We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Hello,
how can we verify what event caused below exception?
02-13-2021 15:09:54.642 -0600 FATAL ExecProcessor - message from ""C:\Program Files\SplunkUniversalForwarder\etc\apps\blablabin\TA_ETW.exe"" Exception during streaming: name=TA_ETW://TA_ETW_DNS | System.FormatException: Input string was not in a correct format. | at System.Number.StringToNumber(String str, NumberStyles options, NumberBuffer& number, NumberFormatInfo info, Boolean parseDecimal) | at System.Number.ParseInt32(String s, NumberStyles style, NumberFormatInfo info) | at CallSite.Target(Closure , CallSite , Type , Object ) | at TA_ETW.TA_ETW.ProcessEventRecord(EtwTrace etwtrace, IEventRecord r) | at TA_ETW.TA_ETW.<>c__DisplayClass4_1.b__0(IEventRecord r) | at Microsoft.O365.Security.ETW.EventFilter.EventNotification(_EVENT_RECORD* A_0) | at std._Func_impl_no_alloc<void (__cdecl*)(_EVENT_RECORD const &),void,_EVENT_RECORD const &>._Do_call(_Func_impl_no_alloc<void (__cdecl*)(_EVENT_RECORD const &),void,_EVENT_RECORD const &>* , _EVENT_RECORD* <_Args_0>) | at std._Func_class<void,_EVENT_RECORD const &>.()(_Func_class<void,_EVENT_RECORD const &>* , _EVENT_RECORD* <_Args_0>) | at krabs.event_filter.on_event(event_filter* , _EVENT_RECORD* record) | at krabs.details.base_provider.on_event(base_provider* , _EVENT_RECORD* record) | at krabs.details.ut.forward_events(_EVENT_RECORD* record, tracekrabs::details::ut* trace) | at ProcessTrace(UInt64* , UInt32 , _FILETIME* , _FILETIME* ) | at krabs.details.trace_manager<krabs::tracekrabs::details::ut >.process_trace(trace_manager<krabs::tracekrabs::details::ut >* ) | at Microsoft.O365.Security.ETW.UserTrace.Start() | at TA_ETW.TA_ETW.d__4.MoveNext() | --- End of stack trace from previous location where exception was thrown --- | at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) | at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) | at Splunk.ModularInputs.ModularInput.d__15.MoveNext()
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Hello,
how can we verify what event caused below exception?
02-13-2021 15:09:54.642 -0600 FATAL ExecProcessor - message from ""C:\Program Files\SplunkUniversalForwarder\etc\apps\blablabin\TA_ETW.exe"" Exception during streaming: name=TA_ETW://TA_ETW_DNS | System.FormatException: Input string was not in a correct format. | at System.Number.StringToNumber(String str, NumberStyles options, NumberBuffer& number, NumberFormatInfo info, Boolean parseDecimal) | at System.Number.ParseInt32(String s, NumberStyles style, NumberFormatInfo info) | at CallSite.Target(Closure , CallSite , Type , Object ) | at TA_ETW.TA_ETW.ProcessEventRecord(EtwTrace etwtrace, IEventRecord r) | at TA_ETW.TA_ETW.<>c__DisplayClass4_1.b__0(IEventRecord r) | at Microsoft.O365.Security.ETW.EventFilter.EventNotification(_EVENT_RECORD* A_0) | at std._Func_impl_no_alloc<void (__cdecl*)(_EVENT_RECORD const &),void,_EVENT_RECORD const &>._Do_call(_Func_impl_no_alloc<void (__cdecl*)(_EVENT_RECORD const &),void,_EVENT_RECORD const &>* , _EVENT_RECORD* <_Args_0>) | at std._Func_class<void,_EVENT_RECORD const &>.()(_Func_class<void,_EVENT_RECORD const &>* , _EVENT_RECORD* <_Args_0>) | at krabs.event_filter.on_event(event_filter* , _EVENT_RECORD* record) | at krabs.details.base_provider.on_event(base_provider* , _EVENT_RECORD* record) | at krabs.details.ut.forward_events(_EVENT_RECORD* record, tracekrabs::details::ut* trace) | at ProcessTrace(UInt64* , UInt32 , _FILETIME* , _FILETIME* ) | at krabs.details.trace_manager<krabs::tracekrabs::details::ut >.process_trace(trace_manager<krabs::tracekrabs::details::ut >* ) | at Microsoft.O365.Security.ETW.UserTrace.Start() | at TA_ETW.TA_ETW.d__4.MoveNext() | --- End of stack trace from previous location where exception was thrown --- | at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) | at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) | at Splunk.ModularInputs.ModularInput.d__15.MoveNext()
The text was updated successfully, but these errors were encountered: