Enabling CeLog Event Tracking in a Run-Time Image
You can create a run-time image that automatically starts CeLog Event Tracking during boot by setting two environment variables before you build. It is also possible to set them via the command line in a build window.
Note: Do not add CeLog to shipping devices. The goal is to avoid performance / memory loss due to CeLog and also to reduce the attack-surface through which an attacker could try to compromise the system.
In the Project menu, select Properties.
In the Property Pages window, select Configuration Properties and then select Build Options.
In the Build Options window, select Enable Event Tracking During Boot (IMGCELOGENABLE=1) is checked.
This adds CeLog.dll to ROM and causes the kernel to load it during boot.
Select Flush tracked events to Release Directory (IMGAUTOFLUSH=1).
This adds CeLogFlush.exe to ROM and causes the OS to launch it during boot. Tracked events will be flushed to celog.clg in the Release directory.
Build the run-time image.
For more information, see Building and Downloading a Run-Time Image.