.NET runtime exception events

These runtime events capture information about exceptions that are thrown. For more information about how to use these events for diagnostic purposes, see logging and tracing .NET applications

ExceptionThrown_V1 event

Keyword for raising the event Level
ExceptionKeyword (0x8000) Error (1)

The following table shows event information.

Event Event ID Raised when
ExceptionThrown_V1 80 A managed exception is thrown.
Field name Data type Description
ExceptionType win:UnicodeString Type of the exception; for example, System.NullReferenceException.
ExceptionMessage win:UnicodeString Actual exception message.
EIPCodeThrow win:Pointer Instruction pointer where exception occurred.
ExceptionHR win:UInt32 Exception HRESULT.
ExceptionFlags win:UInt16 0x01: HasInnerException.

0x02: IsNestedException.

0x04: IsRethrownException.

0x08: IsCorruptedStateException (indicates that the process state is corrupt; see Handling Corrupted State Exceptions).

0x10: IsCLSCompliant (an exception that derives from Exception is CLS-compliant; otherwise, it is not CLS-compliant).
ClrInstanceID win:UInt16 Unique ID for the instance of CLR or CoreCLR.

ExceptionCatchStart event

This event is emitted when a managed exception catch handler begins.

Keyword for raising the event Level
ExceptionKeyword (0x8000) Informational (4)

The following table shows event information.

Event Event ID Raised when
ExceptionCatchStart 250 A managed exception is handled by the runtime.
Field name Data type Description
EIPCodeThrow win:Pointer Instruction pointer where exception occurred.
MethodID win:Pointer Pointer to the method descriptor on the method where exception occurred.
MethodName win:UnicodeString Name of the method where exception occurred.
ClrInstanceID win:UInt16 Unique ID for the instance of CLR or CoreCLR.

ExceptionCatchStop event

This event is emitted when a managed exception catch handler ends.

Keyword for raising the event Level
ExceptionKeyword (0x8000) Informational (4)

The following table shows event information.

Event Event ID Raised when
ExceptionCatchStop 251 A managed exception catch handler is done.

ExceptionFinallyStart event

This event is emitted when a managed exception finally handler begins.

Keyword for raising the event Level
ExceptionKeyword (0x8000) Informational (4)

The following table shows event information.

Event Event ID Raised when
ExceptionFinallyStart 252 A managed exception is handled by the runtime.
Field name Data type Description
EIPCodeThrow win:Pointer Instruction pointer where exception occurred.
MethodID win:Pointer Pointer to the method descriptor on the method where exception occurred.
MethodName win:UnicodeString Name of the method where exception occurred.
ClrInstanceID win:UInt16 Unique ID for the instance of CLR or CoreCLR.

ExceptionFinallyStop event

This event is emitted when a managed exception catch handler ends.

Keyword for raising the event Level
ExceptionKeyword (0x8000) Informational (4)

The following table shows event information.

Event Event ID Raised when
ExceptionFinallyStop 253 A managed exception finally handler is done.

ExceptionFilterStart event

This event is emitted when a managed exception filtering begins.

Keyword for raising the event Level
ExceptionKeyword (0x8000) Informational (4)

The following table shows event information.

Event Event ID Raised when
ExceptionFilterStart 254 A managed exception filtering begins.
Field name Data type Description
EIPCodeThrow win:Pointer Instruction pointer where exception occurred.
MethodID win:Pointer Pointer to the method descriptor on the method where exception occurred.
MethodName win:UnicodeString Name of the method where exception occurred.
ClrInstanceID win:UInt16 Unique ID for the instance of CoreCLR.

ExceptionFilterStop event

This event is emitted when a managed exception filtering ends.

Keyword for raising the event Level
ExceptionKeyword (0x8000) Informational (4)

The following table shows event information.

Event Event ID Raised when
ExceptionFilteringStart 255 A managed exception filtering ends.

ExceptionThrownStop event

This event is emitted when the runtime is done handling a managed exception that was thrown.

Keyword for raising the event Level
ExceptionKeyword (0x8000) Informational (4)

The following table shows event information.

Event Event ID Raised when
ExceptionThrownStop 256 A managed exception filtering ends.