Old syntax: logman stop "exchange event trace" -ets
Trying to use this command only triggers an error:
H:\>logman stop "Exchange Event Trace" -ets
Argument 'Event' is unknown.
Argument 'Trace"' is unknown.
The parameter is incorrect.
Using the following syntax correctly stops the Exchange trace:
logman stop -name "exchange event trace" -ets
Not sure when this changed (maybe a service pack) but this was the only way to successfully
stop the trace on a Windows Server 2008 R2 box. YMMV.