
Click File ->Save in the main Process Monitor window:.Reproduce the issue without closing the utility.Navigate to Options -> History depth and set the limit. The minimum value is 1 million events the maximum (and default) is 199 million. The History depth parameter allows you to limit the number of entries kept so that you can leave Process Monitor running for long periods and ensure that it always keeps the most recent events (by rewriting the log file once the limit is reached).


When analyzing a Process Monitor log, it is recommended to filter out entries. To access advanced information on any single operation right-click on the operation line and choose Properties: The main Process Monitor window lists all system operations along with their exact time, process name, ID and the result for every single operation: Process Monitor can be used to track system and software activity to troubleshoot some of the product issues, especially when it is necessary to track what particular application or process accesses a file or a registry key. Server: Windows Server 2012 and higher.It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds a number of other enhancements. Process Monitor is an advanced monitoring tool that shows real-time file system, registry, and process activity. How to collect Process monitor log from WinPE bootable media.
