Event Tracing Reference

You use the following programming elements to write applications that incorporate event tracing:

• Event Tracing Enumerations
• Event Tracing Functions
• Event Tracing Interfaces
• Event Tracing Structures
• Event Tracing Constants

For details on samples that use these programming elements, see Event Tracing Samples.

This section also contains information on:

• Tools that ETW provides
• MOF class definitions for kernel events
• MOF class qualifiers used when defining your event classes

Process ETW traces in .NET code

You can also use the .NET TraceProcessing API to analyze ETW traces for your applications and other software components. This API is used internally at Microsoft to analyze ETW data produced the Windows engineering system, and it is also used to power several tables in Windows Performance Analyzer. This API is available as a NuGet package.

For more information, see this article.