567 lines
19 KiB
Plaintext
567 lines
19 KiB
Plaintext
|
/*++
|
||
|
|
|
||
|
|
Copyright (c) Microsoft Corporation. All rights reserved.
|
||
|
|
|
||
|
|
Module Name:
|
||
|
|
|
||
|
|
mcaia64.mof
|
||
|
|
|
||
|
|
Abstract:
|
||
|
|
|
||
|
|
This file defines the permament subscriptions needed to reflect
|
||
|
|
the WMI MCA events into the eventlog.
|
||
|
|
|
||
|
|
Revision History:
|
||
|
|
|
||
|
|
--*/
|
||
|
|
|
||
|
|
//
|
||
|
|
// Machine Check Abort
|
||
|
|
//
|
||
|
|
|
||
|
|
#if defined(_IA64_)
|
||
|
|
|
||
|
|
//
|
||
|
|
// Define the permament eventlog event subscriptions
|
||
|
|
//
|
||
|
|
// The WMI eventlog consumer provider is a facility that is built into WMI
|
||
|
|
// that will generate an eventlog message whenever a specific WMI event is
|
||
|
|
// received. This can be useful to circumvent the limited size of an eventlog
|
||
|
|
// that can be generated from kernel mode.
|
||
|
|
//
|
||
|
|
// In order to set this up you need an instnace of an __EventFilter, an
|
||
|
|
// instance of an NTEventLogEventConsumer and an instance of
|
||
|
|
// __FilterToConsumerBinding.
|
||
|
|
//
|
||
|
|
// __EventFilter describes the WQL query that specifies a set of events that
|
||
|
|
// trigger generation of an eventlog.
|
||
|
|
//
|
||
|
|
// NTEventLogEventConsumer describes the type of eventlog event that should
|
||
|
|
// be generated and some of the parameters for the eventlog. In general the
|
||
|
|
// properties follow the parameters of the ReportEvent api. The
|
||
|
|
// InsertionStringTemplates property is an array of strings that specify
|
||
|
|
// what strings should be used as replacable parameters in the eventlog
|
||
|
|
// message. If the string is withing % then it specifies that the value for
|
||
|
|
// the replacable string should come from that property in the event that
|
||
|
|
// triggered the eventlog generation. The NameOfRawDataProperty property
|
||
|
|
// specifies the property from the event that triggered the eventlog
|
||
|
|
// generation whose value is used as the additional data in the
|
||
|
|
// generated eventlog.
|
||
|
|
//
|
||
|
|
// __FilterToConsumerBinding specifies a binding between the __EventFilter
|
||
|
|
// instance and the NTEventLogEventConsumer instance. Basically it assigns
|
||
|
|
// which eventlog should be generated from which event triggers.
|
||
|
|
//
|
||
|
|
// Note that this macro should be used only within the root\subscriptions
|
||
|
|
// namespace.
|
||
|
|
//
|
||
|
|
|
||
|
|
|
||
|
|
//
|
||
|
|
// UNIQUE_NAME must be a universally unique within the root\subscription
|
||
|
|
// namespace. It is a unique name the event to eventlog
|
||
|
|
// instances.
|
||
|
|
//
|
||
|
|
// QUNIQUE_NAME is the same as UNIQUE_NAME except it is surrounded by
|
||
|
|
// double quotes
|
||
|
|
//
|
||
|
|
// EVENT_TYPE is the eventlog id for the eventlog that is generated
|
||
|
|
//
|
||
|
|
// QUERY is the WQL that when succeeded will trigger eventlog generation
|
||
|
|
//
|
||
|
|
// SOURCE is the name of the eventlog source which is used to generate the
|
||
|
|
// eventlog
|
||
|
|
//
|
||
|
|
// EXTRA_DATA is the name of the property in the trigger event whose value
|
||
|
|
// is used as the additional data within the eventlog
|
||
|
|
//
|
||
|
|
// INSERTION_STRING_COUNT is the number of eventlog insertion strings
|
||
|
|
//
|
||
|
|
// INSERTION1 to INSERTION5 is the insertion string text for each insertion
|
||
|
|
// string. If the value is within % then the value of the
|
||
|
|
// property with that name is used as the insertion string
|
||
|
|
//
|
||
|
|
#define DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(UNIQUE_NAME, \
|
||
|
|
QUNIQUE_NAME, \
|
||
|
|
EVENT_TYPE, \
|
||
|
|
QUERY, \
|
||
|
|
SOURCE, \
|
||
|
|
EXTRA_DATA, \
|
||
|
|
INSERTION_STRING_COUNT, \
|
||
|
|
INSERTION1, \
|
||
|
|
INSERTION2, \
|
||
|
|
INSERTION3, \
|
||
|
|
INSERTION4, \
|
||
|
|
INSERTION5) \
|
||
|
|
instance of __EventFilter as $Filter##UNIQUE_NAME \
|
||
|
|
{ \
|
||
|
|
EventNamespace = "\\\\.\\root\\wmi"; \
|
||
|
|
Name = ##QUNIQUE_NAME; \
|
||
|
|
Query = ##QUERY; \
|
||
|
|
QueryLanguage = "WQL"; \
|
||
|
|
}; \
|
||
|
|
\
|
||
|
|
instance of NTEventLogEventConsumer as $Consumer##UNIQUE_NAME \
|
||
|
|
{ \
|
||
|
|
Category = 0; \
|
||
|
|
Name = QUNIQUE_NAME; \
|
||
|
|
\
|
||
|
|
EventType = 1; \
|
||
|
|
EventId = ##EVENT_TYPE; \
|
||
|
|
SourceName = ##SOURCE; \
|
||
|
|
NumberOfInsertionStrings = ##INSERTION_STRING_COUNT; \
|
||
|
|
InsertionStringTemplates = {##INSERTION1, ##INSERTION2, ##INSERTION3, ##INSERTION4, ##INSERTION5}; \
|
||
|
|
NameOfRawDataProperty = ##EXTRA_DATA; \
|
||
|
|
}; \
|
||
|
|
\
|
||
|
|
instance of __FilterToConsumerBinding \
|
||
|
|
{ \
|
||
|
|
Consumer = $Consumer##UNIQUE_NAME; \
|
||
|
|
Filter = $Filter##UNIQUE_NAME; \
|
||
|
|
};
|
||
|
|
|
||
|
|
|
||
|
|
//
|
||
|
|
// Define all event to eventlog subscriptions for MCA events/eventlogs
|
||
|
|
//
|
||
|
|
#pragma namespace("\\\\.\\root\\subscription")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA0,
|
||
|
|
"MCA0",
|
||
|
|
2147811388, // MCA_WARNING_CACHE
|
||
|
|
"select * from MSMCAEvent_CPUError where type = 2147811388",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
3, "%Cpu%", "%AdditionalErrors%", "%level%", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA1,
|
||
|
|
"MCA1",
|
||
|
|
3221553213, // MCA_ERROR_CACHE
|
||
|
|
"select * from MSMCAEvent_CPUError where type = 3221553213",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
3, "%Cpu%", "%AdditionalErrors%", "%level%", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA2,
|
||
|
|
"MCA2",
|
||
|
|
2147811390, // MCA_WARNING_TLB
|
||
|
|
"select * from MSMCAEvent_CPUError where type = 2147811390",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
3, "%Cpu%", "%AdditionalErrors%", "%level%", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA3,
|
||
|
|
"MCA3",
|
||
|
|
3221553215, // MCA_ERROR_TLB
|
||
|
|
"select * from MSMCAEvent_CPUError where type = 3221553215",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
3, "%Cpu%", "%AdditionalErrors%", "%level%", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA4,
|
||
|
|
"MCA4",
|
||
|
|
2147811392, // MCA_WARNING_CPU_BUS
|
||
|
|
"select * from MSMCAEvent_CPUError where type = 2147811392",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA5,
|
||
|
|
"MCA5",
|
||
|
|
3221553217, // MCA_ERROR_CPU_BUS
|
||
|
|
"select * from MSMCAEvent_CPUError where type = 3221553217",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA6,
|
||
|
|
"MCA6",
|
||
|
|
2147811394, // MCA_WARNING_REGISTER_FILE
|
||
|
|
"select * from MSMCAEvent_CPUError where type = 2147811394",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA7,
|
||
|
|
"MCA7",
|
||
|
|
3221553219, // MCA_ERROR_REGISTER_FILE
|
||
|
|
"select * from MSMCAEvent_CPUError where type = 3221553219",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA8,
|
||
|
|
"MCA8",
|
||
|
|
2147811396, // MCA_WARNING_MAS
|
||
|
|
"select * from MSMCAEvent_CPUError where type = 2147811396",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA9,
|
||
|
|
"MCA9",
|
||
|
|
3221553221, // MCA_ERROR_MAS
|
||
|
|
"select * from MSMCAEvent_CPUError where type = 3221553221",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA10,
|
||
|
|
"MCA10",
|
||
|
|
2147811398, // MCA_WARNING_MEM_UNKNOWN
|
||
|
|
"select * from MSMCAEvent_MemoryError where type = 2147811398",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA11,
|
||
|
|
"MCA11",
|
||
|
|
3221553223, // MCA_ERROR_MEM_UNKNOWN
|
||
|
|
"select * from MSMCAEvent_MemoryError where type = 3221553223",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA12,
|
||
|
|
"MCA12",
|
||
|
|
2147811400, // MCA_WARNING_MEM_1_2
|
||
|
|
"select * from MSMCAEvent_MemoryError where type = 2147811400",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
3, "%Cpu%", "%AdditionalErrors%", "%MEM_PHYSICAL_ADDR%", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA13,
|
||
|
|
"MCA13",
|
||
|
|
3221553225, // MCA_ERROR_MEM_1_2
|
||
|
|
"select * from MSMCAEvent_MemoryError where type = 3221553225",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
3, "%Cpu%", "%AdditionalErrors%", "%MEM_PHYSICAL_ADDR%", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA14,
|
||
|
|
"MCA14",
|
||
|
|
2147811402, // MCA_WARNING_MEM_1_2_5
|
||
|
|
"select * from MSMCAEvent_MemoryError where type = 2147811402",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
4, "%Cpu%", "%AdditionalErrors%", "%MEM_PHYSICAL_ADDR%", "%MEM_MODULE%", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA15,
|
||
|
|
"MCA15",
|
||
|
|
3221553227, // MCA_ERROR_MEM_1_2_5
|
||
|
|
"select * from MSMCAEvent_MemoryError where type = 3221553227",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
4, "%Cpu%", "%AdditionalErrors%", "%MEM_PHYSICAL_ADDR%", "%MEM_MODULE%", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA16,
|
||
|
|
"MCA16",
|
||
|
|
2147811404, // MCA_WARNING_MEM_1_2_5_4
|
||
|
|
"select * from MSMCAEvent_MemoryError where type = 2147811404",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
5, "%Cpu%", "%AdditionalErrors%", "%MEM_PHYSICAL_ADDR%", "%MEM_MODULE%", "%MEM_CARD%")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA17,
|
||
|
|
"MCA17",
|
||
|
|
3221553229, // MCA_ERROR_MEM_1_2_5_4
|
||
|
|
"select * from MSMCAEvent_MemoryError where type = 3221553229",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
5, "%Cpu%", "%AdditionalErrors%", "%MEM_PHYSICAL_ADDR%", "%MEM_MODULE%", "%MEM_CARD%")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA18,
|
||
|
|
"MCA18",
|
||
|
|
2147811406, // MCA_WARNING_SYSTEM_EVENT
|
||
|
|
"select * from MSMCAEvent_SystemEventError where type = 2147811406",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA19,
|
||
|
|
"MCA19",
|
||
|
|
3221553231, // MCA_ERROR_SYSTEM_EVENT
|
||
|
|
"select * from MSMCAEvent_SystemEventError where type = 3221553231",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA20,
|
||
|
|
"MCA20",
|
||
|
|
2147811408, // MCA_WARNING_PCI_BUS_PARITY
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 2147811408",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
5, "%Cpu%", "%AdditionalErrors%", "%PCI_BUS_CMD%", "%PCI_BUS_ADDRESS%", "%PCI_BUS_ID_BusNumber%")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA21,
|
||
|
|
"MCA21",
|
||
|
|
3221553233, // MCA_ERROR_PCI_BUS_PARITY
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 3221553233",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
5, "%Cpu%", "%AdditionalErrors%", "%PCI_BUS_CMD%", "%PCI_BUS_ADDRESS%", "%PCI_BUS_ID_BusNumber%")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA22,
|
||
|
|
"MCA22",
|
||
|
|
2147811410, // MCA_WARNING_PCI_BUS_PARITY_NO_INFO
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 2147811410",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA23,
|
||
|
|
"MCA23",
|
||
|
|
3221553235, // MCA_ERROR_PCI_BUS_PARITY_NO_INFO
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 3221553235",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA24,
|
||
|
|
"MCA24",
|
||
|
|
2147811412, // MCA_WARNING_PCI_BUS_SERR
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 2147811412",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
5, "%Cpu%", "%AdditionalErrors%", "%PCI_BUS_CMD%", "%PCI_BUS_ADDRESS%", "%PCI_BUS_ID_BusNumber%")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA25,
|
||
|
|
"MCA25",
|
||
|
|
3221553237, // MCA_ERROR_PCI_BUS_SERR
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 3221553237",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
5, "%Cpu%", "%AdditionalErrors%", "%PCI_BUS_CMD%", "%PCI_BUS_ADDRESS%", "%PCI_BUS_ID_BusNumber%")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA26,
|
||
|
|
"MCA26",
|
||
|
|
2147811414, // MCA_WARNING_PCI_BUS_SERR_NO_INFO
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 2147811414",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA27,
|
||
|
|
"MCA27",
|
||
|
|
3221553239, // MCA_ERROR_PCI_BUS_SERR_NO_INFO
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 3221553239",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA28,
|
||
|
|
"MCA28",
|
||
|
|
2147811416, // MCA_WARNING_PCI_BUS_MASTER_ABORT
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 2147811416",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
5, "%Cpu%", "%AdditionalErrors%", "%PCI_BUS_CMD%", "%PCI_BUS_ADDRESS%", "%PCI_BUS_ID_BusNumber%")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA29,
|
||
|
|
"MCA29",
|
||
|
|
3221553241, // MCA_ERROR_PCI_BUS_MASTER_ABORT
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 3221553241",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
5, "%Cpu%", "%AdditionalErrors%", "%PCI_BUS_CMD%", "%PCI_BUS_ADDRESS%", "%PCI_BUS_ID_BusNumber%")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA30,
|
||
|
|
"MCA30",
|
||
|
|
2147811418, // MCA_WARNING_PCI_BUS_MASTER_ABORT_NO_INFO
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 2147811418",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA31,
|
||
|
|
"MCA31",
|
||
|
|
3221553243, // MCA_ERROR_PCI_BUS_MASTER_ABORT_NO_INFO
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 3221553243",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA32,
|
||
|
|
"MCA32",
|
||
|
|
2147811420, // MCA_WARNING_PCI_BUS_TIMEOUT
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 2147811420",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
5, "%Cpu%", "%AdditionalErrors%", "%PCI_BUS_CMD%", "%PCI_BUS_ADDRESS%", "%PCI_BUS_ID_BusNumber%")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA33,
|
||
|
|
"MCA33",
|
||
|
|
3221553245, // MCA_ERROR_PCI_BUS_TIMEOUT
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 3221553245",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
5, "%Cpu%", "%AdditionalErrors%", "%PCI_BUS_CMD%", "%PCI_BUS_ADDRESS%", "%PCI_BUS_ID_BusNumber%")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA34,
|
||
|
|
"MCA34",
|
||
|
|
2147811422, // MCA_WARNING_PCI_BUS_TIMEOUT_NO_INFO
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 2147811422",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA35,
|
||
|
|
"MCA35",
|
||
|
|
3221553247, // MCA_ERROR_PCI_BUS_TIMEOUT_NO_INFO
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 3221553247",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA36,
|
||
|
|
"MCA36",
|
||
|
|
2147811424, // MCA_WARNING_PCI_BUS_UNKNOWN
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 2147811424",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA37,
|
||
|
|
"MCA37",
|
||
|
|
3221553249, // MCA_ERROR_PCI_BUS_UNKNOWN
|
||
|
|
"select * from MSMCAEvent_PCIBusError where type = 3221553249",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA38,
|
||
|
|
"MCA38",
|
||
|
|
2147811426, // MCA_WARNING_PCI_DEVICE
|
||
|
|
"select * from MSMCAEvent_PCIComponentError where type = 2147811426",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA39,
|
||
|
|
"MCA39",
|
||
|
|
3221553251, // MCA_ERROR_PCI_DEVICE
|
||
|
|
"select * from MSMCAEvent_PCIComponentError where type = 3221553251",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA40,
|
||
|
|
"MCA40",
|
||
|
|
2147811428, // MCA_WARNING_SMBIOS
|
||
|
|
"select * from MSMCAEvent_SMBIOSError where type = 2147811428",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
4, "%Cpu%", "%AdditionalErrors%", "%SMBIOS_EVENT_TYPE%", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA41,
|
||
|
|
"MCA41",
|
||
|
|
3221553253, // MCA_ERROR_SMBIOS
|
||
|
|
"select * from MSMCAEvent_SMBIOSError where type = 3221553253",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
3, "%Cpu%", "%AdditionalErrors%", "%SMBIOS_EVENT_TYPE%", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA42,
|
||
|
|
"MCA42",
|
||
|
|
2147811430, // MCA_WARNING_PLATFORM_SPECIFIC
|
||
|
|
"select * from MSMCAEvent_PlatformSpecificError where type = 2147811430",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA43,
|
||
|
|
"MCA43",
|
||
|
|
3221553255, // MCA_ERROR_PLATFORM_SPECIFIC
|
||
|
|
"select * from MSMCAEvent_PlatformSpecificError where type = 3221553255",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA44,
|
||
|
|
"MCA44",
|
||
|
|
2147811432, // MCA_WARNING_UNKNOWN
|
||
|
|
"select * from MSMCAEvent_InvalidError where type = 2147811432",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA45,
|
||
|
|
"MCA45",
|
||
|
|
3221553257, // MCA_ERROR_UNKNOWN
|
||
|
|
"select * from MSMCAEvent_InvalidError where type = 3221553257",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
2, "%Cpu%", "%AdditionalErrors%", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA46,
|
||
|
|
"MCA46",
|
||
|
|
2147811434, // MCA_WARNING_UNKNOWN_NO_CPU
|
||
|
|
"select * from MSMCAEvent_InvalidError where type = 2147811434",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
0, "N/A", "N/A", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
DEFINE_EVENT_TO_EVENTLOG_SUBSCRIPTION(
|
||
|
|
MCA47,
|
||
|
|
"MCA47",
|
||
|
|
3221553259, // MCA_ERROR_UNKNOWN _NO_CPU
|
||
|
|
"select * from MSMCAEvent_InvalidError where type = 3221553259",
|
||
|
|
"WMIxWDM",
|
||
|
|
"RawRecord",
|
||
|
|
0, "N/A", "N/A", "N/A", "N/A", "N/A")
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
#pragma namespace("\\\\.\\root\\wmi")
|
||
|
|
|
||
|
|
#endif
|