MSDN really doesn't explain it well. I hope Stackoverflow will let me to add link to Pluralsight lecture that explains all EventSource topics ideally with usage best practices https://app.pluralsight.com/library/courses/event-tracing-windows-etw-dotnet/table-of-contents