API to install ETW manifest

Sergey_Pisarev

Hello !

For testing I use wevtutil to install etw manifest.

Is there some api to install it ?

Jay_Kumar

I don't think we can do it through API. Even i explored around sometime but couldn't find any useful info.

Peter_Viscarola_(OSR)

Don’t you just set the Registry entires via your INF?

Peter

Sergey_Pisarev

Unfortunately not Peter :(

I ended up calling wevtutil from installer as custom action. This utility modifies a LOT of registry entries during manifest registration.

Peter_Viscarola_(OSR)

Unfortunately not Peter

Hmmmm... IIRC, that's how we do it. There aren't THAT many entries. And, IIRC, even "universal INFs" are allowed to do this (because there is not good way to do it otherwise).

Anyhow... glad you found a way to do it.

Peter

Sergey_Pisarev

Peter could you please share such inf ? Or maybe at least ETW manifest registration portion of it ?

Peter_Viscarola_(OSR)

Better yet... here’s a discussion we had a few years back on this topic.

There's also the AddEventProvider directive that you can supposedly put in your INF file. But I've personally never seen it used. It's relatively new.

Peter

Sergey_Pisarev

Thank you Peter !