Blue Screen Errors
This article covers how to use Edge DX to monitor blue screen (BSOD) errors in your environment.
How Edge DX detects blue screens
When the Agent starts on a device after a reboot, it looks back in the Windows event log for blue screen errors. You can view the raw data collected by the Agent by going to Configuration > Data and selecting the power_events data index.
All events with local_event_id 41 and bugcheck_code >=1 are are classified as a BSOD event_type.
To see more information about the error that caused the blue screen, convert the bugcheck_code to hexadecimal and refer to the Microsoft bug check code reference. The Microsoft documentation has information about the error and the interpretation of the bug check parameters. You can see the bug check parameters in the Edge DX data index in the columns bugcheck_parameter1, bugcheck_parameter2, etc.
See devices with the most most blue screens
Use the Top Devices with Blue Screen Events report to see the devices that have the most blue screen errors. Hover over a device in the chart to see which bug check codes caused the blue screen errors on that device.
See the most common causes of blue screens
Use the Top Blue Screen Events by Cause report to see the most common bug check codes causing blue screen errors. Hover over a bug check code in the chart to see which devices had a blue screen error with that code.
Click on a bug check code in the chart to go directly to the Microsoft documentation to get more information about what causes the issue and how to resolve it.
Receive an alert when a device displays a blue screen error
You can set up an Edge DX alert to triggers when a device has a blue screen error. You can configure the alert to send a notification or run a script (for example, to get a log file and upload it to a file server) when the alert triggers.
To set up an alert for blue screen errors, go to Configuration > Alerts and use the following alert conditions:
For more details on how to set up alerts, see Create Alerts.