Note that this option considerably increases the export time due to symbol resolution time involved. The symbol path is needed when /SaveAs2 option is used for converting the. This will help you resolve the function calls using the symbol path and if a source path is present, open a text viewer dialog with the source line highlighted which is being referenced. Additionally, you can specify the path to the source files for the application in the same dialog. You can point to the symbol path (local symbol cache or Microsoft Symbol Server: ) using Options –> Configure Symbols. Process Monitor can use symbol information, if available, to show functions referenced on event stacks. I normally point the backing file to a local drive on the machine which has sufficient amount of disk space. This prevents using the page file as the backing store for trace capture and avoid running in unresponsive server issues while you are still capturing your trace and the paging file fills up.
One of the most useful options that I suggest using when capturing a Process Monitor trace is to use the backing file option ( /BackingFile command line parameter or CTRL+B when using the GUI).
I had used /OpenLog and /SaveAs1 option to generate the XML file from the saved. The command line options specified are immensely helpful if you are scripting the capture of a trace using a batch file or if you are generating an automation routine to load the captured data into another data source. More information about the above is available in the Process Monitor help file.
In the toolbar show on the left in the screenshot, you can enable/disable the following captures: The capture tracks three classes of operations: File System, Registry and Process. The first tip is to disable any activity that you don’t want to capture or are not required for the issue that you are troubleshooting. This prompted me to think about capturing data with Process Monitor and some things I learnt along way while using this tool working at CSS. I recently wrote about importing a Process Monitor trace into SQL Server database table and crunch up the data to extract the events and call stacks.
0 kommentar(er)
