Click Add to add the filter to the list and confirm the selection with OK.Īt this point, the event list in Process Monitor will only show events that took longer than 1 second to complete. and checking the appropriate checkbox in the resulting dialog.Ĭreate a new filter by selecting Filter.* from the **Filter menu.Ĭreate a filter for the Duration column where it is more than a value of 1, in which case the entry should be Included. Once the data has been loaded, display the Duration column by opening the context menu on one of the column headers and clicking Select Columns. pml file and wait for the data to be converted. Select an appropriate storage location for the. Process Monitor will notify you that it collected boot-time activity and will ask you if you want to save that data now.

Once the logon process has completed, start Process Monitor. Reboot the system and replicate your issue. In the resulting dialog, check Generate profiling events and click OK. In the Options menu, check Enable Boot Logging. In this case, we want to utilize the tool to determine which events during the boot process took a long time to complete.

The collected events can then be analyzed to determine how a system (or an application) is behaving internally in certain situations. Process Monitor is a tool that will collect file system, registry and network events for all running processes.

Process monitor boot logging