https://www.logfusion.ca/Discussions/RSS/?TopicID=3edf1d71-4593-4208-9f26-8bb90fae5a0d LogFusion RSS: Are ETW logs supported? Sat, 23 May 2026 15:21:33 GMT en hourly 1 https://www.logfusion.ca/Discussions/RSS/?TopicID=3edf1d71-4593-4208-9f26-8bb90fae5a0d https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d#6 Tue, 07 Dec 2010 22:25:44 GMT Binary Fortress Software https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d#6 LogFusion I've emailed you back, and I'm going to close this topic. We'll correspond through email for this, it should be easier. ]]> https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d#5 Tue, 07 Dec 2010 02:38:59 GMT Binary Fortress Software https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d#5 LogFusion Hi Jon,

I've sent you an email. Just waiting on a response. The file I have is an export from EventLog using Save All Events As... It seems this is the only way to get logs out of ETW via EventLog. I would assume this is not what you would want as I expect that LogFusion would want to subscribe to the ETW directly rather than looking at exported files (although that should also be supported). ]]> https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d#4 Tue, 07 Dec 2010 01:30:09 GMT Binary Fortress Software https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d#4 LogFusion Are you able to post one of your .ETL files for me to test with? I have some rough .ETL file handling support, but I'd like to see how well it works on a real log file. ]]> https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d#3 Tue, 07 Dec 2010 00:54:43 GMT Binary Fortress Software https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d#3 LogFusion Yep, that's it.

I don't know where they are stored, but using the Event Viewer is absolutely terrible for reading ETW events.

See http://xhinker.com/2010/04/17/WF4ConfiguringETWTracking.aspx for more info. ]]> https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d#2 Tue, 07 Dec 2010 00:38:12 GMT Binary Fortress Software https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d#2 LogFusion I just want to make sure I'm thinking about the same acronyms as you: WF4 is "Windows Workflow Foundation 4" and ETW is "Event Tracing for Windows", correct? What type of logs are you using? Are they the .ETL files, .SVCLOG files, or something else? ]]> https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d Mon, 06 Dec 2010 22:26:25 GMT Binary Fortress Software https://www.logfusion.ca/Discussions/View/are-etw-logs-supported/?ID=3edf1d71-4593-4208-9f26-8bb90fae5a0d LogFusion I'm using WF4 and it only seems to write messages out to ETW logging. Does LogFusion read these logs? ]]>