Viewing Log Files

<< Click to Display Table of Contents >>

 

Viewing Log Files

Log Viewer allows opening one or more files at the same time, merging information on these files, and monitoring log sessions. Log files with an .etl extension can be opened by Log Viewer by using the File - Open Event File menu, by using the Open Event File Open Event File option on the toolbar, or by dragging a file to the main window. The result is a window similar to the one on the next figure.

Opening a log file

Opening a log file

On the event viewing area, files are sorted chronologically, one event by row. Messages in green are information about the structure of log files, and are not part of the messages of the process that recorded events on that session.

The status bar, on the lower part of the window, always indicates the number of selected events (in this example, 1535), the percentage of processed ones (in this example, 100%), and the status of search filters (in this example, that search was not affected by any filter).

When right-clicking the header of the event list, users can select, on its contextual menu, which columns are visible or invisible to users.

To view a message details, select the corresponding row and type ENTER or double-click a message. The window on the next figure is then opened.

Details of a log message

Details of a log message

The available options on this window are described on the next table.

Available options on the Event Properties window

Option

Description

Date

The event date, in YYYY-MM-DD format

ID

A unique identifier for every event

Time

The event time, in HH:MM:SS.000 format

Process

Identifier of the process generating this event. This value can be displayed in hexadecimal or decimal format, depending on the selection performed in the Process and Thread as Hexadecimal option of an event's contextual menu

Category

Event category, according to the table at the beginning of this chapter

Thread

Identifier of the thread generating this event. This value can be displayed in hexadecimal or decimal format, depending on the selection performed in the Process and Thread as Hexadecimal option of an event's contextual menu

Module

Identifies the module, function, or area name inside the process or thread responsible for generating information about this event

Move Previous Move Previous and Move Next Move Next

Allows navigating through the previous and next events relative to the selected event

Message

Text of an event's message

BLOB Data

Shows whether along with an event there is binary data (Binary Large Objects) attached, which complements information given by this event's Message option. This option is optional and therefore it may not have data associated to it

Copy

Allows copying the selected event to the Clipboard

Close

Closes this window

 

When the mouse pointer remains over an event for some time, a tool tip appears displaying its message, as in the next figure.

Information about a log message

Information about a log message

When right-clicking a file, the options on the next table are displayed on its contextual menu.

Contextual menu options of a file

Option

Description

Close All Files

Closes all open files

Close File

Closes only the selected file

Merge All Files

Adds all files from the Opened Log Files node to the Merged Log Files node

Merge File

Adds the selected file to the Merged Log Files node

Open File Folder

Opens the directory where the log files are stored

Copy File Path to Clipboard

Copies the path of the selected file to Windows Clipboard

Was this page useful?