none
Enable WPP through the Windows Event Log Service RRS feed

  • Question

  • Hello,

    this article states it is possible to show WPP trace messages in Windows Event Viewer. In my driver I have implemented WPP to trace my debug message. Now I want some of the messages (TRACE_LEVEL_WARNING and above) to show up in Windows Event Viewer. I created a manifest and compiled it with the message compiler.

    After registering events with generated function EventRegisterMyDriver() I am able to log custom events like EventWriteSampleEventA(L"Hello world") and to see them in Windows Event Viewer (after registering my manifestfile with wevtutil.exe).

    After adding a debug channel to my manifest file to achieve WPP through Event Viewer, according to the article:

    <channel 
      name="DebugChannel" 
      chid="DebugChannel"
      symbol="DebugChannel" 
      isolation="System"
      type="Debug" 
      enabled="true" 
      message="$(string.My Driver.channel.DebugChannel.message)">
        <publishing>
          <level>4</level>
          <keywords>0xFFFFFFFF</keywords>
          <controlGuid>{000adead-beef-bedd-ed0a-defacedbabe0}</controlGuid>
          </publishing>
    </channel>

    I double checked the control GUID. It is equal to the GUID I use for my WPP provider. I expected to see my WPP trace messages in Windows Event Viewer but I do not see any of my WPP messages. What am I missing?




    • Edited by Armin Bego Friday, January 20, 2017 1:53 PM
    Friday, January 20, 2017 1:51 PM