积极答复者
windows server2008R2SP1系统日志警告:WHEA-Logger

问题
-
请问,以下警告属于什么性质?要怎么处理?谢谢。
级别 日期和时间 来源 事件 ID 任务类别
警告 2012-07-25 11:38:21 Microsoft-Windows-WHEA-Logger 47 无 "出现已更正的硬件错误。组件: 内存
错误源: 已更正的计算机检查该项的详细信息视图包含进一步的信息。"
日志名称: System
来源: Microsoft-Windows-WHEA-Logger
日期: 2012-07-25 15:01:25
事件 ID: 47
任务类别: 无
级别: 警告
关键字:
用户: LOCAL SERVICE
计算机: HISServerA
描述:
出现已更正的硬件错误。组件: 内存
错误源: 已更正的计算机检查该项的详细信息视图包含进一步的信息。
事件 Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WHEA-Logger" Guid="{C26C4F3C-3F66-4E99-8F8A-39405CFED220}" />
<EventID>47</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-07-25T07:01:25.913406600Z" />
<EventRecordID>26509</EventRecordID>
<Correlation ActivityID="{9A376D23-60EF-4411-BFC5-3AB9F391BC74}" />
<Execution ProcessID="1260" ThreadID="8176" />
<Channel>System</Channel>
<Computer>HISServerA</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="ErrorSource">1</Data>
<Data Name="FRUId">{00000000-0000-0000-0000-000000000000}</Data>
<Data Name="FRUText">
</Data>
<Data Name="ValidBits">0x0</Data>
<Data Name="ErrorStatus">0x0</Data>
<Data Name="PhysicalAddress">0x0</Data>
<Data Name="PhysicalAddressMask">0x0</Data>
<Data Name="Node">0x0</Data>
<Data Name="Card">0x0</Data>
<Data Name="Module">0x0</Data>
<Data Name="Bank">0x0</Data>
<Data Name="Device">0x0</Data>
<Data Name="Row">0x0</Data>
<Data Name="Column">0x0</Data>
<Data Name="BitPosition">0x0</Data>
<Data Name="RequesterId">0x0</Data>
<Data Name="ResponderId">0x0</Data>
<Data Name="TargetId">0x0</Data>
<Data Name="ErrorType">0</Data>
<Data Name="Length">873</Data>
<Data Name="RawData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ata>
</EventData>
</Event>
答案
-
WHEA是底层硬件设备向操作系统报告故障的一种机制。
要解决实际问题,必须由报告该故障的硬件或驱动程序的Vendor来解释它报告的数据(也就是你Event里的RawData)代表什么,然后相应处理。
换句话说,微软的这个WHEA Event Log只是个中继器,帮底层硬件或驱动传达错误信息给你看看,你光凭这个,不足以解决问题。
你那报错应该是Field replaceable unit报出来的
http://en.wikipedia.org/wiki/Field_replaceable_unit
找硬件厂商吧
- 已编辑 Finy 2012年7月25日 8:13
- 已标记为答案 Tom Zhang – MSFTModerator 2012年8月2日 1:48