Home/ Questions/Q 576245
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-13T14:01:37+00:00

I’m researching Event Tracing for Windows (ETW) to allow a user-mode windows client to

  • 0

I’m researching Event Tracing for Windows (ETW) to allow a user-mode windows client to write out tracing information. The existing documentation is, to put it lightly, insanely incomplete. What would really help is a simple C++ example that writes out tracing messages using ETW. Does such an example exist? Is there other ETW documentation you might recommend?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    To write a Provider for ETW, you have two options:

    • write it as a manifest-based provider (preferred for Windows Vista or higher). Check out an example here.

    • write it as a classic provider for legacy support. You can find an example here.

    I suppose you want to use a manifest-based approach, as its better and can support up to eight sessions. The first step a manifest-based provider needs to do is to register the event using EventRegister() and then write to it via the EventWrite() or EventWriteString() function.

    • 0