1032｜The server detected a problem but was unable to capture a live kernel dump to collect debug

這個指令做什麼？

事件調查：The server detected a problem but was unable to capture a live kernel dump to collect debug 。固定提供者 Microsoft-Windows-SMBServer；事件 ID 1032。讀取事件證據，不代表偵測到入侵；需結合上下文判讀。 The server detected a problem but was unable to capture a live kernel dump to collect debug information. Reason: %1 Guidance: The server supports the Live Dump feature, where the detection of a problem results in a kernel memory dump, but no bugcheck and reboot. This allows Microsoft Support to examine memory dumps without requiring a reboot or manual intervention. The reason code indicates the type of problem that was detected. In this case, the server's request to create a live kernel dump was rejected. This is usually due to the live kernel dump throttle, which prevents frequent dumps from consuming too much disk space. Either wait for the throttle limit to expire (by default, 7 days), or contact Microsoft Support for steps to override the throttle. This event is written to the log no more than once per day. The problem that caused the server to the request a live kernel dump may be occuring more frequently. Stalled I/O An I/O is taking an unreasonably long time to complete. Malfunctioning third-party file system minifilter drivers are a common source of this problem. Other causes include failed disks or a client-driven I/O workload that greatly exceeds the server's capacity.