Including CeLogFlush in a Run-Time Image (Windows Embedded CE 6.0)
If you include CeLogFlush.exe in your run-time image, then it runs automatically in the background to periodically flush the CeLog event tracking data from a RAM buffer to a log file.
Note: Do not add CeLog to shipping devices. The goal is to avoid performance or memory loss due to CeLog and also to reduce the attack-surface through which an attacker could try to compromise the system.
To enable CeLog event-tracking
From the Project menu, select Properties.
In the Property Pages window, select Configuration Properties and then select Build Options.
In the Build Options box, make sure Enable Event Tracking During Boot (IMGCELOGENABLE=1) is checked.
This adds CeLog.dll to ROM and causes the kernel to load it during boot.
Make sure Flush tracked events to Release Directory (IMGAUTOFLUSH=1) is checked.
This adds CeLogFlush.exe to ROM and causes the OS to launch it during boot.
Build the run-time image.