I'm analyzing an event 1000 error in a third-party enterprise application which shows a "Faulting module name" of ntdll.dll and wondering: What is the "Report ID" GUID correlated to? and How might I use it to dig further?
“Report ID” in Windows Application Error, event 1000 correlated to
windows-event-log
Related Topic
- Moss 2007 – Event Log EventId:7888 Windows NT user or group not found
- How to fix a custom Event Viewer Log that merges automatically with the Application log
- A valid destination log for Windows event forwarding
- Windows Server 2008R2 – Event Logger Error 2 Fix
- Event ID: 36888 The following fatal alert was generated: 10. The internal error state is 10
- Windows Server – Event ID 1000 Application Error cmd.exe kernelbase.dll
- Windows – An unmarshaling policy check was performed when unmarshaling a custom marshaled object and the class {45FB4600-E6E8-4928-B25E-50476FF79425}
Best Answer
The "Report ID" appears to just be a unique identifier which Microsoft assigns to a particular application crash. I do not believe that this value serves any purpose.
To find out more you should look under "View all problem reports", or configure your system to always generate crash dumps in a specified folder (https://msdn.microsoft.com/en-us/library/windows/desktop/bb787181%28v=vs.85%29.aspx).