How to get the identifier "bucket id" that winqual uses if I have a minidump file or exception structure? (Windows C ++)

There are a few related questions on SO - but no answer -

I would like to generate a signature / bucket identifier to report the mini-drive / alarm back to our problem tracking system. Since MS already does this with "slave identifiers", I decided that I could just reuse their generation in the form of a bucket / signature.

Can I get this identifier from the top-level filter or the _EXCEPTION_POINTERS object that I have inside the filter, or the _MINIDUMP_EXCEPTION_INFORMATION structure, or from the mini-disk itself?

This is a C ++ application.

+4
source share
2 answers

It talks about how the guys at Microsoft create the bucket identifier in the first place (and yes, of course, this document is from Microsoft). You really do not need to rebuild engineering just as they are used. This is an idea that works.

The document can be found at http://www.sigops.org/sosp/sosp09/papers/glerum-sosp09.pdf They also make a slide, as this is a SIGOPS document: http://www.sigops.org/sosp/sosp09/slides /glerum-slides-sosp09.pdf

+4
source

Not sure which bucket id you need. The digital identifier is assigned by the server and can be found after sending the report by looking at the event log. Look for event ID 1001 in the application event log.

To find the bucket identifier in string format, use windbg or cdb and use the command! analysis.

Note that for actual bucketing, you probably want to look at WATSON_STAGEONE_URL, not BUCKET_ID.

+3
source

Source: https://habr.com/ru/post/1334716/


All Articles