question

SnikoImper-4153 avatar image
0 Votes"
SnikoImper-4153 asked bharathn-msft commented

how do you distinguish ETW events from plugin events in Application Insights

Just to be clear I am explaining the terminology first.
ETW stands for event tracing facility and is activated for IIS by these registry lines

MicrosoftAppInsights_ManagedHttpModulePath=C:\Program Files\WindowsPowerShell\Modules\Az.ApplicationMonitor\1.1.0\content\Runtime\Microsoft.ApplicationInsights.RedfieldIISModule.dll
MicrosoftAppInsights_ManagedHttpModuleType=Microsoft.ApplicationInsights.RedfieldIISModule.RedfieldIISModule


On the other hand, the Application Insights plugin is a native library (a profiler) written in C/C++ which is loaded by the .NET runtime on start and is responsible for instrumenting select methods in certain assemblies. In AI it is used to collect mostly SQL commands AFAIK.

QUESTION - How can I tell whether an event that is stored either locally on the windows box, or remotely on azure, originated from ETW or the plugin?
This question is deceptively simple, yet I have had too much difficulty arriving at an answer.
I've spent several days looking into it, opened support cases, emailed 3 MSFT engineers, still nothing.


azure-monitorazure-virtual-machines-extension
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@SnikoImper-4153 Welcome to Microsoft Q&A platform and thanks for reaching out. Apologies for your experience, we will review your query and circle back at the earliest.

0 Votes 0 ·

@SnikoImper-4153 - Thank you for reaching out to us with details, we will review with our internal product team and circle back accordingly.

0 Votes 0 ·

0 Answers