來源: Kernel-EventTracing 事件識別碼 : 4

您好，

感謝您的詳細説明和分享，這個 Circular Kernel Context Logger 本身就是沒有限定檔案大小 

ReadBoot 預設限定大小應該是20 MB

并沒有連動。

原先兩項都是停止的但是不斷的錯誤誤訊息出現, 現在我將兩者都開啟,

並將設定大小在128MB 看看!  不行再改回來!

不斷出現錯誤, 已經改回來,網路上查詢修改方式都無效！1803 Bug ?

您好，

這個 來源: Kernel-EventTracing 事件識別碼 : 4 這邊檢查多部 1803 版的電腦都沒有發現，

應該不是BUG ，

猜測會不會是確實存在某些影響系統内核運行的問題。

您好，

這個 來源: Kernel-EventTracing 事件識別碼 : 4 這邊檢查多部 1803 版的電腦都沒有發現，

應該不是BUG ，

猜測會不會是確實存在某些影響系統内核運行的問題。

清事件檢視.bat : 

FOR /F "delims=" %%I IN ('WEVTUTIL EL') DO (WEVTUTIL CL "%%I")

--------------------------------------------------------------------------------------------------------

以前我清事件檢視器是更早前在網路上找到的,效果不知有甚麼不同?

XClear.bat :

wevtutil.exe cl "ESRV_SVC_QUEENCREEK"

wevtutil.exe cl "Microsoft-Windows-Kernel-EventTracing/Admin"

wevtutil.exe cl "Microsoft-Windows-AppModel-Runtime/Admin"

wevtutil.exe cl "Microsoft-Windows-User Device Registration/Admin"

wevtutil.exe cl "Microsoft-Windows-SMBWitnessClient/Admin"

wevtutil.exe cl "Microsoft-Windows-Client-Licensing/Admin"

wevtutil.exe cl "Microsoft-Windows-GenericRoaming/Admin" 

wevtutil.exe cl "Microsoft-Windows-AppModel-Runtime/Admin" 

wevtutil.exe cl "Microsoft-Windows-DeviceSetupManager/Admin" 

wevtutil.exe cl "Microsoft-Windows-DHCP-Client/Admin" 

wevtutil.exe cl "Microsoft-Windows-VerifyHardwareSecurity/Admin" 

wevtutil.exe cl "Microsoft-Windows-PrintService/Admin"  

wevtutil.exe cl "Microsoft-Windows-Kernel-EventTracing/Admin" 

wevtutil.exe cl "Microsoft-Windows-AppHost/Admin"  

wevtutil.exe cl "Microsoft-Windows-AppReadiness/Admin" 

wevtutil.exe cl "Microsoft-WS-Licensing/Admin"  

wevtutil.exe cl "Microsoft-Windows-API-Tracing/Operational" 

wevtutil.exe cl "Microsoft-Windows-AppID/Operational"  

wevtutil.exe cl "Microsoft-Windows-Application-Experience/Problem-Steps-Recorder" 

wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant" 

wevtutil.exe cl  "Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter" 

wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Inventory" 

wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Telemetry" 

wevtutil.exe cl "Microsoft-Windows-AppLocker/EXE and DLL" 

wevtutil.exe cl "Microsoft-Windows-AppLocker/MSI and Script" 

wevtutil.exe cl "Microsoft-Windows-Audio/CaptureMonitor" 

wevtutil.exe cl "Microsoft-Windows-Audio/Operational"  

wevtutil.exe cl "Microsoft-Windows-Authentication User Interface/Operational" 

wevtutil.exe cl "Microsoft-Windows-Backup"  

wevtutil.exe cl "Microsoft-Windows-BitLocker-DrivePreparationTool/Admin"  

wevtutil.exe cl "Microsoft-Windows-BitLocker-DrivePreparationTool/Operational" 

wevtutil.exe cl "Microsoft-Windows-Bits-Client/Operational"  

wevtutil.exe cl "Microsoft-Windows-Bluetooth-MTPEnum/Operational" 

wevtutil.exe cl "Microsoft-Windows-BranchCache/Operational" 

wevtutil.exe cl "Microsoft-Windows-BranchCacheSMB/Operational" 

wevtutil.exe cl "Microsoft-Windows-CodeIntegrity/Operational" 

wevtutil.exe cl "Microsoft-Windows-CorruptedFileRecovery-Client/Operational" 

wevtutil.exe cl "Microsoft-Windows-CorruptedFileRecovery-Server/Operational" 

wevtutil.exe cl "Microsoft-Windows-DateTimeControlPanel/Operational" 

wevtutil.exe cl "Microsoft-Windows-DeviceSync/Operational" 

wevtutil.exe cl "Microsoft-Windows-Dhcp-Client/Admin" 

wevtutil.exe cl "Microsoft-Windows-DhcpNap/Admin"  

wevtutil.exe cl "Microsoft-Windows-Dhcpv6-Client/Admin"  

wevtutil.exe cl "Microsoft-Windows-Diagnosis-DPS/Operational" 

wevtutil.exe cl "Microsoft-Windows-Diagnosis-PCW/Operational" 

wevtutil.exe cl "Microsoft-Windows-Diagnosis-PLA/Operational"  

wevtutil.exe cl "Microsoft-Windows-Diagnosis-Scheduled/Operational" 

wevtutil.exe cl "Microsoft-Windows-Diagnosis-Scripted/Admin"  

wevtutil.exe cl "Microsoft-Windows-Diagnosis-Scripted/Operational"  

wevtutil.exe cl "Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational" 

wevtutil.exe cl "Microsoft-Windows-Diagnostics-Networking/Operational" 

wevtutil.exe cl "Microsoft-Windows-Diagnostics-Performance/Operational" 

wevtutil.exe cl "Microsoft-Windows-DiskDiagnostic/Operational"  

wevtutil.exe cl "Microsoft-Windows-DiskDiagnosticDataCollector/Operational" 

wevtutil.exe cl "Microsoft-Windows-DiskDiagnosticResolver/Operational"  

wevtutil.exe cl "Microsoft-Windows-DriverFrameworks-UserMode/Operational" 

wevtutil.exe cl "Microsoft-Windows-EapHost/Operational"  

wevtutil.exe cl "Microsoft-Windows-EventCollector/Operational"  

wevtutil.exe cl "Microsoft-Windows-Fault-Tolerant-Heap/Operational" 

wevtutil.exe cl "Microsoft-Windows-FMS/Operational"  

wevtutil.exe cl "Microsoft-Windows-Folder Redirection/Operational" 

wevtutil.exe cl "Microsoft-Windows-Forwarding/Operational" 

wevtutil.exe cl "Microsoft-Windows-GroupPolicy/Operational" 

wevtutil.exe cl "Microsoft-Windows-Help/Operational"  

wevtutil.exe cl "Microsoft-Windows-HomeGroup Control Panel/Operational" 

wevtutil.exe cl "Microsoft-Windows-HomeGroup Listener Service/Operational" 

wevtutil.exe cl "Microsoft-Windows-HomeGroup Provider Service/Operational" 

wevtutil.exe cl "Microsoft-Windows-IKE/Operational"  

wevtutil.exe cl "Microsoft-Windows-International/Operational" 

wevtutil.exe cl "Microsoft-Windows-International-RegionalOptionsControlPanel/Operational" 

wevtutil.exe cl "Microsoft-Windows-Iphlpsvc/Operational"  

wevtutil.exe cl "Microsoft-Windows-Kernel-EventTracing/Admin"  

wevtutil.exe cl "Microsoft-Windows-Kernel-Power/Thermal-Operational" 

wevtutil.exe cl "Microsoft-Windows-Kernel-StoreMgr/Operational" 

wevtutil.exe cl "Microsoft-Windows-Kernel-WDI/Operational" 

wevtutil.exe cl "Microsoft-Windows-Kernel-WHEA/Errors"  

wevtutil.exe cl "Microsoft-Windows-Kernel-WHEA/Operational" 

wevtutil.exe cl "Microsoft-Windows-Known Folders API Service"  

wevtutil.exe cl "Microsoft-Windows-LanguagePackSetup/Operational"

wevtutil.exe cl "Microsoft-Windows-MCT/Operational"  

wevtutil.exe cl "Microsoft-Windows-MemoryDiagnostics-Results/Debug" 

wevtutil.exe cl "Microsoft-Windows-MUI/Admin"  

wevtutil.exe cl "Microsoft-Windows-MUI/Operational" 

wevtutil.exe cl "Microsoft-Windows-NCSI/Operational"  

wevtutil.exe cl "Microsoft-Windows-NetworkAccessProtection/Operational" 

wevtutil.exe cl "Microsoft-Windows-NetworkAccessProtection/WHC"  

wevtutil.exe cl "Microsoft-Windows-NetworkLocationWizard/Operational" 

wevtutil.exe cl "Microsoft-Windows-NetworkProfile/Operational" 

wevtutil.exe cl "Microsoft-Windows-NlaSvc/Operational" 

wevtutil.exe cl "Microsoft-Windows-NTLM/Operational"  

wevtutil.exe cl "Microsoft-Windows-OfflineFiles/Operational"  

wevtutil.exe cl "Microsoft-Windows-ParentalControls/Operational" 

wevtutil.exe cl "Microsoft-Windows-PeopleNearMe/Operational" 

wevtutil.exe cl "Microsoft-Windows-PowerShell/Operational" 

wevtutil.exe cl "Microsoft-Windows-PrintService/Admin"  

wevtutil.exe cl "Microsoft-Windows-ReadyBoost/Operational"  

wevtutil.exe cl "Microsoft-Windows-ReadyBoostDriver/Operational" 

wevtutil.exe cl "Microsoft-Windows-Recovery/Operational"  

wevtutil.exe cl "Microsoft-Windows-ReliabilityAnalysisComponent/Operational" 

wevtutil.exe cl "Microsoft-Windows-RemoteApp and Desktop Connections/Admin" 

wevtutil.exe cl "Microsoft-Windows-RemoteAssistance/Admin"  

wevtutil.exe cl "Microsoft-Windows-RemoteAssistance/Operational"  

wevtutil.exe cl "Microsoft-Windows-Resource-Exhaustion-Detector/Operational" 

wevtutil.exe cl "Microsoft-Windows-Resource-Exhaustion-Resolver/Operational" 

wevtutil.exe cl "Microsoft-Windows-Resource-Leak-Diagnostic/Operational" 

wevtutil.exe cl "Microsoft-Windows-RestartManager/Operational"  

wevtutil.exe cl "Microsoft-Windows-Security-Audit-Configuration-Client/Operational" 

wevtutil.exe cl "Microsoft-Windows-TerminalServices-LocalSessionManager/Admin"  

wevtutil.exe cl "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational" 

wevtutil.exe cl "Microsoft-Windows-TerminalServices-PnPDevices/Admin"  

wevtutil.exe cl "Microsoft-Windows-TerminalServices-PnPDevices/Operational" 

wevtutil.exe cl "Microsoft-Windows-TerminalServices-RDPClient/Operational"  

wevtutil.exe cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin" 

wevtutil.exe cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational" 

wevtutil.exe cl "Microsoft-Windows-TZUtil/Operational" 

wevtutil.exe cl "Microsoft-Windows-UAC/Operational"  

wevtutil.exe cl "Microsoft-Windows-UAC-FileVirtualization/Operational" 

wevtutil.exe cl "Microsoft-Windows-User Profile Service/Operational" 

wevtutil.exe cl "Microsoft-Windows-VDRVROOT/Operational" 

wevtutil.exe cl "Microsoft-Windows-VHDMP/Operational" 

wevtutil.exe cl "Microsoft-Windows-WER-Diag/Operational" 

wevtutil.exe cl "Microsoft-Windows-WFP/Operational" 

wevtutil.exe cl "Microsoft-Windows-Windows Defender/Operational" 

wevtutil.exe cl "Microsoft-Windows-Windows Defender/WHC" 

wevtutil.exe cl "Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity"  

wevtutil.exe cl "Microsoft-Windows-Windows Firewall With Advanced Security/Firewall" 

wevtutil.exe cl "Microsoft-Windows-WindowsBackup/ActionCenter"  

wevtutil.exe cl "Microsoft-Windows-WindowsSystemAssessmentTool/Operational" 

wevtutil.exe cl "Microsoft-Windows-WindowsUpdateClient/Operational" 

wevtutil.exe cl "Microsoft-Windows-Winlogon/Operational" 

wevtutil.exe cl "Microsoft-Windows-WinRM/Operational"  

wevtutil.exe cl "Microsoft-Windows-Winsock-WS2HELP/Operational" 

wevtutil.exe cl "Microsoft-Windows-Wired-AutoConfig/Operational" 

wevtutil.exe cl "Microsoft-Windows-WLAN-AutoConfig/Operational" 

wevtutil.exe cl "Microsoft-Windows-WPD-ClassInstaller/Operational"  

wevtutil.exe cl "Microsoft-Windows-WPD-CompositeClassDriver/Operational" 

wevtutil.exe cl "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin" 

wevtutil.exe cl "Microsoft-Windows-WPD-MTPClassDriver/Operational" 

wevtutil.exe cl "ODiag" 

wevtutil.exe cl "OSession" 

wevtutil.exe cl "Security" 

wevtutil.exe cl "Setup" 

wevtutil.exe cl "System"  

wevtutil.exe cl "Windows PowerShell" 

wevtutil.exe cl "ACEEventLog" 

wevtutil.exe cl "Application"  

wevtutil.exe cl "HardwareEvents" 

wevtutil.exe cl "Internet Explorer"  

wevtutil.exe cl "Key Management Service" 

wevtutil.exe cl "Media Center"

---------------------------------------------------------------------------------------

下面那一條因為1703 前不會產生Kernel-EventTracing 事件識別碼 : 3 & 4

所以是剛剛加進去, 才能清掉"Microsoft-Windows-Kernel-EventTracing/Admin"

wevtutil.exe cl "Microsoft-Windows-Kernel-EventTracing/Admin"

還是會出現那個錯誤，只是次數變少了，持續測試中。

還是清除事件處理器後重新開啟出現機率高! 是不是有關聯無法辦別!

您好，

比較可能的是設備驅動服務方面的因素，可能是與驅動更新或者BIOS 相關。

如果要查的話，就要看這些記錄的信息，

命令窗口 cd 到 C:\Windows\System32\ 資料夾，

用 tracerpt.exe -？ 查看命令參數。

用 tracerpt.exe C:\WINDOWS\system32\WDI\LogFiles\ShutdownCKCL.etl -o ShutdownCKCL.XML -of XML  將文件轉換出來 ，

之後從 C:\Windows\System32\ 找到 ShutdownCKCL.XML 查看信息。

或者使用三方軟體查看。

您好，

比較可能的是設備驅動服務方面的因素，可能是與驅動更新或者BIOS 相關。

如果要查的話，就要看這些記錄的信息，

命令窗口 cd 到 C:\Windows\System32\ 資料夾，

用 tracerpt.exe -？ 查看命令參數。

用 tracerpt.exe C:\WINDOWS\system32\WDI\LogFiles\ShutdownCKCL.etl -o ShutdownCKCL.XML -of XML  將文件轉換出來 ，

之後從 C:\Windows\System32\ 找到 ShutdownCKCL.XML 查看信息。

或者使用三方軟體查看。

也是因為有看到一篇討論 事件識別碼 10010 可能是AMD 顯卡設備驅動服務方面的因素

又因之前全新安裝Windows 10 1803 時, 因AMD R7 M265驅動程式在系統更新當機改裝

舊版驅動,所以一直懷疑他！所以到AMD網站下再自動更新軟體執行,沒想到更新後就不

能開機了！所以確認AMD R7 M265最新驅動與Windows 10 1803 不相容! 只能再拿備份

複製回來並將一些之前的疑問一一排除!竟然有三天沒有錯誤訊息產生!

安裝完時到鎖定畫面確認實際畫面(鎖定畫面)與實際開機時畫面不同!

這應該是Windows.SecurityCenter.WscBrokerManager错误 事件識別碼 10016 極可能原因!

漫遊集合 事件識別碼 3 確認是同步問題,調整後不再出現!!

Kernel-EventTracing 事件識別碼 : 3 & 4 測試中,(目前消失,原因不明）

BTHUSB 事件識別碼  34  突然消失原因不明(本來每次開機產生的!)

由於看到了三天無事件處理器錯誤訊息的情況, 心想就用這個當成版本複製備份

沒想到這次的複製並沒有那麼順利, 之前的複製是由 創見370 256GB複製到 美光

MX100 256G 需要做的是 MX-100 256G會變成A: B: 兩磁碟, 所以須將A:刪除後與

B: 合併並做4K對齊,上一次做過備份後3天沒錯誤訊息!

這次做 MX100 256GB 複製到SSD370 256G,複製完畢後出現一個問題,當選擇退

出隨身碟, 出現磁碟正在使用無法退出,只能用電腦正常關機後拔下SSD370 256GB

換成創見370 256GB為開機碟,能正常開機雖有些USB錯誤訊息也許是正常現象,所以

並沒有留下畫面,因MX-100 256G有裝驅動就移除了,4K對齊沒有跑掉不須執行對齊,

確認能正常執行軟體程式清掉事件處理器錯誤訊息,換回MX100開機,開機後發現原

安裝在D: Mail 軟件無法設為預設, 並顯示D:有錯誤, 經過 Chkdsk d:/f 後恢復正常,

但這次出現 來源: DistributedCOM 事件識別碼 10010, 執行(與下圖同並非此次擷圖)

FOR /F "delims=" %%I IN ('WEVTUTIL EL') DO (WEVTUTIL CL "%%I")

清掉錯誤訊息!! 重新開機, 立即出現 Kernel-EventTracing 事件識別碼 : 3 & 4

再執行 FOR /F "delims=" %%I IN ('WEVTUTIL EL') DO (WEVTUTIL CL "%%I")

清掉錯誤訊息!!

FOR /F "delims=" %%I IN ('WEVTUTIL EL') DO (WEVTUTIL CL "%%I") 與

Kernel-EventTracing 事件識別碼 : 3 & 4 真的不知為何會有這些關聯性!!

倒是 BTHUSB warning 事件識別碼 34  沒再出現 重新開機後

您好，

好的，感謝您的詳細説明和分享。