Application Errors

For every application error uberAgent collects metrics like application name and version, process lifetime as well as the exception code.

Note: processes are auto-grouped into applications, i.e. the application name is determined automatically without requiring any configuration. Information on how this works are available here.

Details

• Source type: uberAgent:Application:Errors
• Used in dashboards: Application Errors, Single Machine Detail, Single Application Detail, Single User Detail
• Enabled through configuration setting: ApplicationErrors
• Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field	Description	Data type	Unit	Example
ErrorType	Error type. Possible values: too much to list here. Please have a look at the lookup bugcheck_codes.	Number		1
ProcName	Process name	String		chrome.exe
ProcPath	Process path	String		C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
ProcVersion	Process version	String		67.0.3396.99
ProcTimestamp	Process timestamp	String		2017-06-02 11:43:43.000 +0200
ModuleName	Faulting module name	String		msvcrt.dll
ModulePath	Faulting module path	String		C:\Windows\system32\msvcrt.dll
ModuleVersion	Faulting module version	String		7.0.9600.17415
ModuleTimestamp	Faulting module timestamp	String		2014-10-29 04:04:30.000 +0200
ProcID	Process ID	Number		456
ProcLifetimeMs	Process lifetime	Number	ms	82744165
ExceptionCode	Exception code	String		0xc0000005
FaultOffset	Fault offset	String		0x0000b5f0
AppPackageFullName	Microsoft UWP app full name. More information.	String		Microsoft.XboxGameCallableUI_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy
AppPackageRelativeId	Microsoft UWP app relative ID. More information.	String		xbox
AppId	Associated application ID. Used by uberAgent to lookup application names and populate field AppName.	String		GglChrm
ProcUser	Process user	String		Domain\JohnDoe
SessionGUID	Unique identifier that is generated by uberAgent when the session is created. Valid for this session only.	String		00000002-f295-9109-e7c7-c964011dd401
ProcGUID	Unique identifier that is generated by uberAgent when the process is started.	String		00000000-0599-6955-eb63-a00bb127d401
AppVersion	Application version	String		67.0.3396.99

List of Calculated Fields

Field	Description	Data type	Unit	Example	Where available
ErrorTypeName	Error type name. Possible values: too much to list here. Please have a look at the lookup bugcheck_codes.	String		APC_INDEX_MISMATCH	Splunk data model, Splunk SPL
User	User name	String		Domain\JohnDoe	Splunk data model
AppName	Associated application name	String		Google Chrome	Splunk data model, Splunk SPL