SystemTraceProvider
This sample application demonstrates how to use event tracing control APIs to collect events from the system trace provider.
The sample code provided shows how to start an Event Tracing for Windows trace session and how to enable system events with stacks. When you build and run the application, it collects the trace data for 30 seconds and then stops. The sample application writes the results to a file, Systemtrace.etl. For more information, see Tools for Software Tracing.
You can process the Systemtrace.etl file using Tracerpt.exe, a command-line trace tool included in Windows that formats trace events. It also analyzes the events and generates summary reports. For more information about how to use this tool, see Tracerpt.
You can also process the file using the Windows Performance Toolkit (WPT), which is available in the SDK.