This project has moved. For the latest updates, please go here.

Consume real-time ETW events from registered providers

Dec 13, 2011 at 1:35 PM

Hi and many thanks for maintaining this project.

I am currently looking for a way to consume real-time events produced by the Microsoft-Windows-OfflineFiles provider or one of its channels such as Microsoft-Windows-OfflineFiles/SyncLog to be precise.

After having come across the System.Diagnostics.Eventing.Reader namespace, I sadly realised that there is apparently still no .NET support for registering a watcher with an ETW provider (much like using the EventLogWatcher class for consuming event log entries).

I also read in some of the discussions here that it will not be until your library's next release that registered providers will be supported.  You also pointed it out in the following discussion: 237948. 

Have you got any idea how I could consume such event messages until the next release?

Your help is greatly appreciated.

Regards,

Witali

Dec 14, 2011 at 7:32 PM

The next version of TraceEvent should come out by the end of the calendar year.  

If that is not good enough, I have seen ETW watcher classes on the web, so some web searches are worthwhile.