Reading ETW tracing using Event Viewer
I was looking for a tool to read ETW tracing data. It turned out that the tool I need is right under my nose. Event Viewer.
The problem was that ETW (using the logman tool) produces etl files that are not readable by Event Viewer. Fortunately there is a trick. I tried to load the etl file by Event Viewer using open saved log and it failed to load.
Event Viewer
I saved the etl file as an evtx file and now I could see the tracing data.
For WCF and WF you do not need the etl file. All you have to do is follow the following procedure:
Enable the analytic and debug logs.
-
In the tree view in Event Viewer, navigate to Event Viewer->Applications and Services Logs->Microsoft. Right-click on Microsoft and select View->Show Analytic and Debug Logs.
Ensure that the Show Analytic and Debug Logs option is checked.
Enable the Analytic log.
In the tree view in Event Viewer, navigate to Event Viewer->Applications and Services Logs->Microsoft->WCF->WF-Development. Right-click on Analytic and select Enable Log.
Activate a WCF service with tracing enabled and all the tracing data will be there.