Xperf Actions

Xperf actions are trace processing components that collate event information to produce text reports. Actions produce summarized reports that are specific to a set of events such as registry accesses, context switches, file accesses, or system configuration.

All actions are invoked using the following command-line pattern:

xperf -i input.etl -o output.txt -a <action_name> [action_parameters]

Where input.etl is the name of the trace file, output.txt is the name of the report file, and <action_name> is the name of the action. The action name is always preceded by the -a command-line switch. The action name can be followed by one or more action-specific parameters.

In This Section

Action Description

boot

Shows boot and shut down statistics.

bootprefetch

Shows boot pre-fetching events.

cpudisk

Shows CPU/disk activity.

cswitch

Shows context switch data.

diskio

Shows disk I/O statistics.

diskidlehistogram

Shows a histogram of disk activity and idle times.

dpcisr

Shows deferred procedure call and interrupt service routine statistics.

drvdelay

Shows driver delays.

dumper

Dumps events in text form.

filename

Shows file names.

focuschange

Shows the Windows thread focus change events.

hardfault

Shows hard fault statistics by process and file.

heap

Shows process heap information.

marks

Shows marks information.

pagefault

Shows page fault information.

perfctrs

Shows process performance counters.

pnp

Shows Plug and Play events.

prefetch

Shows prefetch information.

process

Shows process, thread, and image information.

profile

Shows sampled profiler data.

registry

Shows registry access statistics.

services

Shows service status information.

shutdown

Shows shutdown statistics.

spinlock

Shows spinlock information.

stack

Shows stack information.

suspend

Shows suspend transition information.

sysconfig

Shows system configuration information.

tracestats

Shows trace statistics.

winlogon

Shows Winlogon events.

Xperf Command-Line Reference