Developing a Provider

To write the events that you define in your manifest, you use the functions included in the Event Tracing (ETW) API. For details on writing a provider, see Providing Events.

After writing the provider, use the WevtUtil.exe tool to register the provider and schema. For details on using WevtUtil, see Windows Event Log Tools. The following shows how to use WevtUtil to register a provider and to remove the registration.

wevtutil im provider.man

wevtutil um provider.man