Collecting audio logs the old-fashioned way

In previous blog posts I have showed how to use the Feedback Hub to file a new problem report with logs, and to add logs to an existing problem report.

It can also be useful to gather the logs outside of the Feedback Hub environment. For example, there is a current issue in the Feedback Hub which affects builds 14996 through 15006 (it is fixed in 15007) that breaks log collection.

  1. Download
  2. Extract it to a folder
  3. From the extracted folder, launch CollectAudioLogs.cmd
  4. This will prompt for elevation; allow it.
  5. You will receive two yes/no questions. Answer y to the first if you can reproduce the issue. Always answer y to the second.
  6. The script will run for several minutes and eventually create a .zip file right next to itself. The last line of the script output will refer to the .zip file, something like this:
    Logs are located at C:\Users\mateer\Desktop\Temp\CollectAudioLogs\

EDIT 2017-04-12: updated script

EDIT 2017-05-01: updated script to run WOW64

EDIT 2017-06-01: replace “media issues” .wprp with “audio glitches” .wprp

EDIT 2017-06-06: updated powershell to work even if run WOW64

EDIT 2017-07-28: various ETW provider changes (added ACPI, removed IE, added some driver-specific providers)

EDIT 2018-01-05: more ETW provider changes (added Capability Access Manager)

EDIT 2018-02-21: allow spaces in the script path and temporary path

EDIT 2018-03-05: update ETW providers for Intel audio drivers

EDIT 2018-04-04: more ETW provider changes (added inbox effects)

EDIT 2018-12-28: grab ksthunk service registry key

EDIT 2019-03-26: move to

EDIT 2019-09-23: more ETW provider changes (added Windows Error Reporting providers)

EDIT 2019-10-20: add DdoDiag and PnpUtil. More ETW provider changes.

EDIT 2020-03-13: more ETW providers for driver frameworks and DirectSound

EDIT 2020-04-10: add System.evtx

EDIT 2020-06-04: add Application.evtx and more ETW providers for inbox drivers and driver frameworks

EDIT 2020-08-20: remove Microsoft.Windows.Audio.Service provider to avoid hang in ETW callback

EDIT 2020-12-02: put Microsoft.Windows.Audio.Service provider back now that the hang fix has been serviced

EDIT 2020-12-18: add some Realtek ETW providers

EDIT 2021-05-05: add some audio processing object ETW providers

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s