<Variable name="percentlost" expression="round((Data[@name='lostEvents'] div (Data[@name='events']+Data[@name='lostEvents']))*100)"/>
<Exists>
<When expression="{percentlost} >= 10" description="Maximum allowable number of lost trace events. This rule will issue a warning if the number of lost events exceeds this value. The default value is greater than 10%">
<String ID="RuleMiss">Missing Events in Trace file</String>
<String ID="missingEvents">Missing Events in Event Log</String>
<String ID="missingEventsDetails">Investigate why {percentlost}% ({lost}) events were lost during data collection. The settings for Event Tracing for Windows (ETW) maximum buffers and buffer size may not be optimal depending on which data sets are being collected.</String>
<String ID="missingEventsRelated">Event Tracing for Windows</String>