Microsoft Windows
[Version 6.1.7000
](C) Copyright 2009 Microsoft Corp.
C
:\Windows>netsh trace correlate ?
correlate
Normalizes or filters a trace file to a new output file.
Usage
: trace correlate
[input=
]tracefilename.etl
[output=
]newtracefilename.etl
[[filter=
]Activity_ID
] [[overwrite=
]yes
|no
]
[[retaincorrelationevents=
]yes
|no
] [[retainpii=
]yes
|no
] [[retainglobalevents=
]yes
|no
]
Parameters
:
Tag Value
input - Input ETL trace file
output - Output file name
filter - Output only events related to this Activity GUID
overwrite - Overwrites existing files
retaincorrelationevents - Retains correlation events
retainpii - Retains events containing personally identifiable information
retainglobalevents - Retains global events
Defaults
:
filter=none
overwrite=no
retaincorrevents=no
retainpii=yes
retainglobalevents=yes
Remarks
:
Filter activity ID is a GUID expressed in the form {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
Personally identifiable information includes packet capture events
