Neils personal site

By default EdgeSight captures a mini dump file when either of the following occurs:

• An application crashes. This is also known as a Process Fault event or alert

• The EdgeSight Agent process rscorsvc.exe process crashes

These mini dump files are helpful, but sometimes insufficient to fully diagnose an application problem. Configuring EdgeSight to capture a full dump of the crashing process provides a great deal more information that can better lead to the root cause.

There are some hidden registry keys that allow you to capture a full process dump - for some reason Citrix do not make these details available on the Support Website!

Requirements

Administrative privileges on the agent device are required.

Procedure

WARNING! These settings should be enabled only for short periods of time in order to analyze and diagnose specific problems. They should not be left enabled for extended periods of time. Doing so may adversely affect the performance of the EdgeSight agent.

WARNING! Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

1. The following registry key on the EdgeSight Agent device will produce a full process dump when a process (or application) crashes. Note that this setting does NOT apply to the EdgeSight rscorsvc.exe process. For this specific process see the separate setting below in section 2.

32-bit Operating System setting:

[HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\System Monitoring\Agent\EdgeSight\4.00]
"MinidumpFlags"=dword:00000002

64-bit Operating System (x64) setting:


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\System Monitoring\Agent\EdgeSight\4.00]
"MinidumpFlags"=dword:00000002


After putting this setting in place, the Citrix System Monitoring Agent Service (EdgeSight Agent) should be restarted. Due to the significant size of these dump files they may not be passed up to the EdgeSight Server. If this does occur then they can be found on the agent device in the default folder \Documents and Settings\All Users\Application Data\Citrix\System Monitoring\Data\EdgeSight\FaultReports.

WARNING! Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

2. The following registry key on the EdgeSight Agent device will cause a full process dump when the EdgeSight rscorsvc.exe process crashes (faults). The resulting crash dump file is located in the \Documents and Settings\All Users\Application Data\Citrix\System Monitoring\Data folder by default. These dump files are not passed up to the EdgeSight server and will remain in this folder indefinitely.

32-bit Operating System setting:

[HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\System Monitoring\Agent\Core\4.00]
"ExceptionOptions"=dword:1013000a

64-bit Operating System (x64) setting:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\System Monitoring\Agent\Core\4.00]
"ExceptionOptions"=dword:1013000a


After putting this setting in place, the Citrix System Monitoring Agent Service (EdgeSight Agent) should be restarted