WPR.exe supports the command line switches -recordTempTo and -onoffresultspath. However, these settings don't change the path where the kernel logger writes the log file ("NT Kernel Logger*.etl). It's always stored in the user's temp directory. As this directory is on the system drive, events get lost during the boot phase. I have two other physical drives that are not involved (a lot) during booting, but how can I specify that one of them is used for writing the kernel log file?
Armin