Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

trace.log

4 views
Skip to first unread message

Haim Guivon

unread,
Oct 21, 2004, 12:11:15 PM10/21/04
to
The file \system32\logfiles\WMI\trace.log grows bigger until it eats up all
the free disk space (almost 4 GB)

At first I thought that it was a program called BootVis, and removed it.

But then I set several realtime sensors for disk free space, memory
available, and others, that constantly monitor the machine resources and
performance. The program that does it Norton System Doctor.

Now, again, in a session of three or four hours the free disk space
decreases until it blows the alarm.

Question: is it possible that the monitoring is writing such the data to the
file Trace.log, and letting it accumulate without purging the older?

TIA,
haim


Dave Patrick

unread,
Oct 21, 2004, 12:22:06 PM10/21/04
to
You might try setting the Reg_Dword 'Start' to zero

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/perfmon/base/global_logger_session.asp

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

Carey Frisch [MVP]

unread,
Oct 21, 2004, 12:27:40 PM10/21/04
to
To define trace log buffers
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/nt_smlogcfg_tracebuffer.mspx

Inflated TRACE.LOG problem, how to fix.
http://www.tweakxp.com/tweak1302.aspx

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

---------------------------------------------------------------------------------

Richard Urban

unread,
Oct 21, 2004, 6:02:19 PM10/21/04
to
Yes, it is from BootVis.

I had the same problem. You should have shut down tracking before removing
the program. Install the program again. deactivate everything. Reboot to
make certain that it is not tracking. Then, shut down and delete the program

--

Regards:

Richard Urban

aka Crusty (-: Old B@stard :-)


"Haim Guivon" <ar...@lookup.net> wrote in message
news:OokEYi4t...@TK2MSFTNGP11.phx.gbl...

Steve Nielsen

unread,
Oct 21, 2004, 6:14:11 PM10/21/04
to
Richard Urban wrote:

> Yes, it is from BootVis.
>
> I had the same problem. You should have shut down tracking before removing
> the program. Install the program again. deactivate everything. Reboot to
> make certain that it is not tracking. Then, shut down and delete the program
>

Haha! I know what you meant, but at first read when I saw

> Then, shut down and delete the program

I thought, how the heck is he gonna delete anything if the PC is shut down?
:)
Steve

Haim Guivon

unread,
Oct 22, 2004, 2:31:47 AM10/22/04
to
Thanks a lot, Dave for a most accurate answer. You've just taught me a lot.

Now, after reading about the issue, I actually don't want to turn event
tracing OFF, as you suggest. Instead, I'd like to go on tracing events with
the help of Norton System Doctor, but I'd like to set a time to flush the
buffers. Now, my Registry entries as follows:
...........................................................................
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\GlobalLogger]

"Start"=dword:00000001
"EnableKernelFlags"=hex:07,23,00,00,16,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,17,23,00,00
"BufferSize"=dword:00000040
"MinimumBuffers"=dword:0000001e
"MaximumBuffers"=dword:00000078
"ClockType"=dword:00000001
.............................................................................
If I set a smaller value for MaximumBuffers, it will stop tracing (so it
says) when the buffers are full, and this I don't want to happen.

What I'd like to do is to add a new Value as follows (according to MS
instructions it should be present in the default Key, but it is not):

"FlushTimer"=DWORD (Time delay in seconds before dirty buffers are scheduled
to be flushed).*

Now my quest, please:

What should be the exact syntax for the data string, if I want to set it to,
say, 3,000 seconds?

I'd highly appreciate an answer,

TIA,
haim

=====================================================================


"Dave Patrick" <ma...@Nospam.DSPatrick.com> wrote in message
news:%23hSico4...@TK2MSFTNGP11.phx.gbl...


> You might try setting the Reg_Dword 'Start' to zero
>
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/perfmon/base/global_logger_session.asp
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "Haim Guivon" wrote:
> | The file \system32\logfiles\WMI\trace.log grows bigger until it eats up
> all
> | the free disk space (almost 4 GB)

......
TIA,
haim

Haim Guivon

unread,
Oct 22, 2004, 3:13:02 AM10/22/04
to
Thank you very much. I am starting to learn. Presently learning how to
configure the "performance" administrative tool. Very complicatad for a
layman, but will go on. I could learn how to configure isolated event
tracing, but not how to set a size limit to the logfile.

Thanks,
haim

============================================================
"Carey Frisch [MVP]" <cnfr...@nospamgmail.com> wrote in message
news:uX2ikr4t...@TK2MSFTNGP14.phx.gbl...


> To define trace log buffers
> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/nt_smlogcfg_tracebuffer.mspx
>
> Inflated TRACE.LOG problem, how to fix.
> http://www.tweakxp.com/tweak1302.aspx
>
> --
> Carey Frisch
> Microsoft MVP
> Windows XP - Shell/User
>
> Be Smart! Protect Your PC!
> http://www.microsoft.com/athome/security/protect/default.aspx
>
> ---------------------------------------------------------------------------------
>
> "Haim Guivon" wrote:
>
> | The file \system32\logfiles\WMI\trace.log grows bigger until it eats up
> all
> | the free disk space (almost 4 GB)
> |

Dave Patrick

unread,
Oct 22, 2004, 5:28:25 AM10/22/04
to
You can add a Reg_Dword named "FlushTimer" and set it's decimal value to
'3000'

Haim Guivon

unread,
Oct 22, 2004, 12:26:10 PM10/22/04
to
OK, after trying a zillion ways, I gave up and set the data to zero, as you
suggested, restarted, deleted trace.log, and this did the trick.

IOU, and also to Carey and Kelly for all the wise advises. I have a good
idea now of how the thing works.

BTW, I think that Norton System Doctor uses MS global_logger, and when
enabled it changes the Start Dword to 1. But when one removes NSD, the Dword
stays ON (1), and this was the cause of the continuous growth of the log
file. Well, I think....

Thanx to all of you,
haim

========================================================

"Dave Patrick" <ma...@Nospam.DSPatrick.com> wrote in message
news:%23hSico4...@TK2MSFTNGP11.phx.gbl...

0 new messages