diff --git a/LogStudy.EventLog.Next/Program.cs b/LogStudy.EventLog.Next/Program.cs
index 22b7065..2e37069 100644
--- a/LogStudy.EventLog.Next/Program.cs
+++ b/LogStudy.EventLog.Next/Program.cs
@@ -7,6 +7,37 @@ namespace LogStudy.EventLog.Next
static void Main(string[] args)
{
Console.WriteLine("======== 高级事件日志学习 ========");
+
+ //UseTest();
+ UseDefaultSource();
+
+
+ Console.WriteLine("按回车键，退出！");
+ //Console.ReadLine();
+ }
+
+ static void UseTest()
+ {
+ EventSource defaultEventSource = new EventSource("Demo");
+
+ defaultEventSource.Write("xxxxx","xxxxxxxxxxxxxxxxxxxxxxxx");
+ }
+
+ static void UseDefaultSource()
+ {
+ EventSourceSettings settings = EventSourceSettings.EtwSelfDescribingEventFormat | EventSourceSettings.ThrowOnEventWriteErrors;
+ EventSource defaultEventSource = new EventSource("Andy-DemoTest", settings, new string[] { "First", "Second" });
+
+ EventSourceOptions options = new EventSourceOptions()
+ {
+ Keywords= EventKeywords.All,
+ Level = EventLevel.Verbose,
+ Opcode = EventOpcode.Info,
+ Tags = EventTags.None,
+ ActivityOptions = EventActivityOptions.Recursive,
+ };
+
+ defaultEventSource.Write("xxxxx", options, "000000000000000000000000000000000000000000000000");
}
}
}
\ No newline at end of file
diff --git a/LogStudy.EventLog/Program.cs b/LogStudy.EventLog/Program.cs
index 3cc2250..be59727 100644
--- a/LogStudy.EventLog/Program.cs
+++ b/LogStudy.EventLog/Program.cs
@@ -13,9 +13,8 @@ namespace LogStudy.EventLog
{
Console.WriteLine("======== 事件日志学习 ========");
-
MinimalEventSource minimalEventSource = MinimalEventSource.Log;
- minimalEventSource.Write("MiniEventSource", "-----------------------------------------------------");
+ minimalEventSource.Write("MiniEventSource", "--------------------------------");
var evtSource = new EventSource("AndyEvent");
@@ -25,6 +24,7 @@ namespace LogStudy.EventLog
DatabaseSource.Instance.OnCommandExecute("我是自定义事件日志！");
WriteWindowsOSLog();
+
Console.WriteLine("输入回车键，退出程序。");
Console.ReadLine();
}
@@ -34,12 +34,15 @@ namespace LogStudy.EventLog
/// 需要引入 System.Diagnostics.EventLog 包
/// (需要管理员权限运行)
/// </summary>
+ /// <remarks>
+ /// 查看：Windows操作系统的 "事件查看器" --> 应用程序和服务日志 --> AndyLog：右侧日志记录列表
+ /// </remarks>
static void WriteWindowsOSLog()
{
//只有Windows系统，才可以。
if (OperatingSystem.IsWindows())
{
- var sourceName = "AndySource";
+ var sourceName = "Andy-Windows-SystemLog-Source";
var logName = "AndyLog";
if (!System.Diagnostics.EventLog.SourceExists(sourceName))
diff --git a/LogStudy.EventLog/收集和查看事件日志.md b/LogStudy.EventLog/收集和查看事件日志.md
index 19dc60c..cfaa527 100644
--- a/LogStudy.EventLog/收集和查看事件日志.md
+++ b/LogStudy.EventLog/收集和查看事件日志.md
@@ -76,7 +76,7 @@ namespace EventSourceDemo
4. 选择“确定”以确认配置设置
5. 选择“开始”以开始运行应用并收集日志
6. 选择“停止收集”或退出应用以停止收集日志并显示收集的数据
-
+ > 特别注意：改了事件源的名称之后，一定要把GUID改了或者删除(删除后会自动生成)，否则“探查器”监测不到新事件日志
+ 查看跟踪
diff --git a/LogStudy.TraceLog/Program.cs b/LogStudy.TraceLog/Program.cs
index 408932e..8663c35 100644
--- a/LogStudy.TraceLog/Program.cs
+++ b/LogStudy.TraceLog/Program.cs
@@ -3,11 +3,11 @@ using LogStudy.TraceLog;
Console.WriteLine("======== 跟踪日志学习 ========");
-//UseDefaultListener();
+UseDefaultListener();
-//UseCustomListener();
+UseCustomListener();
-//UseCustomListener2();
+UseCustomListener2();
UseSystemListener();
diff --git a/LogStudy.TraceLog/study.md b/LogStudy.TraceLog/学习.md
similarity index 100%
rename from LogStudy.TraceLog/study.md
rename to LogStudy.TraceLog/学习.md
diff --git a/LogStudy.TraceLog/查看跟踪日志.md b/LogStudy.TraceLog/查看跟踪日志.md
new file mode 100644
index 0000000..32861c1
--- /dev/null
+++ b/LogStudy.TraceLog/查看跟踪日志.md
@@ -0,0 +1,20 @@
+查看跟踪日志
+============
+## 使用 诊断工具
+1. 打开：诊断工具窗口
+ Visual Studio 菜单栏 --> 调试 --> 窗口 --> 显示诊断窗口
+2. 设置 IntelliTrace，诊断窗口的内容包含跟踪项
+ + Visual Studio 菜单栏 --> 工具 --> 选项 --> IntelliTrace --> 常规 --> 启用
+ + Visual Studio 菜单栏 --> 工具 --> 选项 --> IntelliTrace --> IntelliTrace 事件 --> 跟踪：全选或按需选择
+3. 查看：
+ + 命中断点时：在诊断工具的事件里可以查看详情
+ + 运行之后：在诊断工具的事件里中，可以查看：只是有个历史记录，没有详情；
+## 跟踪监听器
+使用自定议的跟踪监听器或预定义的TraceListener
+
+## 使用 VS性能探查器
+目前测试的结果是：PerView不能收集到跟踪日志信息，只能收集到事件日志。
+
+## PerView
+
+目前测试的结果是：PerView不能收集到跟踪日志信息，只能收集到事件日志。
\ No newline at end of file