Microsoft-Windows-WerKernel

2 events across 1 channel

Event ID	Title	Channel
1001	Component ComponentName has requested to create a Live Kernel Dump and the …	Operational
1002	Component ComponentName has requested to submit a Live Kernel Dump and the …	Operational

Event ID 1001 — Component ComponentName has requested to create a Live Kernel Dump and the request has been completed.

Provider: Microsoft-Windows-WerKernel
Channel: Operational
Task: CreateReport

Description

Component ComponentName has requested to create a Live Kernel Dump and the request has been completed. RequestedType RequestedPolicy, GrantedType GrantedPolicy, Status Status, ThrottleCheckResult ThrottleCheckResult.

Message #

Component %1 has requested to create a Live Kernel Dump and the request has been completed. RequestedType %2, GrantedType %3, Status %4, ThrottleCheckResult %5.

Fields #

Name	Description
`ComponentName` UnicodeString	—
`RequestedPolicy` UInt32	—
`GrantedPolicy` UInt32	—
`Status` UInt32	— NTSTATUS reference
`ThrottleCheckResult` UInt32	—

Event ID 1002 — Component ComponentName has requested to submit a Live Kernel Dump and the request has been completed.

Provider: Microsoft-Windows-WerKernel
Channel: Operational
Task: CreateReport

Description

Component ComponentName has requested to submit a Live Kernel Dump and the request has been completed. DumpType Policy, ReportId ReportId, Status Status.

Message #

Component %1 has requested to submit a Live Kernel Dump and the request has been completed. DumpType %2, ReportId %3, Status %4.

Fields #

Name	Description
`ComponentName` UnicodeString	—
`Policy` UInt32	—
`ReportId` UnicodeString	—
`Status` UInt32	— NTSTATUS reference