How to collect windows blue screen log files and dump files

How to collect windows blue screen log files and dump files
For general errors, log information must be collected: 1. Billing server log: manually create two folders, wxlog and wxpluglog, under the installation directory of the server to obtain the billing log and plug-in log respectively. If the log directory already exists in the internet cafe and the log size is large, you can delete the previous log file, reproduce the problem, and then extract the new log 2. Billing client log: manually create the wxlog and wxpluglog folders under the system32 directory of the client to obtain the billing log and plug-in log respectively. Blue Screen problems need to be extracted dump files: A disk environment I. How to set the log file I: (recommended: The obtained log information is comprehensive, more conducive to analysis) Right-click "my computer ", select "properties", select "Settings" in "Advanced => Start and fault recovery", and follow the steps shown in step 2: (not recommended: Brief log information, you can only perform rough analysis.) Right-click "my computer" and select "properties". In "Advanced => Start and fault recovery", select "Settings ", set as shown in. 2. Obtain the log file and store it in the following directory:
Core MEMORY Dump path: C: \ WINDOWS \ MEMORY. DMP
Small memory dump file path: C: \ WINDOWS \ Minidump \ please get the log file in the above path, you can also customize the log file storage path (it is best to put it in a non-restored protection drive letter, this prevents log loss caused by system restart. Locate (directory: C: \ WINDOWS \ system32 \) to obtain the Fault Log and dump. The specific operations are as follows: 1. Enter drwtsn32.exe in the system "run, the window shown in is displayed. Note: Set the log and dmp output address (preferably under a non-restored protection drive), this avoids log loss caused by system restart) and sets the options as shown in ②. 2. After performing the preceding operation, enter "drwtsn32-I" in "run" to install drwtsn32-I. The following window appears, indicating that the installation is successful. 2. When a fault occurs, obtain the log file and the dmp file in the folder set on the machine in the problematic Internet cafe. ================================ Pay attention to the following points for DMP file extraction: 1. Virtual Memory settings:
The virtual memory (page file) must be set on disk C. The initial size should be at least 1 MB larger than the physical memory. Otherwise, it will not be able to hit the full memory dump. 2: The default path of the dump file is:
% SystemRoot % \ MEMORY. DMP. The default value is in the WINDOWS directory. You can set it to another path. 3: The DMP4: 4 GB memory or larger memory cannot be extracted from the blue screen of system crash. You must use/MAXMEM to convert the boot. ini file. ================================= DMP file extraction FAQs: will the DMP file be restored in the restored State?
A: It is recommended that you place the DMP file in a directory or drive letter that will not be restored. If there is no disk, you can consider using a USB flash drive or a mobile hard disk. Q: How do I extract blue files when I start the system?
A: You can set the USB flash drive letter directly when setting the path. After the log is generated, search for the USB flash drive after the system starts. Then restart the PC, reproduce the problem again, press the Ctrl button on the right, press the Scroll button on the disk, wait until the DMP file is created and the system is restarted in normal mode to ensure the complete DMP File the PC has been created and restarted successfully.