Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use Performance Monitor’s Data Collector Set wizard to record selected Windows performance counters over time. Open perfmon, create a user-defined set, choose the counters and sampling options that fit the problem, then start the set and review the resulting log. You can also create and manage a counter set with logman.exe when you need a repeatable command-line setup.

Before you create the collector

Performance Monitor is included with full versions of Windows, and its Data Collector Sets can store selected counter data for later analysis. Microsoft describes the tool in its Windows performance troubleshooting guidance.

First identify the symptom you want to investigate. A focused set of counters is easier to analyze than a broad collection, and the sample interval, duration, output format, and file-size limit affect both the detail captured and the storage required. Make sure the output directory exists and has enough free space.

Create a custom Data Collector Set in the GUI

  1. Open Performance Monitor. Search the Start menu for perfmon and open the app.
  2. Start a new user-defined set. In the navigation pane, expand Data Collector Sets, right-click User-defined, and select New > Data Collector Set.
  3. Name the set and choose manual setup. Enter a descriptive name, select Create manually (Advanced), and continue.
  4. Select what to collect. For sampled performance metrics, choose the performance-counter option and add counters relevant to the symptom. For provider-generated events, choose Event trace data and add the required provider. Event tracing is a different collection type from counter logging; a Microsoft walkthrough showing it uses a Business Central-specific provider, so that provider is not a general-purpose recommendation.
  5. Configure the log destination and finish. Set the root directory for the output. Choose an interval and other available logging options appropriate to the investigation, and account for the expected duration and volume when selecting the location.
  6. Run the set when needed. In the navigation pane, right-click the new set and select Start. To finish, right-click it and select Stop. An event-trace collection in Microsoft’s walkthrough produces an .etl file in the selected location.

Choose counters, interval, and log limits deliberately

Choose counters that answer the question

Add only metrics that can help explain the observed issue. Microsoft’s logman reference shows counter paths such as Processor(_Total)% Processor time. Wildcards can select multiple instances, but a wide counter list can make the log larger and harder to interpret.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Dell Optiplex 7050 SFF Desktop PC Intel i7-7700 4-Cores 3.60GHz 32GB DDR4 1TB SSD WiFi BT HDMI Duel Monitor Support Windows 11 Pro Excellent Condition(Renewed)
  • Model: Dell OptiPlex 7050 Small Form Factor (SFF)
  • Processor: Intel Core i7-7700 3.60 GHz
  • Memory: 32GB DDR4 Ram
  • Storage: 1TB Solid State Drive (SSD) Fast Boot + Storage
  • Operating System: Windows 11 Pro (64-bit)

Match the sampling interval to the symptom

A shorter interval captures changes more frequently, but creates denser data. Microsoft notes that Performance Monitor graphs can display up to 1,000 data points; denser captures may be summarized in the graph, potentially obscuring spikes. Choose an interval that preserves useful detail for the time window you plan to inspect rather than automatically choosing the shortest possible one. A 15-second interval in Microsoft’s troubleshooting example is specific to that analysis, not a universal setting.

Plan the output size and duration

Choose an output format, maximum size, and collection duration or schedule that suit the available disk space. Microsoft’s logman command reference documents controls for format, size, overwrite, append, and file rollover; it also states that CSV logs are limited to 2 GB. Circular logging can help prevent uncontrolled growth by reusing log space, but it means older data may be replaced as collection continues.

Rank #2
Dell Optiplex 3060 Desktop Computer | Intel i5-8500 (3.2) | 32GB DDR4 RAM | 1TB SSD Solid State | Built in WiFi | Bluetooth | Windows 11 Professional | Home or Office PC (Renewed)
  • [INTEL POWERED CONTENT] - Built with a 8th Generation Hexa-Core Intel i5 and 32GB of DDR4 RAM; Modern, Windows 11 ready, with 4K support, Executive multitasking, media streaming and smooth, multi-tab web browsing; Perfect as an all-purpose multimedia computer; built for content creators; Plenty of RAM and Mass storage for photo and video editing powered by Intel HD 630
  • [LATEST WIRELESS TECH] - This Dell Desktop Computer easily connects to the internet through the Built In WiFi / Bluetooth
  • [SOLID STATE STORAGE] - This Dell Computer setup comes with an ultra-fast 1TB Solid State Drive (SSD); Setup as the primary boot device; Boot and load programs with lightning speed ; Additional expansion available
  • [BUY & OWN WITH CONFIDENCE] - From the world's largest Microsoft Authorized Refurbisher; Quality Guarantee and Free Tech Support; Award-winning Customer Service; | Support Sustainable Business
  • [MODERN HI-SPEED PORTS] - USB 3.0 (x4) | USB 2.0 (x4) | DisplayPort (x1) | HDMI Port (x1) | Audio Combo Jack (x1) | Audio Out (x1) | RJ-45 Ethernet (x1) | Internal SATA (x3)

Create and run a counter set with Logman

For scripting or repeatable setup, use logman.exe from an elevated Command Prompt. The following Microsoft example creates a circular binary log with a maximum size of 800 MB and samples every 15 seconds. Its broad counter list and values are examples, not requirements for every investigation.

logman.exe create counter PerfLog-15Sec-Contoso -o "c:perflogsContoso_PerfLog-15sec.blg" -f bincirc -v mmddhhmm -max 800 -c "LogicalDisk(*)*" "Memory*" "Network Interface(*)*" "PhysicalDisk(*)*" "Processor(*)*" "Process(*)*" "System*" -si 00:00:15
logman.exe start PerfLog-15Sec-Contoso
logman.exe stop PerfLog-15Sec-Contoso

In this example, -c specifies counters, -si sets the sample interval, -o sets the output path, -f selects the log format, and -max sets the size limit. The command reference also documents -rf for run duration and -b and -e for scheduled start and end times. Adjust the counter list, interval, path, format, and limits to fit the issue and environment. A separate Microsoft local troubleshooting example uses one-second sampling and a 2 GB maximum and explicitly notes that the interval can be changed; those figures are also example settings, not general recommendations. See Microsoft’s performance troubleshooting example and the Logman command reference.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Dell Optiplex 3060 Micro PC, Intel Core i3-8100T, 16GB DDR4 RAM, 256GB NVMe SSD, Win11Pro (Renewed)
  • Intel Core i3-8100T 3.10 GHz 6MB Cache 4C/4T processor provides reliable performance and efficiency
  • 16GB DDR4 memory; 256GB M.2 NVMe SSD
  • Integrated Intel UHD Graphics 630 for enhanced viewing and sharp details
  • Windows 11 Pro OS is so familiar and easy to use, you’ll feel like an expert. It starts up and resumes fast, has more built-in security to help keep you safe, and comes with great built-in apps
  • I/O Ports: 2 x USB-A 2.0 4 x USB-A 3.0 / 3.1/3.2 Gen 1 1 x 1/8" / 3.5 mm Headphone/Microphone Input/Output 1 x 1/8" / 3.5 mm Line Output 1 x RJ45 (Gigabit) 1 x DisplayPort 1.2 1 x HDMI 1.4

Reuse a configuration or collect remotely

Export and import a set

To reuse a configuration, export a Data Collector Set to XML with Logman and import it later under a chosen name. Microsoft documents the export and import options in its Logman reference.

Remote collection

Remote logging is possible, but the setup requires specifying the remote server and credentials. Permissions and connectivity requirements depend on the environment; Microsoft’s remote example should not be treated as a universal configuration.

Rank #4
Dell Optiplex 3040 SFF Business Desktop PC, Core i3-6100 3.7GHz, 8GB RAM, 256GB Solid State Drive, HDMI, RJ45, Windows 11 Pro 64bit (Renewed)
  • Dell OptiPlex 3040 Small Form Factor Desktop PC, Intel Core i3-6100 up to 3.7GHz, 8GB RAM, 256GB SSD, WIFI
  • Ports: 8 External USB: 4 x 3.0 (2 front/2 rear) and 4 x 2.0 (2 front/2 rear); 1 RJ-45; 1 Serial (optional); 1 Display Port 1.2; 1 HDMI 1.4; 2 PS/2 (optional); 1 UAJ, 1 Line-out; 1 VGA (optional)
  • Included in the box: Computer; Power Cord; USB Keyboard; USB Mouse; WiFi Adaptor
  • Operating System: Windows 11 Pro 64 Bit – Multi-language supports English/Spanish/French.
  • Support 4K (3840x2160) display, high quality image quality gives you the best visual enjoyment.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Know what the log can and cannot show

Performance-counter logging records sampled metrics, while event tracing captures events emitted by selected providers. Choose the collector type and analysis method based on the evidence you need. Microsoft also states that Performance Monitor does not access or log kernel information, so it should not be treated as a complete kernel trace. Its description of Performance Monitor as lightweight applies to a particular high-CPU troubleshooting use case, not every workload or collection configuration.

Best Value
DELL Optiplex 7060 SFF Desktop Computer PC | Intel 8th Gen i7-8700 (6 Core) | 32GB DDR4 Ram 512GB NVMe M.2 SSD | Built-in WiFi & Bluetooth | Windows 11 Pro | Wireless Keyboard & Mouse(Renewed)
  • Powerful 8th Generation Processor - The Dell OptiPlex 7060 desktop computer is powered by an Intel 6-core 8th Generation i7-8700 processor, which can reach up to 4.60 Ghz, enabling efficient multitasking.
  • Microsoft Windows 11 Pro – This Dell small form factor desktop computer comes pre-installed with the Windows 11 Professional operating system. Microsoft has reimagined how the PC should work for you and alongside you, and this Windows 11-powered desktop is redefining productivity.
  • Smooth Multitasking – The Dell OptiPlex is equipped with a blazing-fast new 512GB M.2 NVMe solid-state drive (SSD), which stores important files and applications while supporting faster boot speeds and higher data transfer rates.
  • High-Performance Office Desktop – This business desktop computer serves as a reliable workstation, suitable for both home and business computing. The spacious desktop tower case allows for future expansion, making it an excellent fit for use as an office PC.
  • Rich Ports – This Dell OptiPlex computer is equipped with 5 USB 3.0 ports, 2 USB 2.0 ports, and 2 DisplayPort ports, supporting dual-monitor connections. Additionally, a wireless keyboard and mouse are included.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.