close
Skip to content
This repository was archived by the owner on May 29, 2025. It is now read-only.

Commit ebe1063

Browse files
randomasciirandomascii
committed
Use appropriate profile in etw_processes_longterm.bat
etw_processes_longterm.bat would print a message when it was done suggesting what .wpaprofile to use, but this message was inappropriate because it was targeted at a trace that recorded CPU usage, which this batch file does not. This change updates that message to point to a newly create profile.
1 parent fd4d0f3 commit ebe1063

2 files changed

Lines changed: 128 additions & 1 deletion

File tree

‎bin/TransientProcessTree.wpaProfile‎

Lines changed: 127 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,127 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<WpaProfileContainer xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" Version="2" xmlns="http://tempuri.org/SerializableElement.xsd">
3+
<Content xsi:type="WpaProfile2">
4+
<Sessions>
5+
<Session Index="0">
6+
<FileReferences />
7+
</Session>
8+
</Sessions>
9+
<Views>
10+
<View Guid="5234b93c-aa8a-4b5f-bfac-8a59090b38cb" IsVisible="true" Title="Analysis">
11+
<Graphs>
12+
<Graph Guid="b186f02d-8d06-4bbb-9ad1-abf7985fb61a" LayoutStyle="All" Color="#FF005DE0" GraphHeight="125.00000000000034" IsMinimized="false" IsShown="true" IsExpanded="false" HelpText="{}{\rtf1\ansi\ansicpg1252\uc1\htmautsp\deff2{\fonttbl{\f0\fcharset0 Times New Roman;}{\f2\fcharset0 Segoe UI;}}{\colortbl\red0\green0\blue0;\red255\green255\blue255;}\loch\hich\dbch\pard\plain\ltrpar\itap0{\lang1033\fs18\f2\cf0 \cf0\ql{\f2 {\ltrch Shows the duration (from beginning to end in seconds) of the process, hosted service (if applicable), and the command used to initiate the process.}\li0\ri0\sa0\sb0\fi0\ql\par}">
13+
<Preset Name="Transient Process Tree" BarGraphIntervalCount="50" IsThreadActivityTable="false" GraphColumnCount="30" KeyColumnCount="12" LeftFrozenColumnCount="17" RightFrozenColumnCount="29" InitialFilterQuery="[Lifetime]:=Transient" InitialFilterShouldKeep="true" InitialExpansionQuery="[Process Tree]:&lt;&gt;&quot;&quot;" GraphFilterTopValue="0" GraphFilterThresholdValue="0">
14+
<MetadataEntries>
15+
<MetadataEntry Guid="36c00ec5-61f8-5f89-a066-641288a34ca9" Name="Start Time" ColumnMetadata="StartTime" />
16+
<MetadataEntry Guid="19fb5aa9-a5fc-5f14-cb83-fad0691e92a8" Name="End Time" ColumnMetadata="EndTime" />
17+
</MetadataEntries>
18+
<HighlightEntries />
19+
<Columns>
20+
<Column Guid="0b34b57d-f3cd-519a-4584-b182e0088701" Name="Process Name" SortPriority="1" Width="200" IsVisible="false">
21+
<ColorQueryEntries />
22+
</Column>
23+
<Column Guid="5f381ee6-ad8e-5906-7de0-4b678b7d78f1" Name="Process ID" SortPriority="2" TextAlignment="Right" Width="80" IsVisible="false">
24+
<ColorQueryEntries />
25+
</Column>
26+
<Column Guid="226170ea-7139-5ea5-ef82-c7b8eb950467" Name="Session ID" SortPriority="3" TextAlignment="Right" Width="60" IsVisible="false">
27+
<ColorQueryEntries />
28+
</Column>
29+
<Column Guid="32ba004c-d028-5def-cc60-016892805d03" Name="Parent Process ID" SortPriority="4" TextAlignment="Right" Width="80" IsVisible="false">
30+
<ColorQueryEntries />
31+
</Column>
32+
<Column Guid="1ba44c8d-e138-5cfa-c4d8-49580277ab41" Name="Lifetime" SortPriority="5" Width="80" IsVisible="false">
33+
<ColorQueryEntries />
34+
</Column>
35+
<Column Guid="d9e7685f-5f02-5731-d181-5545f0e0c5d3" Name="Process Tree" SortPriority="6" Width="274" IsVisible="true">
36+
<ColorQueryEntries />
37+
</Column>
38+
<Column Guid="0edbeee1-8d7b-5652-6639-86415222c6e0" Name="Process" SortOrder="Ascending" SortPriority="0" Width="200" IsVisible="false">
39+
<ColorQueryEntries />
40+
</Column>
41+
<Column Guid="d8e83424-bba6-55cf-41b7-d164f0cd3c7a" Name="Creation Stack" SortPriority="7" Width="200" IsVisible="false">
42+
<StackOptionsParameter Mode="StackTag" />
43+
<ColorQueryEntries />
44+
</Column>
45+
<Column Guid="d8e83424-bba6-55cf-41b7-d164f0cd3c7a" Name="Creation Stack" SortPriority="8" Width="200" IsVisible="false">
46+
<StackOptionsParameter Mode="FrameTags" />
47+
<ColorQueryEntries />
48+
</Column>
49+
<Column Guid="d8e83424-bba6-55cf-41b7-d164f0cd3c7a" Name="Creation Stack" SortPriority="9" Width="200" IsVisible="false">
50+
<StackOptionsParameter />
51+
<ColorQueryEntries />
52+
</Column>
53+
<Column Guid="1b57a82a-5597-58e4-eddf-46d996048180" Name="Destruction Stack" SortPriority="10" Width="200" IsVisible="false">
54+
<StackOptionsParameter Mode="StackTag" />
55+
<ColorQueryEntries />
56+
</Column>
57+
<Column Guid="1b57a82a-5597-58e4-eddf-46d996048180" Name="Destruction Stack" SortPriority="11" Width="200" IsVisible="false">
58+
<StackOptionsParameter Mode="FrameTags" />
59+
<ColorQueryEntries />
60+
</Column>
61+
<Column Guid="cb796d44-2927-5ac1-d231-4b71904c18f5" Name="Thread Name" SortPriority="12" Width="80" IsVisible="false">
62+
<ColorQueryEntries />
63+
</Column>
64+
<Column Guid="82ddfdff-ee93-5f35-08ac-4705069618dc" Name="Thread Activity Tag" SortPriority="13" Width="80" IsVisible="false">
65+
<ColorQueryEntries />
66+
</Column>
67+
<Column Guid="2818954f-2d30-5569-4510-dade0a5a605c" Name="Annotation" SortPriority="14" Width="80" IsVisible="false">
68+
<ColorQueryEntries />
69+
</Column>
70+
<Column Guid="1b57a82a-5597-58e4-eddf-46d996048180" Name="Destruction Stack" SortPriority="15" Width="200" IsVisible="false">
71+
<StackOptionsParameter />
72+
<ColorQueryEntries />
73+
</Column>
74+
<Column Guid="26dd2129-e3d6-57aa-c56b-34b5a5b79fcb" Name="Count" AggregationMode="Count" SortPriority="16" TextAlignment="Right" Width="60" IsVisible="false">
75+
<ColorQueryEntries />
76+
</Column>
77+
<Column Guid="c4cf3680-7ab6-5b50-a66e-bb282e861842" Name="Duration" AggregationMode="Sum" SortPriority="17" TextAlignment="Right" Width="120" IsVisible="true">
78+
<ColorQueryEntries />
79+
</Column>
80+
<Column Guid="3546d491-9447-5abe-f1ea-c8363af9b77f" Name="Avg Duration" AggregationMode="Average" SortPriority="18" TextAlignment="Right" Width="120" IsVisible="false">
81+
<ColorQueryEntries />
82+
</Column>
83+
<Column Guid="fd1c6bea-5148-5a94-f0d2-720385dfddf6" Name="Min Duration" AggregationMode="Min" SortPriority="19" TextAlignment="Right" Width="120" IsVisible="false">
84+
<ColorQueryEntries />
85+
</Column>
86+
<Column Guid="fa105ddf-fff0-57fb-8472-3b02066ee626" Name="Max Duration" AggregationMode="Max" SortPriority="20" TextAlignment="Right" Width="120" IsVisible="false">
87+
<ColorQueryEntries />
88+
</Column>
89+
<Column Guid="7b96de49-17c2-5b21-e879-cd3fa850202f" Name="Permanent Count" AggregationMode="Sum" SortPriority="21" TextAlignment="Right" Width="80" IsVisible="false">
90+
<ColorQueryEntries />
91+
</Column>
92+
<Column Guid="a5e0fdb2-8afa-59e2-91e7-5ade1195b805" Name="Package Full Name" SortPriority="22" Width="200" IsVisible="false">
93+
<ColorQueryEntries />
94+
</Column>
95+
<Column Guid="a38e516d-6cf2-5659-97f7-5b4d7b128289" Name="Package Relative Application Id" SortPriority="23" Width="150" IsVisible="false">
96+
<ColorQueryEntries />
97+
</Column>
98+
<Column Guid="7c8085f1-33de-5a34-b975-ff02c3a942fb" Name="Modern Application Friendly Name" SortPriority="24" Width="150" IsVisible="false">
99+
<ColorQueryEntries />
100+
</Column>
101+
<Column Guid="a876035b-24bc-564f-3f6a-cede5f8c8918" Name="Hosted Services" SortPriority="25" Width="102" IsVisible="false">
102+
<ColorQueryEntries />
103+
</Column>
104+
<Column Guid="1093bbae-e3f8-570d-d300-fe006ec801fe" Name="Command Line" SortPriority="26" Width="999" IsVisible="true">
105+
<ColorQueryEntries />
106+
</Column>
107+
<Column Guid="ce84d427-a0a7-58d9-0fde-e8d2e84770bc" Name="Table" SortPriority="27" Width="80" IsVisible="false">
108+
<ColorQueryEntries />
109+
</Column>
110+
<Column Guid="36c00ec5-61f8-5f89-a066-641288a34ca9" Name="Start Time" AggregationMode="Min" SortPriority="28" TextAlignment="Right" Width="120" IsVisible="true">
111+
<ColorQueryEntries />
112+
</Column>
113+
<Column Guid="19fb5aa9-a5fc-5f14-cb83-fad0691e92a8" Name="End Time" AggregationMode="Max" SortPriority="29" TextAlignment="Right" Width="120" IsVisible="true">
114+
<ColorQueryEntries />
115+
</Column>
116+
</Columns>
117+
</Preset>
118+
</Graph>
119+
</Graphs>
120+
<SessionIndices>
121+
<SessionIndex>0</SessionIndex>
122+
</SessionIndices>
123+
</View>
124+
</Views>
125+
<ModifiedGraphs />
126+
</Content>
127+
</WpaProfileContainer>

‎bin/etw_processes_longterm.bat‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@
5858
@echo Tracing ran from %starttime% to %time% > "%textfile%"
5959

6060
@echo Trace can be loaded using UIforETW or with:
61-
@echo wpa "%tracefile%" -profile CPUUsageByProcess.wpaProfile
61+
@echo wpa "%tracefile%" -profile TransientProcessTree.wpaProfile
6262
@exit /b
6363

6464
:failure

0 commit comments

Comments
 (0)