Hands-on lab
Find the error behind a crash
On a canned Windows 11 practice box, select the System log, filter it to Error, and open Microsoft-Windows-WER-SystemErrorReporting, Event ID 1001. Use the event's source, ID, time, and General message to distinguish it from unrelated records. The frozen records are representative samples and do not inspect or change the learner's machine.
Steps
- 1
Under Windows Logs, select System.
- 2
Filter the active System log to the Error level.
- 3
Open Microsoft-Windows-WER-SystemErrorReporting, Event ID 1001, and read its General message.
What you should see
System remains active with the Error filter applied, and Microsoft-Windows-WER-SystemErrorReporting, Event ID 1001, is open in the event details.