ebpf-for-windows/scripts/ebpf_tracing_periodic_task.xml

<EFBFBD><EFBFBD><?xml version="1.0"?>
<!--
  Copyright (c) Microsoft Corporation
  SPDX-License-Identifier: MIT
-->
<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
  <RegistrationInfo>
    <Author>Microsoft Corporation</Author>
    <Description>Runs periodic eBPF tracing snapshots.</Description>
  </RegistrationInfo>
  <Triggers>
    <TimeTrigger>
      <Repetition>
        <Interval>PT37M</Interval>
        <StopAtDurationEnd>false</StopAtDurationEnd>
      </Repetition>
      <StartBoundary>2020-01-01T00:00:00Z</StartBoundary>
      <Enabled>true</Enabled>
    </TimeTrigger>
  </Triggers>
  <Principals>
    <Principal id="Author">
      <!-- SECURITY_LOCAL_SYSTEM_RID (S-1-5-18)  -->
      <UserId>S-1-5-18</UserId>
      <RunLevel>HighestAvailable</RunLevel>
    </Principal>
  </Principals>
  <Actions Context="Author">
    <Exec>
      <Command>%comspec%</Command>
      <Arguments>/c ""%ProgramFiles%\ebpf-for-windows\ebpf_tracing.cmd" periodic /trace_path "%SystemRoot%\Logs\eBPF" /max_file_size_mb 30 /max_committed_folder_size_mb 200 /max_committed_rundown_state_files 1 /compress_rundown_state_files false"</Arguments>
    </Exec>
  </Actions>
</Task>