Documentation
-
Tracing WMI Activity - Win32 apps
Starting with Windows Vista, the WMI service does not use the WMI Log Files. Instead, it uses Event Tracing for Windows (ETW) and events are available through Event Viewer or the Wevtutil command-line tool.
-
Logging WMI Activity - Win32 apps
The WMI log files are no longer supported.
-
WMI Provider Log Files - Win32 apps
WMI providers also may maintain logs. Which log files appear on a system depends on which providers are installed.