After you reproduce your issue, click the capture icon again to stop recording logs.Ĭlick the save icon to save your new log files. Figure 2-2Ĭlick the capture icon to start capturing new log files and then reproduce your issue. Figure 2-1Ĭlick the bin icon to clear the current log files list. Click the capture icon to stop recording logs. Process Monitor begins recording logs as soon as you open it. See the appropriate instructions below to gather the specific logs requested by Technical Support: Figure 1-1Ĭlick the image to view larger in new window In the main window, click Filter → Enable Advanced Output. Click Agree if you agree to the conditions in the End-User License Agreement. Solution Download and install Process Monitorĭownload Process Monitor from Microsoft Technet and save it to your Desktop.Įxtract ProcessMonitor.zip, double-click Procmon.exe and then click Yes at the prompt. Process Monitor log files are typically required to diagnose issues that recede when ESET real-time protection is disabled.

If you would like to save the logs, you can by going to File -> Save.When are Process Monitor log files needed?.

Once you find the errors, determine if they are relevant to your issue.

Please take notes of any warnings or errors.

The first thing you should do when examining the logs is to see if anything in the “Result” column is not “SUCCESS”.

Once the error occurs, go back to ProcMon and click the Capture Icon to stop capturing events.

Go to your web application and trigger the error.

There should NOT be a red “X” through it.

Please make sure that the Capture icon (shaped like a magnifying class) is enabled.

Click “Apply” and then “OK” to exit the Dialog.

Create a rule that says “Process Name is w3wp.exe”.Add the w3wp.exe process to the filter by going to Filter -> Filter….Reset the filter by clicking Filter -> Reset Filter.You need to be easily able to trigger the event that causes the error while ProcMon is running to avoid collecting too much information. Go to the page in your web application before your error occurs.

Process monitor windows server 2016