---

---

Data Collector Sets

Event Trace Sessions and Startup Event Trace Sessions

Take a look of the two snapshots first:

If a data collector set (trace type) under Startup Event Trace Sessions is enabled, its trace session will show under Event Trace Sessions.

Because I disable the EventLog-System trace, its session will not run and you couldn’t see it under Event Trace Sessions.

You cannot start the Event Log service.

You cannot open Event Viewer.

Enable EventLog-System data collector set

Define an alert

Define a task

Create an alert

Start the Memory Alert set

You’ll find the Notepad.exe opens automatically.

How about the Alert Action?

Create a data collector set as “Trace Microsoft IE”

Configure the Alert “Memory Alert”

Start the Memory Alert and you will find the Trace Microsoft IE starts automatically.

This feature is very useful for tracing the system when an event occurs.

The .etl trace file is in binary format, though. How to read it?

The report will be generated.

Where do the application logs go? I cannot find them under applications category.

It is under Diagnosis-PLA channel.

Event Viewer – Applications and Services Logs – Microsoft –Windows – Diagnosis-PLA –Operational