Event tracing for Windows (ETW) provides a data gathering mechanism that is non-invasive and has a low performance effect. For the FIM Service (starting in FIM 2010 R2) there is an option to use ETW for troubleshooting. This is an option to the FIM Service log that requires a service restart. In my experience the service log tracing is more detailed but that requires a service restart.
There may be times where using the standard service log tracing is not feasible. Issues that take many hours or days to manifest don't lend themselves to a log file that continually grows.
Event tracing allows us to wait for the issue to occur, enable tracing without restarting anything, and grab the data.
Fortunately the instructions are in the MicrosoftResourceManagement.Service.config file.
Basically we just:
All that is needed is an administrative command prompt. Navigate to a directory (I use C:\Temp), enable tracing, reproduce the error, stop the tracing, and format the output. I use the exact commands from the .config file.
Here are detailed steps. Sample screenshots are provided at the end.
Commands starting and stopping the logging
Command formatting the output
Results after all the commands are run