www.logparser.com
Log Parser ETW Input Format

(Back to Home)

The ETW input format parses Enterprise Tracing for Windows trace log files (.etl files) and live ETW trace sessions.

The following example demonstrates how to select the event type and user data from an IIS FTP trace session:

LogParser "select EventTypeName, UserData from ftp.etl"

For a detailed example of the ETW input format in action, see the following links:

• Troubleshooting Custom FTP Providers with ETW
• FTP ETW Tracing and IIS 8
• FTP ETW Tracing and IIS 8 - Part 2