This article describes simplified Event Tracing for Windows (ETW). Original KB number: 2593157 Summary Event Tracing for Windows (ETW) serves the purpose of providing component level logging. As mentioned in the article About Event Tracing, ETW provides: A tracing mechanism for events raised by both user-mode applications and kernel-mode device drivers. Additionally, ETW gives you the ability to
![Event Tracing for Windows is simplified - Windows Server](https://cdn-ak-scissors.b.st-hatena.com/image/square/d6e4cb632c7025e9f5e05fd314fbf6dcd6144e8d/height=288;version=1;width=512/https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fmedia%2Fopen-graph-image.png)