tracerpt
The tracerpt command parses Event Trace Logs, log files generated by Performance Monitor, and real-time Event Trace providers. Windows commands reference
On Windows File tracerpt.exe
Windows
The tracerpt command parses Event Trace Logs, log files generated by Performance Monitor, and real-time Event Trace providers. It also generates dump files, report files, and report schemas.
tracerpt <[-l] <value [value [...]]>|-rt <session_name [session_name [...]]>> [options]
To create a report based on the two event logs logfile1.etl and logfile2.etl, and to create the dump file logdump.xml in XML format, type
tracerpt logfile1.etl logfile2.etl -o logdump.xml -of XMLIdentify-oSpecifies to create a text output file. Windows commands reference-ofEVTX XML> Specifies the dump file format. Windows commands referenceTo create a report based on the event log logfile.etl, to create the dump file logdmp.xml in XML format, to use best efforts to identify events not in the schema, and to produce a summary report file logdump.txt and a report file, logrpt.xml, type
tracerpt logfile.etl -o logdmp.xml -of XML -lr -summary logdmp.txt -report logrpt.xmlIdentify-oSpecifies to create a text output file. Windows commands reference-ofEVTX XML> Specifies the dump file format. Windows commands reference-lrSpecifies to be less restrictive. Windows commands reference-summarySpecifies to create a summary report text file. Windows commands reference-reportSpecifies to create a text output report file. Windows commands referenceTo use the two event logs logfile1.etl and logfile2.etl to produce a dump file, and to report file with the default filenames, type
tracerpt logfile1.etl logfile2.etl -o -reportIdentify-oSpecifies to create a text output file. Windows commands reference-reportSpecifies to create a text output report file. Windows commands referenceTo use the event log logfile.etl and the performance log counterfile.blg to produce the report file logrpt.xml and the Microsoft-specific XML schema file schema.xml, type
tracerpt logfile.etl counterfile.blg -report logrpt.xml -df schema.xmlIdentify-reportSpecifies to create a text output report file. Windows commands reference-dfSpecifies to create a Microsoft-specific counting/reporting schema file. Windows commands referenceTo read the real-time Event Trace Session NT Kernel Logger and to produce the dump file logfile.csv in CSV format, type
tracerpt -rt NT Kernel Logger -o logfile.csv -of CSVIdentify-rtSpecifies the Real-time Event Trace Session data sources. Windows commands reference-oSpecifies to create a text output file. Windows commands reference-ofEVTX XML> Specifies the dump file format. Windows commands referenceShow 21 options
-config <filename>Specifies which settings file to load, which includes your command options.-ySpecifies to answer yes to all questions, without prompting.-f <XMLHTML> Specifies the report file format.-of <CSVEVTX XML> Specifies the dump file format. The default is XML*.-df <filename>Specifies to create a Microsoft-specific counting/reporting schema file.-int <filename>Specifies to dump the interpreted event structure to the specified file.-rtsSpecifies to add the report raw timestamp in the event trace header. Can only be used with -o. It's not supported with -report or -summary.-tmf <filename>Specifies which Trace Message Format definition file to use.-tp <value>Specifies the TMF file search path. Multiple paths may be used, separated by a semicolon (;).-i <value>Specifies the provider image path. The matching PDB will be located in the Symbol Server. Multiple paths can be used, separated by a semicolon (;).-pdb <value>Specifies the symbol server path. Multiple paths can be used, separated by a semicolon (;).-gmtSpecifies to convert WPP payload timestamps to Greenwich Mean Time.-rl <value>Specifies the System Report Level from 1 to 5. Default is *1*.-summary [filename]Specifies to create a summary report text file. The filename, if not specified, is summary.txt.-o [filename]Specifies to create a text output file. The filename, if not specified, is dumpfile.xml.-report [filename]Specifies to create a text output report file. The filename, if not specified, is workload.xml.-lrSpecifies to be less restrictive. This uses best efforts for events that don't match the events schema.-export [filename]Specifies to create an Event Schema export file. The filename, if not specified, is schema.man.[-l] <value [value […]]>Specifies the Event Trace log file to process.-rt <session_name [session_name […]]>Specifies the Real-time Event Trace Session data sources.-?Displays help at the command prompt.