@
jasonyang9 日志名称: Microsoft-Windows-Kernel-EventTracing/Admin
来源: Microsoft-Windows-Kernel-EventTracing
日期: 2018/10/16 13:25:32
事件 ID: 3
任务类别: Session
级别: 错误
关键字: Session
用户: SYSTEM
计算机: 小吴同学的破旧笔记本
描述:
会话“ Circular Kernel Context Logger ”已停止,原因是存在以下错误: 0xC0000188
事件 Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>3</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>14</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2018-10-16T05:25:32.517323000Z" />
<EventRecordID>194</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="7368" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>小吴同学的破旧笔记本</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">Circular Kernel Context Logger</Data>
<Data Name="FileName">C:\windows\system32\WDI\LogFiles\ShutdownCKCL.etl</Data>
<Data Name="ErrorCode">3221225864</Data>
<Data Name="LoggingMode">41943168</Data>
<Data Name="FailureReason">0</Data>
</EventData>
</Event>
1 点多的时候刚假死了一次,这是唯一一条符合这个时间的错误日志