Application performance tracing

Kaspersky Endpoint Security lets you receive information about computer operating issues during use of the application. For example, you can receive information about delays in operating system loading after the application is installed. To do so, Kaspersky Endpoint Security creates performance trace files. Performance tracing refer to the logging of actions performed by the application for the purpose of diagnosing performance issues of Kaspersky Endpoint Security. To receive information, Kaspersky Endpoint Security uses the Event Tracing for Windows service (ETW). Kaspersky Technical Support is responsible for diagnosing issues of Kaspersky Endpoint Security and establishing the reasons for those issues.

Application tracing should be performed under the supervision of Kaspersky Technical Support.

To create a performance trace file:

1. In the main application window, click the button.
2. In the window that opens, click the Support Tools button.
3. Use the Enable performance tracing toggle to enable or disable tracing of application performance.
4. In the Tracing drop-down list, select an application tracing mode:
   • With rotation. Save traces to a limited number of files of limited size and overwrite the older files when the maximum size is reached. If this mode is selected, you can define the maximum size for each file.
   • Write to a single file. Save one trace file (no size limit).
5. In the Level drop-down list, select the tracing level:
   • Light. Kaspersky Endpoint Security analyzes the most important operating system processes related to performance.
   • Detailed. Kaspersky Endpoint Security analyzes all operating system processes related to performance.
6. In the Tracing type drop-down list, select the tracing type:
   • Basic information. Kaspersky Endpoint Security analyzes processes while the operating system is running. Use this tracing type if a problem persists after the operating system is loaded, such as a problem accessing the Internet in the browser.
   • On restart. Kaspersky Endpoint Security analyzes processes only while the operating system is loading. After the operating system is loaded, Kaspersky Endpoint Security stops tracing. Use this tracing type if the problem is related to delayed loading of the operating system.
7. Restart the computer and try to reproduce the problem.
8. To stop the tracing process, return to the Support Tools window and disable tracing.

As a result, a performance trace file is created in the %ProgramData%\Kaspersky Lab\KES\Traces folder. After the trace file is created, send the file to Kaspersky Technical Support.