Microsoft-Windows-WER-SystemErrorReporting
40 events across 2 channels
Event ID 1000 — The computer has rebooted from a bugcheck.
Message
Fields
| Name | Description |
|---|---|
param1 | — |
Event ID 1001 — The computer has rebooted from a bugcheck.
Message
Fields
| Name | Description |
|---|---|
param1 | — |
param2 | — |
ReportId | — |
Example Event
system:
provider: Microsoft-Windows-WER-SystemErrorReporting
guid: '{ABCE23E7-DE45-4366-8631-84FA6C525952}'
event_source_name: BugCheck
event_id: 1001
version: 0
level: 2
task: 0
opcode: 0
keywords: 36028797018963968
time_created: '2012-04-06T14:07:52.000000Z'
event_record_id: 13423
correlation: {}
execution:
process_id: 0
thread_id: 0
channel: System
computer: WKS-WIN764BITB.shieldbase.local
security:
user_id: ''
event_data:
param1: 0x00010001 (0x0000000000000000, 0x0000000000000000, 0x0000000000000000,
0x0000000000000000)
param2: C:\Windows\MEMORY.DMP
param3: 040612-50390-01
Event ID 1002 —
Event ID 1003 — Unable to read system shutdown configuration information from the registry.
Message
Event ID 1004 — Unable to move dump file from the temporary location to the final location.
Message
Event ID 1005 — Unable to produce a minidump file from the full dump file.
Message
Event ID 1006 — The computer has rebooted from a bugcheck.
Message
Event ID 1007 —
Event ID 1008 —
Event ID 1009 — Error reporting was unable to check the paging file for a crash dump.
Message
Event ID 1010 — Error reporting was unable to check the paging file for a crash dump.
Message
Event ID 1011 — Error reporting was unable to read the CrashControl settings.
Message
Event ID 1012 — Error reporting was unable to create a crash dump file as a previous crash dump file already exists.
Message
Event ID 1013 — Error reporting was unable to query volume information while creating a crash dump file.
Message
Event ID 1014 — Error reporting ran out of memory while creating a crash dump file.
Message
Event ID 1015 — Error reporting was unable to create a temporary file to hold the crash dump.
Message
Event ID 1016 — Error reporting ran out of disk space while creating a crash dump file.
Message
Event ID 1017 — Error reporting was unable to copy a crash dump from the paging file.
Message
Event ID 1018 — The dump file at location: %1 was deleted because the disk volume had less than %2 GB free space.
Message
Fields
| Name | Description |
|---|---|
param1 | — |
param2 | — |
Event ID 1019 — The computer has rebooted from a bugcheck.
Message
Fields
| Name | Description |
|---|---|
SuspectedDriver | — |
Event ID 1073742824 — The computer has rebooted from a bugcheck.
Message
Fields
| Name | Description |
|---|---|
param1 | — |
Event ID 1073742825 — The computer has rebooted from a bugcheck.
Message
Fields
| Name | Description |
|---|---|
param1 | — |
param2 | — |
param3 | — |
Event ID 1073742826 — The system was unable to convert a saved dump to a minidump.
Message
Event ID 1073742827 — Unable to read system shutdown configuration information from the registry.
Message
Event ID 1073742828 — Unable to move dump file from the temporary location to the final location.
Message
Event ID 1073742829 — Unable to produce a minidump file from the full dump file.
Message
Event ID 1073742830 — The computer has rebooted from a bugcheck.
Message
Event ID 1073742831 — Error reporting was unable to report the bugcheck.
Message
Event ID 1073742832 — Error reporting was unable to report a dirty shutdown.
Message
Event ID 1073742833 — Error reporting was unable to check the paging file for a crash dump.
Message
Event ID 1073742834 — Error reporting was unable to check the paging file for a crash dump.
Message
Event ID 1073742835 — Error reporting was unable to read the CrashControl settings.
Message
Event ID 1073742836 — Error reporting was unable to create a crash dump file as a previous crash dump file already exists.
Message
Event ID 1073742837 — Error reporting was unable to query volume information while creating a crash dump file.
Message
Event ID 1073742838 — Error reporting ran out of memory while creating a crash dump file.
Message
Event ID 1073742839 — Error reporting was unable to create a temporary file to hold the crash dump.
Message
Event ID 1073742840 — Error reporting ran out of disk space while creating a crash dump file.
Message
Event ID 1073742841 — Error reporting was unable to copy a crash dump from the paging file.
Message
Event ID 1073742842 — The dump file at location: %1 was deleted because the disk volume had less than %2 GB free space.
Message
Fields
| Name | Description |
|---|---|
param1 | — |
param2 | — |
Event ID 1073742843 — Windows Error Reporting Fault Reporting
Message
Fields
| Name | Description |
|---|---|
SuspectedDriver | — |