Detect "Access violation at address ..." in Windows system.

[Jclaude95]

Hello,

I'm running a specific software who hang up sometimes with a popup "Access violation at address ...". The only way is to reload the software. We try lots of things to prevent such error without success. We now just want to detect it and restart the software when the error occurs.
Is there any way for Zabbix to detect this error ? or to detect the popup ? or maybe something else, I also imagined taking a screenshot and trying to detect the presence of the popup

Any advice will be welcome

Thanks

[PeterZielony]

Hello,

First of all, thank you for all your answer.
Indeed I've this kind of error in Event Viewer -> Event Logs -> Application:

Fault bucket 1517303679831881489, type 5
Event Name: AppHangB1
Response: Not available
Cab Id: 0

Problem signature:
P1: PowerMask.exe
P2: 4.60.5
P3: 64b51406
P4: 9fe5
P5: 67246080
P6:
[..]

So I guess I've to check for this kind of windows event ?

Regards,
JC

Get event id and see if it's unique.

then you have 2 options
monitor by key event log: zabbbx,https://www.zabbix.com/documentation..._keys#eventlog

Or if event id is not unique, then you will have to setup windows event trigger (using task scheduler) with xml filtering and you can pull even app name that caused crash (this is more accurate than zabbix eventlog item).
And setup trapper. You will need to know about zabbix_sender method

https://www.zabbix.com/documentation.../zabbix_sender


Once you have data you cant setup trigger to alarm you (read about triggers and media and how to use them)


After, you can take it even futher - create script that will be triggered by this error. Script can be executed on host that will restart service/application. This requires scripting knowledge.

Ans inly you will got is notification that something happend but its fixed already

[vijayk]

Not sure zabbix will help to find the software issue. Is program is custom developed or purchased from specific vendor?

[PeterZielony]

Hello,

I'm running a specific software who hang up sometimes with a popup "Access violation at address ...". The only way is to reload the software. We try lots of things to prevent such error without success. We now just want to detect it and restart the software when the error occurs.
Is there any way for Zabbix to detect this error ? or to detect the popup ? or maybe something else, I also imagined taking a screenshot and trying to detect the presence of the popup

Any advice will be welcome

Thanks

Is this error visible in Windows event log?

is there any other way to detect it? like some logs?

you can plug Zabbix into various things other than just "Window show up"

When it happens - whats the issue? it lost connection to something or ... just app crash? App crash most likely will be logged into event log

[vijayk]

Yes you may check the logs in Event logs in Windows. It will help you.

[Jclaude95]

Hello,

First of all, thank you for all your answer.
Indeed I've this kind of error in Event Viewer -> Event Logs -> Application:

Fault bucket 1517303679831881489, type 5
Event Name: AppHangB1
Response: Not available
Cab Id: 0

Problem signature:
P1: PowerMask.exe
P2: 4.60.5
P3: 64b51406
P4: 9fe5
P5: 67246080
P6:
[..]

So I guess I've to check for this kind of windows event ?

Regards,
JC

[PeterZielony]

Hello,

First of all, thank you for all your answer.
Indeed I've this kind of error in Event Viewer -> Event Logs -> Application:

Fault bucket 1517303679831881489, type 5
Event Name: AppHangB1
Response: Not available
Cab Id: 0

Problem signature:
P1: PowerMask.exe
P2: 4.60.5
P3: 64b51406
P4: 9fe5
P5: 67246080
P6:
[..]

So I guess I've to check for this kind of windows event ?

Regards,
JC

Get event id and see if it's unique.

then you have 2 options
monitor by key event log: zabbbx,https://www.zabbix.com/documentation..._keys#eventlog

Or if event id is not unique, then you will have to setup windows event trigger (using task scheduler) with xml filtering and you can pull even app name that caused crash (this is more accurate than zabbix eventlog item).
And setup trapper. You will need to know about zabbix_sender method

https://www.zabbix.com/documentation.../zabbix_sender


Once you have data you cant setup trigger to alarm you (read about triggers and media and how to use them)


After, you can take it even futher - create script that will be triggered by this error. Script can be executed on host that will restart service/application. This requires scripting knowledge.

Ans inly you will got is notification that something happend but its fixed already