Windows Error reporting event viewer

keloken 76 Reputation points
2022-01-19T12:14:46.587+00:00

Hi! I'm having a problem with some Windows Servers that keeps flooding event viewer with "Windows Error Reporting".
The errors have all "Fault bucket ,type 0" and "APPCRASH"

The Windows Error reporting service has been stopped.
There are files in C:\ProgramData\Microsoft\Windows\WER\ReportQueue. When I delete these files the reporting stops but if/when a application crashes again it keeps appearing in event viewer.
This happens on several servers.
Has anyone experienced this problem?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
8,894 questions
No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Docs 13,096 Reputation points
    2022-01-19T14:22:09.033+00:00

    Please run the DM log collector and post a share link into this thread using one drive, drop box, or google drive.

    https://www.tenforums.com/bsod-crashes-debugging/2198-bsod-posting-instructions.html

    If the V2 log collector can run on the server then that will collect more useful files.

    .
    .
    .
    .
    .

    Please remember to vote and to mark the replies as answers if they help.

    On the bottom of each post there is:

    Propose as answer = answered the question

    On the left side of each post there is /\ with a number: click = a helpful post
    .
    .
    .
    .
    .


  2. Docs 13,096 Reputation points
    2022-01-20T07:35:14.957+00:00

    See if you can run both DM and this script so that the event viewer and other files can be viewed.

    https://www.tenforums.com/attachments/bsod-crashes-debugging/346094d1631611972-post-problem-reports-here-batch-files-use-bsod-debugging-collect_logs_from_event_viewer-2021-09-14.bat

    .
    .
    .
    .
    .

    Please remember to vote and to mark the replies as answers if they help.

    On the bottom of each post there is:

    Propose as answer = answered the question

    On the left side of each post there is /\ with a number: click = a helpful post
    .
    .
    .
    .
    .