logs and Alerts, and then click Trace Logs.

NOTE: Any existing logs are listed in the Details pane. A green icon indicates that the logs are running, and a red icon indicates logs that have stopped.
 * 1) Right-click a blank area in the Details pane, and then click New Log Settings.
 * 2) In the Name box, type the name of the trace log you want to create, and then click OK.

NOTE: By default, the log file is created in the PerfLogs folder in your root folder, a sequence number is appended to the file name you typed and the sequential trace file type with the .etl file extension. Use the Log Files and Advanced tabs to modify these parameters or define other parameters for your log. To define providers and events to log, use the General tab. To specify when you want logging to occur, use the Schedule tab.

back to the top

How to Configure Trace Logs
Trace logging of file details and page faults can generate an extremely large amount of data. Because of this, you should limit trace logging by limiting the file details and page fault options to a maximum of two hours. Note that only one instance of each trace provider can be enabled at any given time.

back to the top

Define Trace Providers and Events

 * 1) Click Start, point to Programs, point to Administrative Tools, and then click Performance.
 * 2) Double-click Performance Logs and Alerts, and then click Trace Logs.
 * 3) In the Details pane, double-click the log.
 * 4) For a list of the installed providers and their status (enabled or not), click Provider Status. By default, the Nonsystem providers option is selected to keep trace-logging overhead to a minimum.
 * 5) If you click Events logged by system provider, a default provider (the Windows kernel trace provider) is used to monitor processes, threads, and other activity. To define events for logging, click to select the appropriate check boxes.
 * 6) If you click Nonsystem providers, you can select the data providers you want, for example, if you have written your own providers. Use the Add or Remove buttons as needed.

back to the top

Define Trace Buffers

 * 1) Click Start, point to Programs, point to Administrative Tools, and then click Performance.
 * 2) Double-click Performance Logs and Alerts, and then click Trace Logs.
 * 3) In the Details pane, double-click the log, and then click the Advanced tab.
 * 4) In the Buffer size box, specify the size (in kilobytes) of the buffer you want to use for trace data.
 * 5) In the Minimum box, specify the smallest number of buffers you want to use for trace data.
 * 6) In the Maximum box, specify the largest number of buffers you want to use for trace data.
 * 7) To have the trace provider periodically flush the buffers, click to select the Transfer data from buffers to log file every check box, and then specify the transfer interval in seconds.

back to the top

Keywords: kbhowto kbHOWTOmaster KB302552

Technology: kbwin2000Pro kbwin2000ProSearch kbwin2000Search kbwin2000Serv kbwin2000ServSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.