Purpose

Event Tracing for Windows (ETW) provides application programmers the ability to start and stop event tracing sessions, instrument an application to provide trace events, and consume trace events. Trace events contain an event header and provider-defined data that describes the current state of an application or operation. You can use the events to debug an application and perform capacity and performance analysis.

This documentation is for user-mode applications that want to use ETW. For information about instrumenting device drivers that run in kernel mode, see WPP Software Tracing in the Microsoft Windows Driver Kit (WDK).

Where applicable

Use ETW when you want to instrument your application, log user or kernel events to a log file, and consume events from a log file or in real time.

Developer audience

ETW is designed for C and C++ developers who write user-mode applications.

Run-time requirements

ETW is included in Microsoft Windows?2000 and later. For information about which operating systems are required to use a particular function, see the Requirements section of the documentation for the function.

In this section

Topic	Description
About Event Tracing	General information about Event Tracing.
Using Event Tracing	Task-related topics that describe how to use the ETW API.
Event Tracing Reference	Detailed descriptions of ETW functions and other programming elements.

 

 

 

Send comments about this topic to Microsoft

Build date: 9/7/2011