TraceLogging is a system for logging events that can be decoded without a manifest. On Windows, TraceLogging is used in user-mode and kernel-mode to generate Event Tracing for Windows (ETW) events. TraceLogging builds on Event Tracing for Windows (ETW) and provides a simplified way to instrument code.

In this section

  • About TraceLogging

    This topic gives an overview of TraceLogging. It provides guidance about when to use TraceLogging and provides links to the various TraceLogging APIs available for different development scenarios.

  • Using TraceLogging

    These topics provide a TraceLogging quick start for C/C++ and .NET code, with examples.

  • TraceLogging Reference

    These topics provide information about the C/C++ TraceLogging API.

Developer audience

TraceLogging is designed for use by user-mode application developers and kernel-mode driver developers who want to add tracing to their code.