LOGMAN.exe – Windows CMD Command
Notice: A non well formed numeric value encountered in /home/future4tech/public_html/wp-content/plugins/crayon-syntax-highlighter/crayon_formatter.class.php on line 118
Notice: A non well formed numeric value encountered in /home/future4tech/public_html/wp-content/plugins/crayon-syntax-highlighter/crayon_formatter.class.php on line 119
Notice: A non well formed numeric value encountered in /home/future4tech/public_html/wp-content/plugins/crayon-syntax-highlighter/crayon_formatter.class.php on line 118
Notice: A non well formed numeric value encountered in /home/future4tech/public_html/wp-content/plugins/crayon-syntax-highlighter/crayon_formatter.class.php on line 119
Manage Performance Monitor & performance logs from the command line.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 |
Syntax logman [create|query|start|stop|delete|update|import|export] [options] Verbs: create Create a new data collector. query Query data collector properties. If no name is given all data collectors are listed. start Start an existing data collector and set the begin time to manual. stop Stop an existing data collector and set the end time to manual. delete Delete an existing data collector. update Update an existing data collector's properties. import Import a data collector set from an XML file. export Export a data collector set to an XML file. Adverbs: counter Create a counter data collector. trace Create a trace data collector. alert Create an alert data collector. cfg Create a configuration data collector. providers Show registered providers. Options (counter): -c path [path [...]] The performance counters to collect. To collect remotely, prefix with the \\machine name. -cf filename File listing performance counters to collect,one per line. -f {bin|bincirc|csv|tsv|sql} The log format for the data collector. For SQL database format, you must use the -o option in the command line with the DNS!log option. The defaults is binary. -sc value Maximum number of samples to collect with a performance counter data collector. -si [[hh:]mm:]ss Sample interval for performance counter data collectors. Options (trace): -f {bin|bincirc|csv|tsv|sql} The log format for the data collector. For SQL database format, you must use the -o option in the command line with the DNS!log option. The defaults is binary. -mode trace_mode Event Trace Session logger mode. -ct {perf|system|cycle} The clock resolution to use when logging the time stamp for each event: query performance counter, system time, or CPU cycle. -ln logger_name Logger name for Event Trace Sessions. -ft [[hh:]mm:]ss Event Trace Session flush timer. -[-]p provider [flags [level]] A single Event Trace provider to enable. The terms 'Flags' and 'Keywords' are synonymous in this context. -pf filename File listing multiple Event Trace providers to enable. -[-]rt Run the Event Trace Session in real-time mode. -[-]ul Run the Event Trace Session in user mode. -bs value Event Trace Session buffer size in kb. -nb min max Number of Event Trace Session buffers. Options (alert): -[-]el Enable/Disable event log reporting. -th threshold [threshold [...]] Specify counters and a threshold values for an alert. -[-]rdcs name Data collector set to start when alert fires. -[-]tn task Scheduled Task to run when alert fires. -[-]targ argument Scheduled Task arguments. -si [[hh:]mm:]ss Sample interval for performance counter data collectors. Options (cfg): -[-]ni Enable/Disable network interface query. -reg path [path [...]] Registry values to collect. -mgt query [query [...]] WMI objects to collect. -ftc path [path [...]] Full path to the files to collect. Options: -? Display context sensitive help. -s computer Perform the command on specified remote system. -config filename Settings file containing command options. [-n] name Name of the target object. -pid pid Process identifier. -xml filename Name of the XML file to import or export. -as Perform the requested operation asynchronously. -[-]u user [password] User to Run As. Entering a * for the password produces a prompt The interactive password is not displayed on screen. -m [start] [stop] Change to manual start or stop instead of a scheduled begin or end time. -rf [[hh:]mm:]ss Run the data collector for the specified period of time. -b dd/MM/yyyy HH:mm:ss[AM|PM] Begin the data collector at specified time. -e dd/MM/yyyy HH:mm:ss[AM|PM] End the data collector at specified time. -[-]r Repeat the data collector daily at the specified begin and end times. -o {path|dsn!log} Path of the output log file or the DSN and log set name in a SQL database. The default path is '%systemdrive%\PerfLogs\Admin'. -[-]a Append to an existing log file. -[-]ow Overwrite an existing log file. -[-]v {nnnnnn | mmddhhmm} Attach file versioning information to the end of the log name. -[-]rc task Run the command specified each time the log is closed. -[-]max value Maximum log file size in MB or number of records for SQL logs. -[-]cnf [[hh:]mm:]ss Create a new file when the specified time has elapsed or when the max size is exceeded. -y Answer yes to all questions without prompting. -fd Flush all the active buffers of an existing Event Trace Session to disk. -ets Send commands to Event Trace Sessions directly without saving or scheduling. |
Note: Where [-] is listed, an extra – negates the option. For example –u turns off the -u option.
This page describes the Windows 7/2008 version of Logman, the XP version only supports the Counter and Trace Adverbs (no Alerts/thresholds).
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 |
Examples: Create a counter to Log the % Processor Time on the local machine: C:\> set _mycounters="\Processor(_Total)\%% Processor Time" C:\> set _mylogfile=C:\docs\F4T.blg C:\> Logman.exe create counter F4T_CPU -f bincirc -v mmddhhmm -max 250 -c %_mycounters% -o %_mylogfile% Start the counter running (and then run whatever other process you wish to monitor): C:\> Logman.exe start F4T_CPU Stop the counter C:\> Logman.exe stop F4T_CPU The above creates a file like C:\docs\F4T_09031235.blg To convert this to text/CSV format: C:\> relog C:\docs\F4T_09031235.blg -f csv -o proc_time.csv -t 2 We can now delete the counter (unless intending to reuse it again) C:\> Logman.exe delete F4T_CPU Run a scheduled task if % Processor Time > 5 (this assumes that demo_task already exists) Logman.exe create alert F4T_alert -th "\Processor(_Total)\%% Processor Time>5" -tn "demo_task" More examples: logman start perf_log logman update perf_log -si 10 -f csv -v mmddhhmm logman create counter perf_log -c "\Processor(_Total)\% Processor Time" logman create counter perf_log -c "\Processor(_Total)\% Processor Time" -max 10 -rf 01:00 logman create trace trace_log -nb 16 256 -bs 64 -o c:\logfile logman create alert new_alert -th "\Processor(_Total)\% Processor Time>50" logman create cfg cfg_log -reg "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\\" logman create cfg cfg_log -mgt "root\cimv2:SELECT * FROM Win32_OperatingSystem" logman query providers logman query providers Microsoft-Windows-Diagnostics-Networking logman start process_trace -p Microsoft-Windows-Kernel-Process 0x10 win:Informational -ets logman start process_trace -p Microsoft-Windows-Kernel-Process -mode newfile -max 1 -o output%d.etl -ets logman start usermode_trace -p "Service Control Manager Trace" -ul -ets logman query usermode_trace -p "Service Control Manager Trace" -ul -ets logman stop usermode_trace -p "Service Control Manager Trace" -ul -ets logman start "NT Kernel Logger" -o log.etl -ets logman start "NT Kernel Logger" -p "Windows Kernel Trace" (process,thread) -ets |
Hello.This article was extremely fascinating, particularly because I was browsing for thoughts on this subject last Sunday.