Joining Existing Trace Log Sessions

If an attempt is made to create or start a trace log session in TraceView, as described in Creating New Trace Log Sessions, and that trace log session is already active on the system, a warning dialog is displayed:

The user is given three possible options at this point:

1.) Stop the session and restart it, allowing TraceView to exercise full control over the session.

2.) Join the session in progress.  TraceView will still allow updates to the session, but will never attempt to stop such a session.  As such, the trace log session will be unstoppable and non-removable without restarting TraceView.

3.) Abort the start operation altogether.

It can be desirable to have multiple trace event consumers consume events from the same trace provider.  In addition, it is often desirable to join the NT Kernel Logger in process to access system events, or events from boot-start drivers.

© Microsoft Corporation 2002