etw icon indicating copy to clipboard operation
etw copied to clipboard

Go library for ETW (Event Tracing for Windows) events processing

Results 5 etw issues
Sort by recently updated
recently updated
newest added

Sometimes a single property will fail to parse but the rest of the event properties are valuable - it is important to keep going so we can get some data...

Add two methods for listing registered providers and looking them up.

`EnableTraceEx2` only exists after Windows 2008 Server SP2, yet the new features are not being used. Switch to `EnableTraceEx` for better backwards compatibility.

Hi, first off, thank you for making such a useful library. I noticed an issue where `*event.EventProperties()` was taking 2-5 milliseconds to return and causing high CPU usage. It appears...

Without this patch the compilation fails with `session.go:325:5: (_Ciconst_INVALID_PROCESSTRACE_HANDLE) (untyped int constant -1) overflows uint64` Used llvm-mingw/bin/aarch64-w64-mingw32-gcc