-
Notifications
You must be signed in to change notification settings - Fork 2
/
Tanium_Performance.wprp
70 lines (68 loc) · 2.97 KB
/
Tanium_Performance.wprp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
<?xml version="1.0" encoding="utf-8"?>
<WindowsPerformanceRecorder
Author="Jeff Stokes"
Comments="Capture trace data for Tanium servers"
Company="Tanium, Inc."
Copyright="Tanium, Inc."
Tag="Created"
Team="TAM org"
Version="1.0"
>
<Profiles>
<SystemCollector Id="SystemCollector" Name="NT Kernel Logger">
<BufferSize Value="1024" />
<Buffers Value="320" />
</SystemCollector>
<EventCollector Id="EventCollector_Tanium_Performance" Name="Tanium Performance">
<BufferSize Value="64" />
<Buffers Value="320" />
</EventCollector>
<SystemProvider Id="SystemProvider">
<Keywords>
<Keyword Value="CompactCSwitch" />
<Keyword Value="CSwitch" />
<Keyword Value="DiskIO" />
<Keyword Value="DPC" />
<Keyword Value="FileIO" />
<Keyword Value="FileIOInit" />
<Keyword Value="HardFaults" />
<Keyword Value="Interrupt" />
<Keyword Value="Loader" />
<Keyword Value="MemoryInfo" />
<Keyword Value="MemoryInfoWS" />
<Keyword Value="ProcessCounter" />
<Keyword Value="ProcessThread" />
<Keyword Value="ReadyThread" />
<Keyword Value="Registry" />
<Keyword Value="Drivers"/>
<Keyword Value="SampledProfile" />
</Keywords>
<Stacks>
<Stack Value="SampledProfile" />
<Stack Value="CSwitch" />
<Stack Value="ReadyThread" />
<Stack Value="FileCreate" />
<Stack Value="FileClose" />
<Stack Value="ThreadCreate" />
</Stacks>
</SystemProvider>
<EventProvider Id="EventProvider_014de49f-ce63-4779-ba2b-d616f6963a87" Name="014de49f-ce63-4779-ba2b-d616f6963a87" />
<EventProvider Id="EventProvider_9c205a39-1250-487d-abd7-e831c6290539" Name="9c205a39-1250-487d-abd7-e831c6290539" />
<EventProvider Id="EventProvider_cdead503-17f5-4a3e-b7ae-df8cc2902eb9" Name="cdead503-17f5-4a3e-b7ae-df8cc2902eb9" />
<Profile Id="Tanium_Performance.Verbose.File" Name="Tanium_Performance" Description="Tanium_Performance" LoggingMode="File" DetailLevel="Verbose">
<Collectors>
<SystemCollectorId Value="SystemCollector">
<SystemProviderId Value="SystemProvider" />
</SystemCollectorId>
<EventCollectorId Value="EventCollector_Tanium_Performance">
<EventProviders>
<EventProviderId Value="EventProvider_014de49f-ce63-4779-ba2b-d616f6963a87" />
<EventProviderId Value="EventProvider_9c205a39-1250-487d-abd7-e831c6290539" />
<EventProviderId Value="EventProvider_cdead503-17f5-4a3e-b7ae-df8cc2902eb9" />
</EventProviders>
</EventCollectorId>
</Collectors>
</Profile>
<Profile Id="Tanium_Performance.Verbose.Memory" Name="Tanium_Performance" Description="Tanium_Performance" Base="Tanium_Performance.Verbose.File" LoggingMode="Memory" DetailLevel="Verbose" />
</Profiles>
</WindowsPerformanceRecorder>