ntevl 4.32 probe fails after adding Exclude

Document ID : KB000125531
Last Modified Date : 30/01/2019
Show Technical Document Details
Issue:
When adding an exclude profile for the NTEVL probe it fails to start.

The following methods all appear to fail with the same result:

1. Adding an Exclude from the probe GUI Status Tab (IM)
2. Manually creating an Exclude from the "Exclude" tab in Probe (IM)
3. Manually created Exclude in Admin Console GUI.

All cause probe to fail. 

The following error will be seen repeatedly in the probe log, as well as Windows Event Viewer, prior to the probe stopping:

ntevl: (EventHandler) - Alarm Message is Application Error(1000 - Application Crashing Events): Faulting application name: ntevl.exe, version: 0.0.0.0, time stamp: 0x5bd2fdeeFaulting module name: ntdll.dll, version: 6.3.9600.19153, time stamp: 0x5b93ffa7Exception code: 0xc0000005Fault offset: 0x000000000003571cFaulting process id: 0xc54Faulting application start time: 0x01d4b7487475a129Faulting application path: C:\Program Files (x86)\Nimsoft\probes\system\ntevl\ntevl.exeFaulting module path: C:\Windows\SYSTEM32\ntdll.dllReport Id: b2fb231c-233b-11e9-80e7-0200f07dfd93Faulting package full name: Faulting package-relative application ID: 

 
Resolution:
A hotfix for the ntevl probe, ntevl-4.32-HF1 is available from the UIM Hotfix Index page.  This will be released in a future GA version of the probe (likely 4.33 but this is yet to be determined.)