If you’ve encountered Event ID 4: Kernel-EventTracing, it means your Windows ETW session stopped because its log file reached maximum size. In this video, learn how to increase the log size for Kernel Event Tracing ID 4 using Performance Monitor and PowerShell to prevent early session termination and capture detailed diagnostic data.
Read the full blog on How to Increase Log Size for Event ID 4: Kernel-EventTracing in Windows 11
