0

我正在尝试调整 Adplus.exe 的配置文件,但我遇到了一个EventLog默认情况下为第二次机会异常打开的操作。但是,我比较了有和没有 EventLog 的日志,但似乎效果是一样的。我希望它生成一个事件查看器日志,但它没有。

这是我的cfg片段:

<Exception Code='eh'>
  <Actions1> Log;stack;</Actions1>
  <ReturnAction1> GN </ReturnAction1>
</Exception>
<Exception Code='AV'>
  <Actions1> Log;stack;FullDump;EventLog</Actions1>
  <ReturnAction1> GN </ReturnAction1>
</Exception>
<Exception Code='*'>
  <Actions1> Log;stack </Actions1>
  <ReturnAction1> GN </ReturnAction1>
</Exception>
<Exception Code='epr'>
  <Actions1> Log;</Actions1>
</Exception>
<Exception Code='bpe'>
  <Actions1> Log </Actions1>
  <ReturnAction1> GN </ReturnAction1>
</Exception>

请注意EventLogin Exception Code='AV'(对不起,我无法突出显示或加粗该部分)。我尝试启用/禁用它,生成的日志完全相同。它真的有效吗?如果是,在哪里可以找到事件日志?还是已经贬值了?

另外,我检查了 Adplus v7 文档EventLog,但没有包含在其中,但就像我说的, 更新:它不在文档中,但在我们运行时显示ADPlus –HelpConfig

默认情况下,它启用了第二次机会异常,如DebuggerScript.txt下面生成的

*| Default Exception Behavior:
*|     Action1: Log
*|     Return1: GN
*|     Action2: Log;Time;Stack;FullDump;EventLog
*|     Return2: Q
*| Default Event Behavior:
*|     Action1: Log
*|     Return1: GN
*| 
*| Exceptions:
*| av-AccessViolation
*|     Action1: Log;stack;FullDump
*|     Return1: GN
*|     Action2: Log;Time;Stack;FullDump;EventLog
*|     Return2: Q
*| ch-InvalidHandle
*|     Action1: Log
*|     Return1: GN
*|     Action2: Log;Time;Stack;FullDump;EventLog
*|     Return2: Q

提前谢谢!

4

1 回答 1

0

找到了。它在带有前缀的 DebuggerScript.txt 上!elog_str

在 Actions 中添加/删除 EventLog 并没有改变日志中的任何内容,因为默认情况下它总是为 Second Chance Exceptions 启用。此外,事件日志仅显示实际事件查看器日志的描述。

实际事件查看器日志示例:

The description for Event ID 0 from source Application cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event: 

ADPlus detected a SecondChance_clr_NET_CLR in ExceptionGenerator.exe with Process ID 5516 and the output directory is logs\20180312_084515_Crash_Mode

the message resource is present but the message is not found in the string/message table

Adplus 事件日志示例:

!elog_str ADPlus detected a SecondChance_av_AccessViolation in AdpProcName with Process ID AdpProcID and the output directory is AdpDumpDir;Q"
于 2018-03-12T13:23:54.650 回答