Application Errors

For every application error uberAgent collects metrics like application name and version, process lifetime as well as the exception code.

Note: processes are auto-grouped into applications, i.e. the application name is determined automatically without requiring any configuration. Information on how this works are available here.

Details

• Source type: uberAgent:Application:Errors
• Used in dashboards: Application Errors, Single Machine Detail, Single Application Detail, Single User Detail
• Enabled through configuration setting: ApplicationErrors
• Related configuration settings: n/a
• Supported platform: Windows

List of Fields in the Raw Agent Data

Field	Description	Data type	Unit	Measurement type	Example
ErrorType	Error type code. Possible values: 1, 2. Please take a look at the field ErrorTypeName, too.	Number		Snapshot	1
ProcName	Process name	String		Snapshot	chrome.exe
ProcPath	Process path	String		Snapshot	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
ProcVersion	Process version	String		Snapshot	67.0.3396.99
ProcTimestamp	Process timestamp	String		Snapshot	2017-06-02 11:43:43.000 +0200
ModuleName	Faulting module name	String		Snapshot	msvcrt.dll
ModulePath	Faulting module path	String		Snapshot	C:\Windows\system32\msvcrt.dll
ModuleVersion	Faulting module version	String		Snapshot	7.0.9600.17415
ModuleTimestamp	Faulting module timestamp	String		Snapshot	2014-10-29 04:04:30.000 +0200
ProcID	Process ID	Number		Snapshot	456
ProcLifetimeMs	Process lifetime	Number	ms	Sum	82744165
ExceptionCode	Exception code	String		Snapshot	0xc0000005
FaultOffset	Fault offset	String		Snapshot	0x0000b5f0
AppPackageFullName	Microsoft UWP app full name. More information.	String		Snapshot	Microsoft.XboxGameCallableUI_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy
AppPackageRelativeId	Microsoft UWP app relative ID. More information.	String		Snapshot	xbox
AppId	Associated application ID. Used by uberAgent to lookup application names and populate field AppName.	String		Snapshot	GglChrm
ProcUser	Process user	String		Snapshot	Domain\JohnDoe
SessionGUID	Unique identifier that is generated by uberAgent when the session is created. Valid for this session only.	String		Snapshot	00000002-f295-9109-e7c7-c964011dd401
ProcGUID	Unique identifier that is generated by uberAgent when the process is started.	String		Snapshot	00000000-0599-6955-eb63-a00bb127d401
AppVersion	Application version	String		Snapshot	67.0.3396.99
HangType	Hang type. Requires Windows 10 1903. Possible values: Cross-process, Cross-thread, Quiesce, Top level window is idle, Unknown	String		Snapshot	Cross-process

List of Calculated Fields

Field	Description	Data type	Unit	Measurement type	Where available	Example
ErrorTypeName	Display name of the ErrorType field. Possible values: Crash, Hang.	String		Snapshot	Splunk data model, Splunk SPL	Hang
User	User name	String		Snapshot	Splunk data model	Domain\JohnDoe
AppName	Associated application name	String		Snapshot	Splunk data model, Splunk SPL	Google Chrome