Try Documentalist, my app that offers fast, offline access to 190+ programmer API docs.
To see the events use traceview from SDK.
Links:
- https://blogs.msdn.microsoft.com/dcook/2015/09/30/etw-overview/
- https://blogs.msdn.microsoft.com/dcook/2015/09/24/tracelogging-background/
- https://blogs.msdn.microsoft.com/dcook/2015/09/08/etw-provider-names-and-guids/
- https://caseymuratori.com/blog_0025 : a rant about ewt api
Win 10 SDK has C++ headers for EWT generation.
Tools:
- tracelog
- traceview : view ewt events from software live
- xperf : can capture traces to a file
- tracefmt : can dispaly events captured by xperf
How to generate EWT in code:
- c++ : TraceLoggingProvider.h
- .net: EventSource in 4.6 or later, there's nuget package for older
- Windows Framework: LoggingChannel
TraceLoggingProvider.h:
- by default uses win8+ apis, to get 7/vista compat, #define _WIN32_WINNT _WIN32_WINNT_VISTA