Safe to Delete

Windows ETW Diagnostics Logs (C:\Windows\System32\LogFiles\WMI)

Space: 500 MB – 5 GB logs Windows
Quick Answer: The WMI LogFiles folder contains Event Tracing for Windows (.etl) diagnostic trace logs. Deleting old .etl files is safe.

Bottom Line: It is safe to delete .etl trace log files in LogFiles\WMI. ETW logs track performance diagnostic sessions and are safe to clear when troubleshooting is complete.

What is the LogFiles\WMI Folder?

Located at C:\Windows\System32\LogFiles\WMI\ and C:\Windows\System32\LogFiles\WMI\RtBackup, this directory stores Event Tracing for Windows (ETW) trace sessions (.etl) generated by Windows Autologger, Sysmain, and performance diagnostics tools.

Can You Delete ETW Log Files?

✅ Yes, safe to delete.

  • Recreates automatically: Active tracing sessions will generate fresh .etl files as needed.
  • Safe cleanup: Clears gigabytes of obsolete trace dumps.

How to Delete ETW Trace Logs

Command Prompt (Admin)

net stop sysmain
del /f /q /s C:\Windows\System32\LogFiles\WMI\*.etl
net start sysmain

Discussion

Loading authentication...

Related in logs

Parsec Remote Desktop Logs & Shader Cache (%AppData%\Parsec\log.txt)

Parsec stores low-latency streaming connection logs and host video decode shaders. Clearing Parsec logs is safe.

Safe to Delete

Tailscale VPN State & Daemon Logs (/var/lib/tailscale)

Tailscale stores daemon socket logs and wireguard connection state. Clearing log files is safe.

Safe to Delete

Riot Vanguard & Valorant Logs (RiotClient Logs)

Riot Vanguard and Valorant store diagnostic anticheat logs. Deleting old log text files is completely safe.

Safe to Delete
Back to all files