NAME
Get-EtwTraceSession
SYNOPSIS
Gets ETW trace sessions.SYNTAX
Get-EtwTraceSession [[-Name]
] [-CimSession ] [-ThrottleLimit ] [ ] DESCRIPTION
The Get-EtwTraceSession cmdlet gets Event Trace for Windows (ETW) trace sessions. Get all sessions or one or more
sessions by name.PARAMETERS
-CimSession [
Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such] as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local
computer. Required? false Position? named Default value none Accept pipeline input? false Accept wildcard characters? false-Name [
Specifies an array of the names of ETW trace sessions to get. Required? false Position? 1 Default value none] Accept pipeline input? true(ByPropertyName)
Accept wildcard characters? false-ThrottleLimit [
Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of zero is entered, then Windows PowerShellr calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer. Required? false Position? named Default value none Accept pipeline input? false Accept wildcard characters? false] This cmdlet supports the common parameters: Verbose, Debug, ErrorAction, ErrorVariable, WarningAction, WarningVariable, OutBuffer, PipelineVariable, and OutVariable. For more information, see about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216). INPUTS
OUTPUTS
Example 1: Get a trace session
PS C:\>Get-EtwTraceSession -Name "NetCfgTrace"
This command gets the ETW trace session named NetCfgTrace.RELATED LINKS
Remove-EtwTraceSession
Send-EtwTraceSession
Set-EtwTraceSession