Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2


Processes event trace logs or real-time data from instrumented event trace providers and allows you to generate trace analysis reports and CSV (comma-delimited) files for the events generated.


tracerpt [FileName [FileName ...]] [-o [FileName]][-report [FileName]][-rt SessionName [SessionName ...]][-summary [FileName]] [-config [FileName] [-f {XML | TXT | HTML}] [-y]

  • FileName [FileName ...]
    Specifies the name of the file for the event trace session. You can specify multiple files.
  • -o [FileName]
    Specifies the name of the .csv (comma-delimited) file. If no files are specified, then the default is Dumpfile.csv, not Summary.txt.
  • -report [FileName]
    Specifies the name of the output report file. Default is Workload.txt.
  • - rt SessionName[SessionName ...]
    Gets data from the real-time data source. To use this option, include the event trace session.
  • -summary [FileName]
    Specifies name of output summary file. Default is Summary.txt.
  • -config FileName
    Specifies the pathname of the settings file that contains command line parameters. Use this to enter your command line options into a file.
  • - f {XML | TXT | HTML}
    Specifies the report format. The default format is TXT.
  • -y
    Use this option to answer yes to all questions without prompting.
  • /?
    Displays help at the command prompt.
  • Viewing Dumpfile.csv files in Microsoft Excel

    Opening the Dumpfile.csv format in Microsoft Excel allows you to view events in chronological order. The files include header records followed by comma-delimited text. The header fields are listed below:

    Field Description


    Thread identifier

    Clock time

    Event timestamp

    Kernel (ms)

    Processor time in kernel mode

    User (ms)

    Processor time in user mode

    User data

    Variable piece of header data based on the Managed Object Format (MOF) structure.


    Instance ID


    Parent Instance ID

  • Using the -report option

    To use the report option, you must include a Windows kernel trace file, and any other event trace file in your command line. You will receive an error message without this in your command line.

  • Using the -summary option

    When you use the -summary option, the following file is generated:

    Files processed  (list of files)
    Total buffers processed N
    Total events processed N
    Total events lost N
    Start time DATE_LONGDATE
    End time DATE_LONGDATE
    Elapsed time N sec
  • Using the -config option

    The contents of the setting file used with the -config option should have the following format:



    where CommandOption is a command line option and Value specifies its value. For example:







  • For more information about incorporating Tracerpt into your Windows Management Instrumentation (WMI) scripts, see "Scripting WMI" at the Microsoft Windows Resource Kits Web site.

Formatting legend

Format Meaning


Information that the user must supply


Elements that the user must type exactly as shown

Ellipsis (...)

Parameter that can be repeated several times in a command line

Between brackets ([])

Optional items

Between braces ({}); choices separated by pipe (|). Example: {even|odd}

Set of choices from which the user must choose only one

Courier font

Code or program output

See Also


Command-line reference A-Z
Command shell overview