Computer step by step
 Make your Pc better
How to Start/Stop
Performance Logs and Alerts service
Description Services Regedit Back CMD Msconfig
Service name: SysmonLog
Display name: Performance Logs and Alerts

Description:
Collects performance data from local or remote computers based on preconfigured schedule parameters, then
writes the data to a log or triggers an alert. If this service is stopped, performance information will not be
collected. If this service is disabled, any services that explicitly depend on it will fail to start.

Path to executable:
C:\WINDOWS\system32\smlogsvc.exe  
Type services.msc and press Enter
Services.msc:
This method shows you how to Performance Logs and Alerts service from Services.msc
Please perform the following steps:

Please go to Start and choose Run ...
Locate Performance Logs and Alerts service observe his current status and open to make changes.
From General tab you can Start/Stop and change the Startup type of Performance Logs and Alerts service.

To finish press ok button and close Services window
Type regedit and press Enter
Regedit:          
This method shows you how to change Startup type of Performance Logs and Alerts service from
Registry Editor.
Please perform the following steps:

Please go to Start and choose Run ...
Double click on Start and edit the value:

Change Startup type :

Automatic - 2
Manual - 3
Disabled - 4
Automatic (Delayed Start) - 2

Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.
When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.
Please select, right and copy a registry key from below, then right click on command prompt window
, select Paste and press Enter

To Start Performance Logs and Alerts service:

net start SysmonLog

Note: You can’t start a service if Startup type is on Disabled.

To Stop Performance Logs and Alerts service:

net stop SysmonLog

To change Startup type:

Automatic:
REG add "HKLM\SYSTEM\CurrentControlSet\services\SysmonLog" /v Start /t REG_DWORD /d 2 /f

Manual:
REG add "HKLM\SYSTEM\CurrentControlSet\services\SysmonLog" /v Start /t REG_DWORD /d 3 /f

Disabled:
REG add "HKLM\SYSTEM\CurrentControlSet\services\SysmonLog" /v Start /t REG_DWORD /d 4 /f

Automatic (Delayed Start):
REG add "HKLM\SYSTEM\CurrentControlSet\services\SysmonLog" /v Start /t REG_DWORD /d 2 /f

Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.
REG add "HKLM\SYSTEM\CurrentControlSet\services\SysmonLog" /v DelayedAutostart /t REG_DWORD /d 1 /f

When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.
REG add "HKLM\SYSTEM\CurrentControlSet\services\SysmonLog" /v DelayedAutostart /t REG_DWORD /d 0 /f
CMD:          
This method shows you how to Start/Stop and change Startup type of Performance Logs and Alerts
service from Command Prompt.
Please perform the following steps:

Please go to Start and choose Run ...
Msconfig:          
This method shows you how to prevent Performance Logs and Alerts service from starting with the
operating system using System Configuration (msconfig.exe)
Please perform the following steps:

Please go to Start and choose Run ...
Write msconfig and press Enter
In System Configuration please go to Services tab and locate Performance Logs and Alerts service.
Uncheck the box to prevent this service to start and then press OK to finish.  
Any change make in System Configuration will be apply after restart.  
Up Back
   
   
   
   
Microsoft official disclaimer

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by
using another method. These problems might require that you reinstall the operating system. Microsoft
cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Please navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysmonLog and
locate
Start registry key
Type cmd and press ok