- 1 year ago
how to disable logging in Process monitor while startup
To disable logging in Process Monitor while startup, you can use the /noconnect
command-line switch. Here's how you can do it:
Press
Win + R
to open the Run dialog.Type
procmon
and pressEnter
to launch Process Monitor.Before capturing any events, go to the
Filter
menu and selectFilter...
or pressCtrl + L
.In the
Filter
dialog, set up any filters you want to apply to the captured events (optional).Check the "Drop Filtered Events" checkbox to exclude filtered events from being logged. This can help reduce the amount of logging data and make the capture more manageable.
Click the "Add..." button to add a new filter condition.
In the new filter condition, select the "Path" filter, set the "Include" condition to "Is" and enter
*
(an asterisk) as the filter value. This will include all events for all paths.Click the "Add" button to add the filter condition.
Click the "OK" button to close the
Filter
dialog.Now, to launch Process Monitor with logging disabled, use the
/noconnect
command-line switch. Open the Command Prompt or PowerShell and run the following command:
bashprocmon /noconnect
This will start Process Monitor without capturing any events.
Please note that if you use the /noconnect
switch, you won't see any events in the Process Monitor UI until you click the "Capture" (magnifying glass) button to start capturing manually.
Keep in mind that using filters and disabling logging may affect the usefulness of the captured data. Be sure to adjust the filters according to your specific requirements to capture the events you need while keeping the log manageable.