-of {CSV | EVTX | XML} Specifies the dump format (the format when outputting to a file).
The default output is XML.
-df Filename Provides a Microsoft-specific counting and reporting schema file.
-int Filename Specifies the name of a file to use to dump the interpreted event structure.
-rts Places a raw time stamp in the event trace header. You can use this option with the ??“o
option, but not with the ??“report or ??“summary options.
-tmf Filename Specifies the name of a Trace Message Format (TMF) definition file. The TMF
file contains instructions for parsing and interpreting binary data. You can discover more about
the structure and contents of the TMF definition file at http://msdn2.microsoft.com/en-gb/
library/ms797950.aspx.
-tp Value Defines the TMF file search paths. As with any other path, you can separate multiple
paths using the semicolon (;).
-i Value Defines the provider image path. A provider is the originator of an event log. Learn
more about providers at http://msdn2.microsoft.com/en-gb/library/ms797953.aspx.
The Program Database (PDB) file that matches the provider is located in the symbol server.
Details of the PDB appear at http://msdn2.
Pages:
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210