3 ms·
Absolutely. ETW is fantastic - the tooling isn't great but it is a fantastic bit of tech. As an aside, you're comment about textual logging points to a deficie
by windowsworkstoo 11y ago
Absolutely. ETW is fantastic - the tooling isn't great but it is a fantastic bit of tech.
As an aside, you're comment about textual logging points to a deficiency generally about how developers do logging - with text. ETW forces you to allocate Event IDs and structure to your log events so that logs can a) be consistent and b) can be easily (i.e without regex magic) monitored and alerted on, summarised and generally reasoned about.
If you are on a platform with ETW, you should use it. If not, you should still use some of its principles - i.e Event IDs and structured data.