Processes event trace logs or real-time data from instrumented event trace providers and allows you to generate trace analysis reports and CSV (comma-delimited) files for the events generated.


tracerpt [FileName [filename ...]] [-o [FileName]] [-report [FileName]] [-rt session_name [session_name ...]] [-summary [FileName]] [-config [FileName]


FileName [filename ...] : Specifies the name of the file for the event trace session. You can specify multiple files.

-o [FileName] : Specifies the name of the CSV (comma-delimited) file. If no files are specified, then the default is dumpfile.csv and not summary.txt.

-report [FileName] : Specifies the name of the output report file. Default is workload.txt.

-rt session_name [session_name ...] : Gets data from the realtime data source. To use this option, include the event trace session.

-summary [FileName] : Specifies name of output summary file. Default is summary.txt. 

-config FileName : Specifies the pathname of the settings file that contains command line parameters. Use this to enter your command line options into a file.

/? : Displays help at the command prompt.


Viewing dumpfile.csv files in Microsoft Excel

Opening the dumpfile.csv format in Microsoft Excel allows you to view events in chronological order. The files include header records followed by comma-delimited text. The header fields are listed below:



Thread identifier

Clock time

Event timestamp

Kernel (ms)

Processor time in kernel mode

User (ms)

Processor time in user mode

User data

Variable piece of header data based on the Managed Object Format (MOF) structure.


Instance ID


Parent Instance ID

Using the -report option

To use the report option, you must include a "Windows kernel trace" file, and any other event trace file in your command line. You will receive an error message without this in your command line.

Using the -summary option

When you use the -summary option, the following file is generated:

Files processed

list of files

Total buffers processed


Total events processed


Total events lost


Start time

dd MMM yyyy hh:mm:ss.ttt

End time

dd MMM yyyy hh:mm:ss.ttt

Elapsed time

N sec

Using the -config option

The contents of the setting file used with the -config option should have the following format:



where command_option is a command line option and value specifies its value. For example:







For more information about incorporating Tracerpt into your Windows Management Instrumentation (WMI) scripts, see Scripting Logs and Monitoring at the Microsoft Windows Resource Kits Web site.

Formatting legend



Information that the user must supply


Elements that the user must type exactly as shown

Ellipsis (...)

Parameter that can be repeated several times in a command line

Between brackets ([])

Optional items

Between braces ({}); choices separated by pipe (|). Example: {even|odd}

Set of choices from which the user must choose only one

Courier font

Code or program output




Command-line reference A-Z

© 2017 Microsoft Corporation. All rights reserved. Contact Us |Terms of Use |Trademarks |Privacy & Cookies