!wmitrace.enable

The !wmitrace.enable extension enables a provider for the specified Event Tracing for Windows (ETW) trace session.

!wmitrace.enable { LoggerID | LoggerName } GUID [-level Num] [-matchallkw Num] [-matchanykw Num] [-enableproperty Num] [-flag Num] 

Parameters

LoggerID
Specifies the trace session. LoggerID is an ordinal number that the system assigns to each trace session on the computer.

LoggerName
Specifies the trace session. LoggerName is the text name that was specified when the trace session was started.

GUID
Specifies the GUID of the provider to be enabled.

-level Num
Specifies the level. Num can be any integer.

-matchallkw Num
Specifies one or more keywords. If multiple keywords are specified, the provider will be enabled only if all keywords are matched. Num can be any integer.

-matchanykw Num
Specifies one or more keywords. If multiple keywords are specified, the provider will be enabled if at least one keyword is matched. Num can be any integer. The effects of this parameter overlap with the effects of the -flag parameter.

-enableproperty Num
Specifies the enable property. Num can be any integer.

-flag Num
Specifies one or more flags. Num can be any integer. The effects of this parameter overlap with the effects of the -matchanykw parameter.

DLL

Wmitrace.dll

This extension is available in Windows 7 and later versions of Windows.

Additional Information

For a conceptual overview of event tracing, see the Microsoft Windows SDK. For information about tracing tools, see the Windows Driver Kit (WDK).

Remarks

After using this extension, you must resume program execution (for example, by using the g (Go) command) in order for it to take effect. After a brief time, the target computer automatically breaks into the debugger again.

To disable a provider, use !wmitrace.disable.