trace.log

H

Haim Guivon

The file \system32\logfiles\WMI\trace.log grows bigger until it eats up all
the free disk space (almost 4 GB)

At first I thought that it was a program called BootVis, and removed it.

But then I set several realtime sensors for disk free space, memory
available, and others, that constantly monitor the machine resources and
performance. The program that does it Norton System Doctor.

Now, again, in a session of three or four hours the free disk space
decreases until it blows the alarm.

Question: is it possible that the monitoring is writing such the data to the
file Trace.log, and letting it accumulate without purging the older?

TIA,
haim
 
D

Dave Patrick

You might try setting the Reg_Dword 'Start' to zero

http://msdn.microsoft.com/library/d.../en-us/perfmon/base/global_logger_session.asp

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| The file \system32\logfiles\WMI\trace.log grows bigger until it eats up
all
| the free disk space (almost 4 GB)
|
| At first I thought that it was a program called BootVis, and removed it.
|
| But then I set several realtime sensors for disk free space, memory
| available, and others, that constantly monitor the machine resources and
| performance. The program that does it Norton System Doctor.
|
| Now, again, in a session of three or four hours the free disk space
| decreases until it blows the alarm.
|
| Question: is it possible that the monitoring is writing such the data to
the
| file Trace.log, and letting it accumulate without purging the older?
|
| TIA,
| haim
|
|
 
C

Carey Frisch [MVP]

To define trace log buffers
http://www.microsoft.com/resources/...l/proddocs/en-us/nt_smlogcfg_tracebuffer.mspx

Inflated TRACE.LOG problem, how to fix.
http://www.tweakxp.com/tweak1302.aspx

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

---------------------------------------------------------------------------------

:

| The file \system32\logfiles\WMI\trace.log grows bigger until it eats up all
| the free disk space (almost 4 GB)
|
| At first I thought that it was a program called BootVis, and removed it.
|
| But then I set several realtime sensors for disk free space, memory
| available, and others, that constantly monitor the machine resources and
| performance. The program that does it Norton System Doctor.
|
| Now, again, in a session of three or four hours the free disk space
| decreases until it blows the alarm.
|
| Question: is it possible that the monitoring is writing such the data to the
| file Trace.log, and letting it accumulate without purging the older?
|
| TIA,
| haim
 
R

Richard Urban

Yes, it is from BootVis.

I had the same problem. You should have shut down tracking before removing
the program. Install the program again. deactivate everything. Reboot to
make certain that it is not tracking. Then, shut down and delete the program



--

Regards:

Richard Urban

aka Crusty (-: Old B@stard :)
 
S

Steve Nielsen

Richard said:
Yes, it is from BootVis.

I had the same problem. You should have shut down tracking before removing
the program. Install the program again. deactivate everything. Reboot to
make certain that it is not tracking. Then, shut down and delete the program
Click to expand...

Haha! I know what you meant, but at first read when I saw
Then, shut down and delete the program
Click to expand...

I thought, how the heck is he gonna delete anything if the PC is shut down?
:)
Steve
 
H

Haim Guivon

Thanks a lot, Dave for a most accurate answer. You've just taught me a lot.

Now, after reading about the issue, I actually don't want to turn event
tracing OFF, as you suggest. Instead, I'd like to go on tracing events with
the help of Norton System Doctor, but I'd like to set a time to flush the
buffers. Now, my Registry entries as follows:
............................................................................
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\GlobalLogger]

"Start"=dword:00000001
"EnableKernelFlags"=hex:07,23,00,00,16,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,17,23,00,00
"BufferSize"=dword:00000040
"MinimumBuffers"=dword:0000001e
"MaximumBuffers"=dword:00000078
"ClockType"=dword:00000001
..............................................................................
If I set a smaller value for MaximumBuffers, it will stop tracing (so it
says) when the buffers are full, and this I don't want to happen.

What I'd like to do is to add a new Value as follows (according to MS
instructions it should be present in the default Key, but it is not):

"FlushTimer"=DWORD (Time delay in seconds before dirty buffers are scheduled
to be flushed).*

Now my quest, please:

What should be the exact syntax for the data string, if I want to set it to,
say, 3,000 seconds?

I'd highly appreciate an answer,

TIA,
haim

=====================================================================


Dave Patrick said:
You might try setting the Reg_Dword 'Start' to zero

http://msdn.microsoft.com/library/d.../en-us/perfmon/base/global_logger_session.asp

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| The file \system32\logfiles\WMI\trace.log grows bigger until it eats up
all
| the free disk space (almost 4 GB)
Click to expand...
.......
TIA,
haim
 
H

Haim Guivon

Thank you very much. I am starting to learn. Presently learning how to
configure the "performance" administrative tool. Very complicatad for a
layman, but will go on. I could learn how to configure isolated event
tracing, but not how to set a size limit to the logfile.

Thanks,
haim

============================================================
Carey Frisch said:
To define trace log buffers
http://www.microsoft.com/resources/...l/proddocs/en-us/nt_smlogcfg_tracebuffer.mspx

Inflated TRACE.LOG problem, how to fix.
http://www.tweakxp.com/tweak1302.aspx

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

---------------------------------------------------------------------------------

:

| The file \system32\logfiles\WMI\trace.log grows bigger until it eats up
all
| the free disk space (almost 4 GB)
|
Click to expand...
, and letting it accumulate without purging the older?
 
D

Dave Patrick

You can add a Reg_Dword named "FlushTimer" and set it's decimal value to
'3000'

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Thanks a lot, Dave for a most accurate answer. You've just taught me a
lot.
|
| Now, after reading about the issue, I actually don't want to turn event
| tracing OFF, as you suggest. Instead, I'd like to go on tracing events
with
| the help of Norton System Doctor, but I'd like to set a time to flush the
| buffers. Now, my Registry entries as follows:
|
............................................................................
| [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\GlobalLogger]
|
| "Start"=dword:00000001
|
"EnableKernelFlags"=hex:07,23,00,00,16,00,00,00,00,00,00,00,00,00,00,00,00,00,\
| 00,00,00,00,00,00,00,00,00,00,00,00,00,00,17,23,00,00
| "BufferSize"=dword:00000040
| "MinimumBuffers"=dword:0000001e
| "MaximumBuffers"=dword:00000078
| "ClockType"=dword:00000001
|
..............................................................................
| If I set a smaller value for MaximumBuffers, it will stop tracing (so it
| says) when the buffers are full, and this I don't want to happen.
|
| What I'd like to do is to add a new Value as follows (according to MS
| instructions it should be present in the default Key, but it is not):
|
| "FlushTimer"=DWORD (Time delay in seconds before dirty buffers are
scheduled
| to be flushed).*
|
| Now my quest, please:
|
| What should be the exact syntax for the data string, if I want to set it
to,
| say, 3,000 seconds?
|
| I'd highly appreciate an answer,
|
| TIA,
| haim
|
| =====================================================================
 
H

Haim Guivon

OK, after trying a zillion ways, I gave up and set the data to zero, as you
suggested, restarted, deleted trace.log, and this did the trick.

IOU, and also to Carey and Kelly for all the wise advises. I have a good
idea now of how the thing works.

BTW, I think that Norton System Doctor uses MS global_logger, and when
enabled it changes the Start Dword to 1. But when one removes NSD, the Dword
stays ON (1), and this was the cause of the continuous growth of the log
file. Well, I think....

Thanx to all of you,
haim

========================================================
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

"trace.log" file takes 3 GB of disk space 2
WMI trace log 7
Log Files?? 5
Huge Logfile (16 GB and growing) 2
new file fragmentation 1
Trace.log Text file filling Up C Drive, takes about (24 - 36 hours) to fill HD. 6
bootvis wont stop tracing and disk gets eaten 1
Bootvis.exe wont stop tracing. what to do? 2

Top