You enable the Global Logger trace session on a Microsoft
Windows XP-based computer to capture the activity of the Windows kernel,
drivers, and other trace providers during the Windows startup process. However,
the Global Logger trace log may grow and exhaust all the disk space on the
This problem occurs because there is no option to limit the
size of the Event Tracing for Windows (ETW) trace log. The program that enables
global logging must programmatically stop the logging.
A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix. Note
If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note
The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
No prerequisites are required.
You must restart the computer after you apply this hotfix.
Hotfix replacement information
This hotfix does not replace any other hotfixes.
The English version of this hotfix has the file
attributes (or later file attributes) that are listed in the following table.
The dates and times for these files are listed in Coordinated Universal Time
(UTC). When you view the file information, it is converted to local time. To
find the difference between UTC and local time, use the Time
tab in the Date and Time tool in Control Panel.
Collapse this tableExpand this table
|File name||File version||File
has confirmed that this is a problem in the Microsoft products that are listed
in the "Applies to" section.
Serious problems might occur if you modify the registry
incorrectly by using Registry Editor or by using another method. These problems
might require that you reinstall your operating system. Microsoft cannot
guarantee that these problems can be solved. Modify the registry at your own
This hotfix includes an option to specify the
maximum size of the trace log by setting a MaxFileSize registry value. If the
program does not programmatically stop ETW tracing, the trace log grows to the
size that is specified by the MaxFileSize registry value. When the size of the
ETW trace log reaches the size that is specified by the MaxFileSize value, ETW
tracing stops automatically. The MaxFileSize value is specified in megabytes
After you apply the hotfix, specify the maximum size of the
trace log by setting a MaxFileSize registry value. To do this, follow these
- Click Start, click Run,
type regedit, and then click
- Locate and then click the following registry subkey:
- On the Edit menu, point to
New, and then click DWORD Value.
- Type MaxFileSize, and then press
- Double-click MaxFileSize, type the size of
the trace log that you want in the Value data box, and then
- Quit Registry Editor.
For more information about how to log to the Global Logger
session, visit the following Microsoft Web site:
more information, click the following article number to view the article in the
Microsoft Knowledge Base:
Description of the standard terminology that is used to describe Microsoft software updates