Microsoft Windows [Version 6.1.7000] (C) Copyright 2009 Microsoft Corp. C:\Windows>netsh trace correlate ?
correlate
Normalizes or filters a trace file to a new output file.
Usage: trace correlate [input=]tracefilename.etl
[output=]newtracefilename.etl
[[filter=]Activity_ID][[overwrite=]yes|no][[retaincorrelationevents=]yes|no][[retainpii=]yes|no][[retainglobalevents=]yes|no]
Parameters:
Tag Value
input - Input ETL trace file
output - Output file name
filter - Output only events related to this Activity GUID
overwrite - Overwrites existing files
retaincorrelationevents - Retains correlation events
retainpii - Retains events containing personally identifiable information
retainglobalevents - Retains global events
Defaults:
filter=none
overwrite=no
retaincorrevents=no
retainpii=yes
retainglobalevents=yes
Remarks:
Filter activity ID is a GUID expressed in the form {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
Personally identifiable information includes packet capture events
