DHON


Hi Jason, Saar,

The reports at my end is having following bucket id : 456012092,
455976259, 455999458, 49984945. But these reports are not available in Winqual - atleast I can't see when I log in to Winqual. One of them is as old as 6 days. Others are one day.

Could you please, confirm whether these are all valid bucket id If not then reason.

Thanks,

DHON




Re: Are these valid bucket ids ?

Claus Brod


Congratulations, those look like valid bucket IDs to me! Which approach did you choose now Are you still queuing the reports

Claus

http://www.clausbrod.de/Blog






Re: Are these valid bucket ids ?

Saar Picker - MSFT

Hi DHON,

The first 3 buckets (456012092, 455976259, 455999458) appear to have been corrupted. The last bucket appears to be a valid PCA2 event however you don't seem to have the reported version mapped (7.30.0.0). Even if the correct version was mapped, we do not display PCA2 events on Developer Portal.

-Saar Picker

Developer Portal - http://winqual.microsoft.com






Re: Are these valid bucket ids ?

DHON

Thank you both Claus and Saar for your reply.

I observed another problem :

Suppose I am using WER_SUBMIT_QUEUE flag in WerReportSubmit()

In this case, I see a complete report in the queue with dump attached. No complain with this flag.

Product

Appln 7.30r0

Problem

Stopped working

Date

6/27/2007 2:01 PM

Status

Not Reported

Problem signature

Problem Event Name: APPCRASH

Application Name: Apppln.exe

Application Version: 7.30.0.0

Application Timestamp: 46821da5

Fault Module Name: test.dll

Fault Module Version: 7.30.1.0

Fault Module Timestamp: 467f877a

Exception Code: c0000005

Exception Offset: 002DB1A7

OS Version: 6.0.6000.2.0.0.256.4

Locale ID: 1033

Files that help describe the problem

Version.txt

minidump.mdmp

Now, I changed WER_SUBMIT_QUEUE to WER_SUBMIT_NO_QUEUE and removed the network plug. Fyi, I am using reporting thru internet

approach. Now report is queued up as network connection is not available. But, this report does not have the crash dump attached. Even if I am

connected to net, then also report does not have crashdump attached. What is there in this flag that changes the behavior so drastically !

Now, I need to troubleshoot this problem. If you faced the similar situation, please suggest.

Thanks,

DHON





Re: Are these valid bucket ids ?

Jason Hardester - MSFT

DHON,

You are running into trouble here because you are trying to mimic an event type. If I understand the problem you are really trying to solve, it¡¯s getting your application¡¯s crash reports on Winqual. All you need to do is map your products on Winqual using the Product Feedback Mapping Tool, and nothing else. As long as your application is not trying to handle its own exceptions, you will get a WER report for your application crashes by default.

When your exceptions bubble up the UEF in Windows, Windows Error Reporting is invoked. Depending on the type of crash (Application Hang, 32bit crash, 64bit crash, Buffer Overrun, etc), Windows Error Reporting will create your event type for you as well as handle creating a ¡®crash signature¡¯ for the event used to report the event to Microsoft. Examples of these common crash eventtypes that are already built into WER are ¡®Crash32¡¯ for an application crash on a 32bit machine, ¡®Crash64¡¯ for an application crash on a 64bit machine, ¡®BEX¡¯ for security related events such as Buffer Overrun, and Data Execute Prevention issues, and Safe CRT exceptions to name a few.

The event type you are mimicking here (PCA2) is used by a service that handles product compatibility checking and reports on failed installation attempts. Mimicking an event will not help you because ¡­not all of these events (such as PCA2) are not exposed through Winqual and you need to successfully map on the valid signature type during a report.

There is no reason to create a custom event for a crash or a hang because you get that event report for ¡®free¡¯. You don¡¯t have to do anything. Custom events are really for non-fatal events, and require a registration with Microsoft (a manual process today by contacting WER@microsoft.com).

I hope this helps answer your question.

Kind regards,

-Jason






Re: Are these valid bucket ids ?

DHON

Hi Jason,

Thanks for all the information regarding eventtype.

Could I have some explaination for change in behavior of report with the change in WER_SUBMIT_QUEUE / WER_SUBMIT_NO_QUEUE flag

(see the post above)

Thanking you again........

Regards,

Samir





Re: Are these valid bucket ids ?

Jason Hardester - MSFT

Hi Samir,
WER_SUBMIT_QUEUE: The report will be added to the WER queue without any UI.
  1. For errors in processes running in system context or elevated processes the queue location in Vista is : %ALLUSERSPROFILE %\Microsoft\Windows\WER\ReportQueue
  2. For other errors the queue location is: %LOCALAPPDATA%\Microsoft\Windows\WER\ReportQueue

The queue location can change over OS releases. If there is sufficient consent to send the report, the report will be sent out of the queue after it has been added to the queue.

WER_SUBMIT_NO_QUEUE: Queue system is disabled for this report. If the report had to be added to the queue, for example if the machine was offline, the report will not be added to the queue, it will be thrown away. One scenario where this flag can be used is for non critical reports for which we do not want to get explicit user consent and want to send the report (non critical reports do not show UI) headlessly. So if there is sufficient consent the report will be sent, if the report had to be queued because of lack of consent for the data that is part of the report and this flag is set, the report will be thrown away.

Kind regards,

-Jason






Re: Are these valid bucket ids ?

DHON

Hi Jason,

I have uploaded the product map file on 16-07-2007.

On 17th, I posted two reports and Bucket id I received were:

469691349

469612113

But, these reports are not visible in the eventlist for the specified product on 18th morning.

Could you please, confirm whether it actually reached the Winqual server

When it will be shown as part of eventlist If rejected, then what is the reason

Waiting for your response.

Regards,

DHON





Re: Are these valid bucket ids ?

Jason Hardester - MSFT

When the client logs a 'Bucket ID'. this means the communication between the client and the Microsoft Error Reporting servers were successful. As for the delay between the report to Microsoft and aggregating the data for display on winqual and mapping the report to a Winqual account... see my post in Error Report Processing Delay.

Due to some scheduled maintenance in our upstream servers we are presently processing and catching up on the last 7 days. This is unusual to lag for so long, but it does happen when we freeze the pipeline for maintenance and then restart processing.

Kind regards,

-Jason






Re: Are these valid bucket ids ?

DHON

Hi Jason,

Thx for your reply.

Earlier also I got a valid bucket id and report was not reflected in Winqual. When asked, I was told that although I received a valid bucket id, it was not reflected as the product was not mapped. Now, I have done mapping and wanted to check whether my APPCRASH event actually reached Winqual and also product mapping was perfect. If the report is reflected in Winqual then my programming task for this will be over. So was curious to know the status of the report.

Regards,

Dhon





Re: Are these valid bucket ids ?

Jason Hardester - MSFT

Hi Dhon,

Can you give me the Bucket ID of the event you are referencing I'll check on it for you.

Depending on the system (32bit or 64bit) an AppCrash event will be displayed as a 'Crash32' or 'Crash64' EventType in Winqual.

Kind Regards,

-Jason






Re: Are these valid bucket ids ?

DHON

Hi Jason,

Here are the bucket ids I am looking for in Winqual :

469691349

469612113

Also, thank you for letting me know how the APPCRASh event will be shown in Winqual.

Regards,

Dhon





Re: Are these valid bucket ids ?

DHON

Hi Jason,

Lately, I have realized the reason for not displaying the above reports in Winqual. Reason is that the fault module name is Unknown. So could not map it.

In the mean time, one of the report posted from my machine is visible in Winqual. Eureka........eureka..........eureka.........

But, my request to you people is that the turn around time for displaying the report in Winqual should definitely be increased.

Thank you Jason, Saar & Claus for all your help........

Regards,

Dhon





Re: Are these valid bucket ids ?

DHON

Please, read it as :

But, my request to you people is that the turn around time for displaying the report in Winqual should definitely be decreased.

Regards,

Dhon





Re: Are these valid bucket ids ?

Claus Brod

DHON,

congratulations!

Which approach do you use now to send crash reports Do you still use the WER APIs

Cheers,

Claus

http://www.clausbrod.de/Blog