Set-EtwTraceProvider

NAME Set-EtwTraceProvider



SYNOPSIS

Modifies an ETW trace provider.





SYNTAX

Set-EtwTraceProvider [-Guid] <String[]> [-CimSession <CimSession[]>] [-Level <Byte>] [-MatchAllKeyword <UInt64>] [-MatchAnyKeyword <UInt64>]

[-PassThru] [-Property <UInt32>] [-ThrottleLimit <Int32>] -AutologgerName <String[]> [<CommonParameters>]



Set-EtwTraceProvider [-Guid] <String[]> [-CimSession <CimSession[]>] [-Level <Byte>] [-MatchAllKeyword <UInt64>] [-MatchAnyKeyword <UInt64>]

[-PassThru] [-Property <UInt32>] [-ThrottleLimit <Int32>] -SessionName <String[]> [<CommonParameters>]



Set-EtwTraceProvider [-CimSession <CimSession[]>] [-Level <Byte>] [-MatchAllKeyword <UInt64>] [-MatchAnyKeyword <UInt64>] [-PassThru] [-Property

<UInt32>] [-ThrottleLimit <Int32>] [<CommonParameters>]





DESCRIPTION

The Set-EtwTraceProvider cmdlet modifies an Event Trace for Windows (ETW) trace provider that is associated with an ETW Autologger configuration

or an ETW trace session.





PARAMETERS

-AutologgerName <String[]>

Specifies an array of names of ETW Autologger configurations. If you specify this parameter, do not specify the SessionName parameter.



Required? true

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-CimSession [<CimSession[]>]

Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession

or Get-CimSession cmdlet. The default is the current session on the local computer.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-Guid <String[]>

Specifies an array of GUIDs, as strings, of the ETW trace provider that this cmdlet modifies.



Required? true

Position? 1

Default value none

Accept pipeline input? true(ByPropertyName)

Accept wildcard characters? false



-Level [<Byte>]

Specifies the provider-defined value that specifies the level of detail included in the event. If you specify a value, that value entails all

the values that have a lower value. For instance, if you specify a value of 3, for TRACE_LEVEL_WARNING, TRACE_LEVEL_ERROR and

TRACE_LEVEL_CRITICAL events are also included. Valid values are:



-- 1: TRACE_LEVEL_CRITICAL. Abnormal exit or termination events.

-- 2: TRACE_LEVEL_ERROR. Severe error events.

-- 3: TRACE_LEVEL_WARNING. Warning events such as allocation failures.

-- 4: TRACE_LEVEL_INFORMATION. Non-error events such as entry or exit events.

-- 5: TRACE_LEVEL_VERBOSE. Detailed trace events.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-MatchAllKeyword [<UInt64>]

Specifies keywords, as a bitmask, that further restricts the category of events that the provider writes. If an event keyword meets the

conditions specified by the MatchAnyKeyword parameter, the provider writes the event only if all of the bits specified by this parameter exist

in the event keyword. Do not specify this parameter if you specify a value of zero for MatchAnyKeyword. Use the following format:

0x0000000000000001.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-MatchAnyKeyword [<UInt64>]

Specifies keywords, as a bitmask, that determine the category of events that the provider writes. The provider writes the event if any of the

keyword bits match any of the bits set in this mask. Use the following format: 0x0000000000000001.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-PassThru [<SwitchParameter>]

Indicates that this cmdlet returns an object that represents the item on which it operates. By default, this cmdlet does not generate any

output.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-Property [<UInt32>]

Specifies a bitmask that determines whether to include one or more of the following items in the log file:



-- 0x00000001. The user security identifier

-- 0x00000002. The terminal session identifier



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-SessionName <String[]>

Specifies an array of names of ETW trace sessions. If you specify this parameter, then do not specify the AutologgerName parameter.



Required? true

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-ThrottleLimit [<Int32>]

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of

zero is entered, then Windows PowerShell???? calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are

running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).



INPUTS









OUTPUTS









Example 1: Modify an ETW trace provider



PS C:\\>set-EtwTraceProvider -Guid "{106B464A-8043-46B1-8CB8-E92A0CD7A560}" -AutologgerName "WFP-IPsec Trace" ????????Level 2

SessionName :

AutologgerName : WFP-IPsec Trace

Guid : {106B464A-8043-46B1-8CB8-E92A0CD7A560}

Level : 2

MatchAnyKeyword : 0xFFFFFFFF

MatchAllKeyword : 0x0

Property :



This command modifies the ETW trace provider that has the specified GUID. That provider is associated with a specified Autologger onfiguration

named WFP-IPsec Trace. The command sets the Level to have a value of 2, TRACE_LEVEL_ERROR.







RELATED LINKS

Configuring and Starting an AutoLogger Session

Configuring and Starting an Event Tracing Session

Add-EtwTraceProvider

Get-EtwTraceProvider

Remove-EtwTraceProvider

Welcome to MailMergePlus Forums

Welcome to MailMergePlus Forums

CommonParameters : True

WorkflowCommonParameters : False

details : @{name=Start-EtwTraceSession; noun=; verb=}

Syntax : @{syntaxItem=System.Object[]}

parameters : @{parameter=System.Object[]}

inputTypes : @{inputType=}

returnValues : @{returnValue=}

aliases : None

Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums

remarks : Get-Help cannot find the Help files for this cmdlet on this computer. It is displaying only partial help.

-- To download and install Help files for the module that includes this cmdlet, use Update-Help.

alertSet :

description :

examples :

Synopsis :

Start-EtwTraceSession [-Name] <string> [-LogFileMode <uint32>] [-LocalFilePath <string>] [-MaximumFileSize <uint32>]

[-Excel: Text to columns: extract data and add delimitersrSize Excel: Text to columns: extract data and add delimiters32>] [Excel: Text to columns: extract data and add delimitersmumExcel: Text to columns: extract data and add delimitersrs Excel: Text to columns: extract data and add delimiters32>] [-MaximumExcel: Text to columns: extract data and add delimitersrs Excel: Text to columns: extract data and add delimiters32>] [-FlushExcel: Text to columns: extract data and add delimiters Excel: Text to columns: extract data and add delimiters32>] [-ClockType Excel: Text to columns: extract data and add delimitersng>]

[-FileMode <string>] [-Compress] [-RealTime] [-NonPaged] [-CimSession <CimSession>] [-WhatIf] [-Confirm]

[Welcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus ForumsWelcome to MailMergePlus Forums]

Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums Welcome to MailMergePlus Forums

ModuleName : EventTracingManagement

nonTerminatingErrors :

xmlns:command : http://schemas.microsoft.com/maml/dev/command/2004/10

xmlns:dev : http://schemas.microsoft.com/maml/dev/2004/10

xmlns:maml : http://schemas.microsoft.com/maml/2004/10

Name : Start-EtwTraceSession

Category : Function

Component :

Role :

Functionality :