Get-EtwTraceProvider

S'applique à: Windows 10, Windows Server Technical Preview

Get-EtwTraceProvider

Gets ETW trace providers.

Syntaxe

Parameter Set: ByAutologger
Get-EtwTraceProvider [[-Guid] <String[]> ] [-AutologgerName <String[]> ] [-CimSession <CimSession[]> ] [-ThrottleLimit <Int32> ] [ <CommonParameters>] [ <WorkflowParameters>]

Parameter Set: BySession
Get-EtwTraceProvider [[-Guid] <String[]> ] [-CimSession <CimSession[]> ] [-SessionName <String[]> ] [-ThrottleLimit <Int32> ] [ <CommonParameters>] [ <WorkflowParameters>]

Description détaillée

The Get-EtwTraceProvider cmdlet gets Event Trace for Windows (ETW) trace providers for an ETW Autologger configuration or ETW Session. Use this command to view provider property information, such as its GUID, level, and keyword configurations.

Paramètres

-AutologgerName<String[]>

Specifies an array of names of the Autologger configurations for which this cmdlet gets ETW trace providers. If you specify this parameter, do not specify the SessionName parameter.

-CimSession<CimSession[]>

Exécute l'applet de commande dans une session distante ou sur un ordinateur distant. Entrez un nom d'ordinateur ou un objet de session, tels que le résultat d'une applet de commande New-CimSession ou Get-CimSession. La valeur par défaut est la session en cours sur l'ordinateur local.

-Guid<String[]>

Specifies an array of GUIDs, as strings, of the ETW trace providers that this cmdlet gets.

-SessionName<String[]>

Specifies an array of names of the ETW sessions for which this cmdlet gets ETW trace providers. If you specify this parameter, do not specify the AutologgerName parameter.

-ThrottleLimit<Int32>

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of zero is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.

<CommonParameters>

Cette applet de commande prend en charge les paramètres courants : -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer et -OutVariable. Pour plus d'informations, consultez  . about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

<WorkflowParameters>

Entrées

Le type d'entrée correspond au type des objets que vous pouvez adresser à l'applet de commande.

Sorties

Le type de sortie correspond au type des objets que l'applet de commande émet.

Exemples

Example 1: View all available trace providers

This command obtains a list of all available ETW trace providers and their GUIDs on the current computer by using the Get-NetEventProvider cmdlet. For more information, type Get-Help Get-NetEventProvider.

PS C:\> Get-NetEventProvider -ShowInstalled | Select-Object -Property *

Example 2: Get trace providers for an ETW session

This command gets all trace providers for the ETW session named NtfsLog.

PS C:\> Get-EtwTraceProvider -SessionName "NtfsLog"

Example 3: Get trace providers for an Autologger configuration

This command gets all trace providers for the Autologger configuration named WdiContextLog.

PS C:\> Get-EtwTraceProvider -AutologgerName "WdiContextLog"

Rubriques connexes

Configuring and Starting an AutoLogger Session

Configuring and Starting an Event Tracing Session

Add-EtwTraceProvider

Remove-EtwTraceProvider

Set-EtwTraceProvider