The .NET Machine Agent listens on these Windows event logs for crash events:

• Application Log
• System Log

The agent listens for events logged at event-level Warning and higher on these sources:

• Application Error
• .NET Runtime
• WAS (Windows Process Activation Service)

The agent listens for events logged at event-level Information and higher on this source:

• Windows Error Reporting

The agent reports CLR crashes as events to the Controller:

• All w3wp process crashes
• Instrumented Windows service crashes
• Instrumented standalone application crashes

The Controller treats all events as Warning severity, which is not directly related to the Windows event level.