.NET runtime exception events

Article
2021-09-15

These runtime events capture information about exceptions that are thrown. For more information about how to use these events for diagnostic purposes, see logging and tracing .NET applications.

ExceptionThrown_V1 event

Keyword for raising the event	Level
`ExceptionKeyword` (0x8000)	Error (1)

The following table shows event information.

Event	Event ID	Raised when
`ExceptionThrown_V1`	80	A managed exception is thrown.

Field name	Data type	Description
`ExceptionType`	`win:UnicodeString`	Type of the exception; for example, `System.NullReferenceException`.
`ExceptionMessage`	`win:UnicodeString`	Actual exception message.
`EIPCodeThrow`	`win:Pointer`	Instruction pointer where exception occurred.
`ExceptionHR`	`win:UInt32`	Exception HRESULT.
`ExceptionFlags`	`win:UInt16`	`0x01`: HasInnerException. `0x02`: IsNestedException. `0x04`: IsRethrownException. `0x08`: IsCorruptedStateException (indicates that the process state is corrupt; see Handling Corrupted State Exceptions). `0x10`: IsCLSCompliant (an exception that derives from Exception is CLS-compliant; otherwise, it is not CLS-compliant).
`ClrInstanceID`	`win:UInt16`	Unique ID for the instance of CLR or CoreCLR.

ExceptionCatchStart event

This event is emitted when a managed exception catch handler begins.

Keyword for raising the event	Level
`ExceptionKeyword` (0x8000)	Informational (4)

The following table shows event information.

Event	Event ID	Raised when
`ExceptionCatchStart`	250	A managed exception is handled by the runtime.

Field name	Data type	Description
`EIPCodeThrow`	`win:Pointer`	Instruction pointer where exception occurred.
`MethodID`	`win:Pointer`	Pointer to the method descriptor on the method where exception occurred.
`MethodName`	`win:UnicodeString`	Name of the method where exception occurred.
`ClrInstanceID`	`win:UInt16`	Unique ID for the instance of CLR or CoreCLR.

ExceptionCatchStop event

This event is emitted when a managed exception catch handler ends.

Keyword for raising the event	Level
`ExceptionKeyword` (0x8000)	Informational (4)

The following table shows event information.

Event	Event ID	Raised when
`ExceptionCatchStop`	251	A managed exception catch handler is done.

ExceptionFinallyStart event

This event is emitted when a managed exception finally handler begins.

Keyword for raising the event	Level
`ExceptionKeyword` (0x8000)	Informational (4)

The following table shows event information.

Event	Event ID	Raised when
`ExceptionFinallyStart`	252	A managed exception is handled by the runtime.

Field name	Data type	Description
`EIPCodeThrow`	`win:Pointer`	Instruction pointer where exception occurred.
`MethodID`	`win:Pointer`	Pointer to the method descriptor on the method where exception occurred.
`MethodName`	`win:UnicodeString`	Name of the method where exception occurred.
`ClrInstanceID`	`win:UInt16`	Unique ID for the instance of CLR or CoreCLR.

ExceptionFinallyStop event

This event is emitted when a managed exception catch handler ends.

Keyword for raising the event	Level
`ExceptionKeyword` (0x8000)	Informational (4)

The following table shows event information.

Event	Event ID	Raised when
`ExceptionFinallyStop`	253	A managed exception finally handler is done.

ExceptionFilterStart event

This event is emitted when a managed exception filtering begins.

Keyword for raising the event	Level
`ExceptionKeyword` (0x8000)	Informational (4)

The following table shows event information.

Event	Event ID	Raised when
`ExceptionFilterStart`	254	A managed exception filtering begins.

Field name	Data type	Description
`EIPCodeThrow`	`win:Pointer`	Instruction pointer where exception occurred.
`MethodID`	`win:Pointer`	Pointer to the method descriptor on the method where exception occurred.
`MethodName`	`win:UnicodeString`	Name of the method where exception occurred.
`ClrInstanceID`	`win:UInt16`	Unique ID for the instance of CoreCLR.

ExceptionFilterStop event

This event is emitted when a managed exception filtering ends.

Keyword for raising the event	Level
`ExceptionKeyword` (0x8000)	Informational (4)

The following table shows event information.

Event	Event ID	Raised when
`ExceptionFilteringStart`	255	A managed exception filtering ends.

ExceptionThrownStop event

This event is emitted when the runtime is done handling a managed exception that was thrown.

Keyword for raising the event	Level
`ExceptionKeyword` (0x8000)	Informational (4)

The following table shows event information.

Event	Event ID	Raised when
`ExceptionThrownStop`	256	A managed exception filtering ends.