BSOD Events in ControlUp and How to Investigate Them

A user asked about BSOD events in ControlUp and shared that they have around 700 devices and 3-5 BSOD events per day. Another user suggested using the BSOD analysis script from the library to get more detailed information. After looking into the reported BSOD event, it was unclear if it was an actual BSOD or just a minidump. The user wanted this issue resolved and was willing to provide any necessary information. The power events tab in ControlUp can be checked to see if a machine rebooted during a reported BSOD event. The user was unsure if the machine had automatically rebooted when the user was not at their device.

Read the entire ‘BSOD Events in ControlUp and How to Investigate Them’ thread below:

If you look st the power events for the device is it BSOD WER ?

If you don’t mind me asking how many devices do you have in your fleet and how many BSOD events do you have per day in your fleet

Thanks for the reply.

In the Power Events for this laptop, it shows "BSOD" as the event type (not BSOD WER). We have just under 700 devices in ControlUp.

Eyeballing the report, it looks like it’s saying we have roughly 3 – 5 BSOD events every day. I’d have to dig deeper to find out if these were actual BSOD events or just a situation where it created a minidump but no error or reboot on the user’s side.

In the scripts library there is a script that you can add it’s called BSOD analysis, something like that

When your device has a BSOD event then run that it will use nirsofts BSOD mini dumps to give you bitnkorr detail the BSOd event

Wow are are running lot more but also getting a lot more events

Thisnis one thing I wish I could get resolved

BSOD is based on windows event logs

BSOD WER is based on Windows Error Reporting (WER)

If they don’t actually indicate a bluescreen, we’d definitely be interested in looking into this

Then I’ll log a call as we are sseing aaaaa looootttt !

I’m glad to provide you whatever you need. Here’s the BSOD Analysis as provided by the script that Eugene pointed out:

That’s the event that appears in the "top devices with blue screen events" for today, which the user said did not prompt her with any error, reboot, BSOD. She didnt even know anything happened (from her perspective).

maybe the machine automatically restarted when they weren’t at their device? Because that machine definitely blue screened

You can check the power events tab which will show if the machine rebooted during that time.

Doesnt look like it rebooted. Here’s the Power Events. That’s it for the power events. nothing after the BSOD. According to the user, she logged in at that time and started working.

Continue reading and comment on the thread ‘BSOD Events in ControlUp and How to Investigate Them’.  Not a member? Join Here!