This is the built-in help made by Microsoft for the command 'New-NetEventSession', in PowerShell version 4 - as retrieved from
Windows version 'Microsoft Windows 8.1 Enterprise' PowerShell help files on 2016-06-23.
For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.
Creates a network event session.
New-NetEventSession [-Name] <String> [-CaptureMode {RealtimeRPC | SaveToFile | RealtimeLocal}] [-CimSession [<CimSession[]>]] [-LocalFilePath [<String>]] [-MaxFileSiz
e [<UInt32>]] [-MaxNumberOfBuffers [<Byte>]] [-ThrottleLimit [<Int32>]] [-TraceBufferSize [<UInt32>]] [-Confirm] [-WhatIf] [<CommonParameters>]
The New-NetEventSession cmdlet creates a network event session. A session controls how the computer logs events and, optionally, network traffic, or packets. Add netw
ork event providers to a session. A network event provider logs events and network traffic as Event Tracing for Windows (ETW) events. The session stores these events
in an .etl file or provides them to an application that displays them.
Assign a name for the session. Only one session can exist at a time. Remove an existing session by using the Remove-NetEventSession cmdlet. You can specify the maximu
m number of buffers in a session and the size of the trace buffer.
You can also specify whether to use an.etl file and, if you do, specify its location and maximum size. Instead of an .etl file, you can select a type of live display.
After you create a session, you can use the Set-NetEventSession cmdlet to modify the session settings. After you create a session, add one or more providers to it by
using the Add-NetEventProvider cmdlet. Use the Start-NetEventSession and Stop-NetEventSession cmdlets to start and stop logging.
<
Online Version: http://go.microsoft.com/fwlink/?LinkID=294394
Get-NetEventSession
Remove-NetEventSession
Set-NetEventSession
Start-NetEventSession
Stop-NetEventSession
Add-NetEventProvider
<
Example 1: Create a session
PS C:\>New-NetEventSession -Name "Session38"
This command creates session named Session38. Use the Add-NetEventProvider cmdlet to add a provider for the session.