BootCKCL.etl files and CompCS events

I have been trying to parse the BootCKCL.etl file with the event tracing apis to track cpu utilization of processes over start-up. However when i do this i do not get any thread switch events. I do get a bunch of CompCS events that have an undefined structure.
When i export this file with xperf i get a bunch of CSwitchedCached events witch contain the thread switching information i need. So my question is how is these CSwitchedCached events related to the CompCS events and are these data structures documented anywhere?
Thanks for any help,

As far as I know, there is no publishing utility tool in Internet to view the ETL logs. If you want to find the root according to the ETL logs, you'd better create a Microsoft support ticket to get more help.
Of course you can post the ETL content here and other partners who read the forums regularly can either share their knowledge with you. Please do remember that hide the sensitive/privacy information when you post the log.
Feel free to post back. Thanks.
Tony Chen
TechNet Community Support
A new Office has arrived, try it now.
A beautiful Start. It begins here. Windows 8 and Windows RT.
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Similar Messages

  • Event Tracing Events (BootCKCL.etl files and CompCS events)

    
    Not sure if this would be considered the correct place to post this request, however if anyone has any insight into this issue it would probably be someone who has experience with Kernel level event tracing and its data structures.
    I have been trying to parse the BootCKCL.etl file with the event tracing apis to track cpu utilization of processes over start-up. However when i do this i do not get any thread switch events. I do get a bunch of CompCS events that have an undefined structure.
    When i export this file with xperf i get a bunch of CSwitchedCached events witch contain the thread switching information i need. So my question is how is these CSwitchedCached events related to the CompCS events and are these data structures documented anywhere?
    Thanks for any help,

    Yes.  Create a smart album with the criteria Photo is RAW:
    Then you can select all of the photos in the smart album and use the Events ➙ Create Event menu option to move all of the RAW photos into a new event.
    OT

  • Split Data File and Compare Events

    Hi All,
    I'm pretty new to DiAdem and the community so I apologize if this has been answered.  
    The data file I am working with is a vehicle field test and I would like to compare events throughout a single data file events highlighted by the flagged section of the attached picture.  I figured out how to flag and copy the data but I am wondering if there is an easier way to make the data line up without iteratively calculating it?  I'd like to do this without a script to be able to investigate these events before an analysis script is finalized.  Ideally I would like to select a second X-axis and slide it so the copied data lines up with the original.  

    Waveform data contains x-part and the y-part of a curve in one channel. The other way of storing data is having the x-data and y-data in separate channels. Based on your description, I think you have two channels of data, correct? When copying the data using the flags, there should be a copy of the x-data and a copy of the y-data.  From the picture, it looks like the y-data is being plotted against the original x-data and not against the copied x-data. To plot the copied x-data and the copied y-data:
    Select the x-data copy
    Hold down the control (Ctrl) key
    Select the y-data copy. This will pair the copy together.
    Release the Ctrl key. 
    Then you can drag and drop the seletced pair of copied data onto the View pane, as I did in my image above. You should not have to perform analysis to shift the data over time if you use this method.
    [Edit: fixed spelling mistake]
    Taylor B.
    National Instruments

  • Sharing files and iCal events between different users (accounts) on one Mac

    Hi,
    I have a new iMac with Leopard. I have two accounts on this machine: one for myself and one for my girlfriend. I want to share files with her such as iPhoto events (so I don't have to import photos twice), iCal events (so I don't have to send her an email to synch our calendars), music from iTunes and other files.
    Does anyone know how to easily do this? I have tried the drop folder for sharing but it only appears across a network if I am logged in and won't transfer to different users.
    Daniel

    thanks, zevoneer. apparently, I gave up too early in my own search. I'm trying it now - the copy process is taking some time. Well, I had hoped to narrow the access down to only one other account but at least this should provide the access that is needed.

  • Exchange security evtx files and connection events

    Does anyone know if the security .evtx files on the exchange mb database servers (2010) would store information about connections from client software (i.e. Outlook). trying to determine a way to see when a connection was made by a specific user (windows
    7 PC accessing exchange via outlook 2010), and subsequently closed (i.e when they shut outlook on their PC). Have some logs from the server on the day but they are a bit overwhelming, any ideas on specific event ID's to filter the masses of data down to connections.
    There are several hundred mailboxes on this DB server so its going to be a nightmare to analyze.

    Hello,
    Clients' connectivity logging is not maintained by Security Event Log files. To configure client connectivity you should configure:
    1. For RPC connectivity: http://theucguy.net/rpc-client-access-logging-in-exchange/.
    2. For OWA connections: check %SystemDrive%\inetpub\logs\LogFiles directory.
    Hope it helps,
    Adam
    CodeTwo: Software solutions for Exchange and Office 365
    If this post helps resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.

  • Not able to extract performance data from .ETL file using xperf commands. getting error "Events were lost in this trace. Data may be unreliable ..."

    Not able to extract  performance data from .ETL file using xperf commands.
    Xperf Commands:
    xperf –i C:\TempFolder\Test.etl -o C:\TempFolder\BootData.csv  –a process
    Getting following error after executing above command:
    "33288636 Events were lost
    in this trace. 
    Data may be unreliable
    This is usually caused
    by insufficient disk bandwidth for ETW lo
    gging.
    Please try increasing the minimum
    and maximum number of buffers
    and/or
                    the buffer size. 
    Doubling these values would be a good first at
    tempt.
    Please note, though, that
    this action increases the amount of me
    mory
                    reserved
    for ETW buffers, increasing memory pressure on your sce
    nario.
    See "xperf -help start"
    for the associated command line options."
    I changed page size file but its does not work for me.
    Any one have idea, how to solve this problem and extract ETL file data.

    I want to mention one point here. I have total 4 machines out of these 3 machines above
    commands working properly. Only one machine has this problem.<o:p></o:p>
    Hi,
    I consider that you can try to use xperf to collect the trace etl file and see if it can be extracted on this computer:
    Refer to following articles:
    start
    http://msdn.microsoft.com/en-us/library/windows/hardware/hh162977.aspx
    Using Xperf to take a Trace (updated)
    http://blogs.msdn.com/b/pigscanfly/archive/2008/02/16/using-xperf-to-take-a-trace.aspx
    Kate Li
    TechNet Community Support

  • Save project file and event file?

    When archiving a project, should I save the project file and the event file? All of my raw footage is saved on it's origional media.
    Cheers.
    Tom

    You want to save the Project folder contents and the contents of any Events used within the Project. You can also do this from the Project library itself by control clicking on the Project itself and selecting Duplicate Project. Make sure to attach an external drive for the archive.

  • Cluster log and etl files

    We have a windows 2008 R2 cluster.
    A few days ago, we had issues with this cluster.
    I openend the cluster log, hoping to find the cause of the problem. But the last entry in the cluster log was dated 14 december 2013. Also the modified date of the failoverclustering.etl files is 24 december 2013. This is also the last time the
    cluster was restarted.
    (Yes, we are a little behind with the MS security patches)
    If i have read some articles correct, then the Windows Event Tracing (ETW) process on each node should constantly writes to etl files. Correct?
    If that's the case, what could cause this problem?
    In windows 2003, the cluster.log was automatically generated. Do i have to create the cluster.log manually in W2kR2?
    Thanx.

    Ok. So with W2kR2 you have to create the cluster.log manually
    Yes, i could see some errors in the system eventlog. Like this one:
    Event 1146, FailoverClustering
    The cluster resource host subsystem (RHS) stopped unexpectedly. An attempt will be made to restart it. This is usually due to a problem in a resource DLL. Please determine which resource DLL is causing the issue and report the problem to the resource
    vendor.
    I will generate the cluster.log. Hopefully i can see what was causing this problem
    Thanks

  • In making a "highlights" movie, using clips from different imported iMovie events, can I delete the larger iMovie event file from the Events browser and still work w the smaller clips in the Projects browser w/o having the larger files still loaded?

    I have sucessfully imported 150 Sony digital 8mm movies (each one hour in length) into iMovie as 150 iMovie events. I have since successfully converted them from their original 13 Gb (.dv) file to an exported smaller 1.3 Gb (.4mv "large file") movie that I am happy with, using the iMovie projects browser. So now I have 150 " .4mv" movies on my internal HD as well as about half of my original raw data " .dv " movies on my internal hard drive.
    Due to their large size (over 2 Tb), I do not have all the larger raw data (.dv) files on my 2Tb internal drive, just about half of them. What I want to do now is to create a new project in the Projects browser for each of my kids, and reload, starting with Tape #1, each of these larger files and do a highlights movie for each of my kids, wherein I pick out smaller clips from each 1 hour .dv iMovie event and paste them into the appropriate kid's Highlights project in the Projects browser.
    Here's my question: If I load the first 5 large files back onto my internal HD, and paste in various shorter clips into each of my kids' Highlights project, and then if I delete those first 5 large files (they are backed up on 2 other 3Tb external HDs), can I keep doing this (reloading the next 5 large .dv files to work with), and ultimately take each of my kid's Highlights project and export as a .4mv movie EVEN THOUGH the earlier large .dv files are no longer on my internal HD, OR does my iMac need to have all these larger files loaded on my internal HD for me to eventually export each of my kid's Highlights project to a .4mv movie?
    I have a 2011 era 27" iMac desktop w 2Tb HD internal and 250 Gb flash drive, and Lion OSX and iMovie 11.

    Thanks. I tested it out and you were correct. I loaded 2 .dv movies from my external HD back onto my internal HD, and got them re-imported into iMovie, took a few short clips from each of the 2 iMovie events and pasted them into a new project in the Project Browser. Then I deleted these 2  "source clips" from my internal HD, closed iMovie and then re-opened it and found that iMovie would NOT export the smaller clips for a "highlights" .4mv movie without the "source clips" being available.
    I read your link on Quicktime. It talks about mostly trimming, which is what I did with each iMovie event before I took each one as a project to export as a smaller .4mv file. But if I use Quicktime (do I need QT Pro or basic), what advantage is it to me to use QT over iMovie (I must admit I am a novice at iMovie and have never used QT or QT Pro as a tool)? Will it then convert any edits I make to a .m4v movie or do I need iMovie to do that?
    Does QT allow trimming multiple segments out of a movie during one edit session, or can you only do 1 at a time? By that I mean that, for example, when I use Sonys Picture Motion Browser for my .mts movies, you can only set one Start and one End point for each edit/trim you do: it does not allow you to set multiple Start Stop points like iMovie allows in its Event or Project browser. You can only do one "trim" at a time, save it and then reopen to do another trim. not very useful.

  • I have moved to i cloud and ical event is not allowing file attachment to be added

    I have set up icloud and now when I enter an event in Ical there doesn't appear to be a way to attach a file. I heve tried dragging the file over the event  editor as per help, but that doesn't work and there is not menu item for attachments that I can find.
    Surely this facility shoudl still be there.

    The attach feature works only on calendars OnMyMac. Alternatively you can add an URL to your file:
    open event and Edit it
    drag the file
    drop the file on URL field
    Press OK button
    When you click on URL link, folder containing  the file opens.

  • Event id related to the removal of the file and print sharing for networks

    Hi ,
    Recently print team has migrated the print server from the physical old server A to the VM server A-new .After the migration ,  the server A-new is retained with the name server A shutting down the old server .
    But the clients are reporting that they are not be able to print because we found that due to this print team migrated the old print server to the new print server with the duplicated entries which reflected in AD. This our server team came to know once
    the complaint raised  by the site person to us saying that their printers are not working at all.
    While checking the issue only then we found that the duplicated entries are found in the AD for the printer objects published in the AD.Print team has done the improper migration and left to server team saying that it is our responsibility to solve the issues.
    And I suspect that somebody has  removed the file and print for networks in the network portion of the windows.We came to know only when we try to take any share either file share or print from the particular server to file server.
    After enabling that option in the network portion , everything got resolved as the duplicate entries removed from the AD and published one instance of the printers.
    I need to find the event in which this action has been triggered to remove that component and from that to identify who has done that..
    Any help is greatly appreciated
    Thanks & Regards S.Swaminathan Live & let others live!!!

    There are some print events on the Domain Controller if one of the DC "pruned" the old print objects.  Unfortunately these are information events logged to Print-Service Operational channel which is not enabled by default.  You might
    be lucky and someone had these events enabled. 
    Check if the channel is enabled on all your domain controllers. 
    http://social.technet.microsoft.com/wiki/contents/articles/13308.troubleshooting-windows-server-2012-printing.aspx
    Alan Morris formerly with Windows Printing Team

  • Imovie, i can't see my project files and events, and won't make new ones!?

    When opening imovie (11) i cant see eny off my events or project files and i cant make new ones or import files. But i still se my events and project if i go to User-Film-Imovie Projects/Events...!?
    Message was edited by: Seb K S

    I've been having problems along the lines of most of these people as I have been trying to move iMovie files from one computer to another. I then put them on a USB drive, only to find out that it wouldn't work, according to the documentation. We then bought another Firewire drive, and formatted it as forum notes indicated, HDF. It didn't work correctly for file transfer in FAT32. Then when the files were put on the new drive via command line file copying program called rsync.
    I still couldn't get it to sync up on the new drive, but they were there. The answer turned out to be a few things found in much older posts, so I thought I'd post them here in case it is helpful to others.
    I'm now using iMovie11, but some of these were written for 08.
    *1. The files have to be in the two directories, Events and Projects. These have to be at the *top level of the hard drive*. If they are at a lower level, iMovie won't find them*. I had put them in another folder called Movies, but it can't find them there.
    2. Throw out the preference file, if necessary, as noted in several of the online posts. I'm not sure if that mattered or not, but did it, as well as restarted iMovie and the newly added projects and events finally showed up.
    3. Copy files to the events or project folder while holding down the command key.
    It now looks like there is a little bit of an issue with the syncing of the project data and the movie, but so far, it seems to be o.k., other than that.

  • IPhoto Originals File now by Date and not Event - why?

    Ever since I upgraded to iPhoto 09, I realized the original file structure in the iPhoto Library has changed back to Dates, rather than by Events, even though all my photos belong in a non-date event. This is the same as Iphoto 06. I got used to the Event structure in iPhoto 08.
    All my previous events are still intact, but I have this problem for my new pics where if I put them in an event, the original file structure would be sorted by date. This is very annoying if I want to send an event to someone or if I'm using Front Row/Boxee to view a particular event. Does anyone have the same issue? I thought if I put a photo into an event, it would automatically update in the file structure immediately as well.
    As you can see below, some files are sorted by Events and some files are sorted by Dates:
    This is my 2009 iPhoto Originals file:
    4 Jul 2009
    5 Nov 2009
    7 Aug 2009
    7 Jul 2009
    7 Nov 2009
    8 Aug 2009
    8 Aug 2009_2
    8 Aug 2009_3
    8 Aug 2009_4
    8 Aug 2009_5
    15 Mar 2009
    18 Nov 2009
    19 Jun 2009
    Australia 2009 Jayne's Photos
    Australia Sue's Photos 2009
    Bedroom Project
    Dublin
    Oz Quick Album
    Portugal 2009 Sue
    Rovinj Sue Photos
    Take That
    Is there anyway I can have this file organised by Events and not Dates?
    Thank you for your help.
    David.
    Message was edited by: David Spencer5

    Is there anyway I can have this file organised by Events and not Dates?
    No.
    The strict link between the Events in the iPhoto Window and the folders in the Finder was broken with iPhoto 09 and no one outside of Apple knows why.
    However, it shouldn't matter, because you ahould not be accessing the files inside the iPhoto Package File anyway - bluntly it's not a supported way of accessing the files.
    Make Albums of the photos to view in other apps.
    fwiw:
    There are many, many ways to access your files in iPhoto:
    *For Users of 10.5 and later*
    You can use any Open / Attach / Browse dialogue. On the left there's a Media heading, your pics can be accessed there. Command-Click for selecting multiple pics.
    Uploaded with plasq's Skitch!
    (Note the above illustration is not a Finder Window. It's the dialogue you get when you go File -> Open)
    You can access the Library from the New Message Window in Mail:
    Uploaded with plasq's Skitch!
    *For users of 10.4 and later* ...
    Many internet sites such as Flickr and SmugMug have plug-ins for accessing the iPhoto Library. If the site you want to use doesn’t then some, one or any of these will also work:
    To upload to a site that does not have an iPhoto Export Plug-in the recommended way is to Select the Pic in the iPhoto Window and go File -> Export and export the pic to the desktop, then upload from there. After the upload you can trash the pic on the desktop. It's only a copy and your original is safe in iPhoto.
    This is also true for emailing with Web-based services. However, if you're using Gmail you can use iPhoto2GMail
    If you use Apple's Mail, Entourage, AOL or Eudora you can email from within iPhoto.
    If you use a Cocoa-based Browser such as Safari, you can drag the pics from the iPhoto Window to the Attach window in the browser.
    *If you want to access the files with iPhoto not running*:
    For users of 10.6 and later:
    You can download a free Services component from MacOSXAutomation which will give you access to the iPhoto Library from your Services Menu. Using the Services Preference Pane you can even create a keyboard shortcut for it.
    For Users of 10.4 and later:
    Create a Media Browser using Automator (takes about 10 seconds) or use this free utility Karelia iMedia Browser
    Other options include:
    1. *Drag and Drop*: Drag a photo from the iPhoto Window to the desktop, there iPhoto will make a full-sized copy of the pic.
    2. *File -> Export*: Select the files in the iPhoto Window and go File -> Export. The dialogue will give you various options, including altering the format, naming the files and changing the size. Again, producing a copy.
    3. *Show File*: Right- (or Control-) Click on a pic and in the resulting dialogue choose 'Show File'. A Finder window will pop open with the file already selected.
    Regards
    TD

  • How to replace event file AND replace edits in timeline

    Is it possible to replace a video/file in an event, and in turn replace what it was used for in the timeline? For example, if I used some footage from an event and I cut i up 3 times in a project and added transitions and effects, is it possible to replace the file in the event with a new file (same length) and have the same cuts/transitions/effects applied to the new file in the timeline?
    I hope my question is clear. I've been trying to do this in the original media folder but with no luck.
    Thanks!

    Karsten Schlüter wrote:
    Jetemadi wrote:
    … , is it possible to replace the file in the event with a new file (same length) and have the same cuts/transitions/effects applied to the new file in the timeline?…
    hit cmd-c in the Project to copy the clip('s settings)
    select the new clip in the Event
    drag on old clip, select one of the replace-options
    select replaced clip, cmd-alt-v, apply effects/colors/…
    I would NEVER dare to 'fumble' with the internal file-structure of a data-base (=FCPX)
    Yeah I've learned that the hard way. I'll probably never do that again. Anyways, I didn't think about copying the clips settings. That definently works. I guess what I was looking for (or dreaming of) was some kind of automatic way. In After Effects and I believe premiere, you can right-click on a file in the "Event" folder and it will replace it the project as well automatically. I don't think anything like this exists for FCP however. I'm pretty sure the only way would to wait for apple to add something like this, or create some kind of script/plugin/automater. Any ideas?

  • I would like to make one file and add several related files of photos in the one event.  Keeping photos in seperate event files in one large event file.  Is this possible?

    I would like to make one event file and add several realted event files in this one event file without putting all photos together.  Can this be done?

    Files and events ahve nothing to do with each other
    If you are looking for "sub-events" that is not a feature of iPhoto
    you can use albums and folders - albums hold photos and folders hold albums or other folders
    If thsi does not answer your queation please ask it again - it is not clear
    LN

Maybe you are looking for