search

microsoft / krabsetw

KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
Other
588 stars 147 forks source link

No Support For Consumption of Log Files #160

Open i-nino opened 3 years ago

i-nino commented 3 years ago

One thing krabs is missing is that it only processes real-time data. Would be great to add a feature where you can process log files (*.etl, etc.) as well to the API. I actually hacked this into my local copy of the code, so don't see any immediate issues where this would be difficult to implement.

swannman commented 3 years ago

Hi @i-nino, this is a neat idea. I'm open to reviewing a PR if you'd be willing to submit one.

Cheers!

loneicewolf commented 3 years ago

this was quite fascinating, will follow this one. Have a great corona-free day on you 2!