Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.


This article describes how to create log files using System Monitor in Microsoft Windows 2000, Microsoft Windows XP or Microsoft Windows Server 2003.

Download and use the Performance Monitor Wizard (PerfWiz) to make the log configuration process easier to set up.

More Information

The System Monitor tool included with Windows 2000, Windows XP and Windows Server 2003 is the administrative tool that replaces the Performance Monitor tool included with Windows NT 4.0.

Here is a list of some improvements in the System Monitor tool:

  • You can log specific counters and instances of an object, which helps you reduce the size of log files.

  • The Print Queue object is a new Performance object that allows you to monitor aspects of a print queue.

  • You can start the log on an event using Performance Logs and Alerts.

  • Other Performance objects have also been added.

  • A sample log file is included in Windows 2000.

To create a new log:

  1. Right-click Counter Logs, click New Log Settings, type a name for the log, and then click OK.

  2. On the General tab in Windows 2000,click Add to add the counters you want. On the General tab in Windows XP or Windows Server 2003, click Add Counters.

  3. On the Log Files tab, click the logging options you want.

  4. On the Schedule tab, click the scheduling options you want.

You can set similar options in Alerts. For example, you can configure the alert to send a message, start a performance data log, or run a program, if a counter exceeds a certain value.

Using Performance Monitor Wizard

To obtain and download the Performance Monitor Wizard (PerfWiz). The Performance Monitor Wizard simplifies the gathering of performance monitor logs. It configures the correct counters to collect sample intervals and log file sizes. This wizard can create logs for troubleshooting operating system or Exchange server performance issues.


  • If you are troubleshooting a performance issue or an issue that looks like a memory leak, the objects that Performance Monitor should log include but are not limited to the following items. Memory resource issues:

    Paging file
    Terminal Services (if a Terminal Server) For all other resource issues, add additional counters:

    Logical disk
    NBT Connections
    Network interface
    Physical disk
    Server work queues
    Thread (do NOT capture if a terminal server)
    All Terminal Server counters (if a Terminal Server)
    All Protocol counters bound to network adapters

  • Physical Disk counters are present by default on Windows 2000.

For additional information about how to view log files for memory leaks and performance bottlenecks, click the following article number to view the article in the Microsoft Knowledge Base:

150934 How to create a Performance Monitor log for NT troubleshooting
  Also see Determining acceptable values for counters under Performance counters in Windows 2000 Help.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!