Does !errorlog command exists?

WINDBG
1

Hi all,

I’ve been reading the WDM Book (second edition) these days. The chapter
14 cites the command !errorlog that should show the eventlog’s queue
still in memory.

I checked the reference and I couldn’t find such command.

Does it really exists?

I’ve found !evlog from UEXT.DLL, but I’m not sure about it.

Has anyone more details? Any help is welcome.

TIA

–

Fernando Roberto da Silva

DriverEntry Kernel Development

http://www.driverentry.com.br

2

Sure does. Just give it a try. An undocumented but actually used WinDbg command/metacommand/extension command is not by a long shot a rarity, nor for that matter is a command that behaves differently that the documentation suggests.

All part of the fun.

Good luck,

mm

Hi all,

I’ve been reading the WDM Book (second edition) these days. The chapter 14 cites the command !errorlog that should show the eventlog’s queue still in memory.

I checked the reference and I couldn’t find such command.

Does it really exists?

I’ve found !evlog from UEXT.DLL, but I’m not sure about it.

Has anyone more details? Any help is welcome.

TIA

–

Fernando Roberto da Silva

DriverEntry Kernel Development

http://www.driverentry.com.br http:</http:>

You are currently subscribed to windbg as: unknown lmsubst tag argument: ‘’

To unsubscribe send a blank email to xxxxx@lists.osr.com

3

My bad. !errlog exists, and shows the “error log,” whatever that is. !errorlog apparently does not.

Sorry about that,

mm

4

And !errlog is documented.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply

“Martin O’Brien” wrote in message
news:xxxxx@windbg…
My bad. !errlog exists, and shows the “error log,” whatever that is.
!errorlog apparently does not.

Sorry about that,

mm