{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/", "slug": "dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an", "url": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/" }, "title": "Allow for the Snapshot Debugger collection plan before expecting a snapshot of an exception", "summary": "Why does the default snapshot threshold of one still require an exception to occur twice?", "format": { "slug": "explainer", "name": "Explainer" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "managed-it", "label": "Managed IT operations", "alt": "A controlled technology lifecycle progressing from assessment to approved production.", "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:29:52+00:00", "modified_at": "2026-09-10T00:52:38+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 242, "potentially_affected": "Application Insights Snapshot Debugger for supported .NET server applications; desktop clients such as WPF, Windows Forms and UWP are excluded.", "dse_recommendation": "Test the exception's collection-plan lifecycle with controlled repetitions instead of treating the first missing snapshot as a broken uploader.", "primary_source": { "name": "Snapshot Debugger for .NET Exception Debugging - Azure Monitor | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/snapshot-debugger/snapshot-debugger", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Snapshot Debugger counts exceptions by problem ID and adds the ID to a collection plan when the threshold is reached. With the default ThresholdForSnapshotting value of one, the same exception must occur twice before a snapshot is created. Collection also defaults to one snapshot per ten minutes, and the uploader is limited to fifty per day. WPF, Windows Forms and UWP clients are unsupported. Microsoft Learn.

\n

Applicability

\n

This concerns supported .NET server applications with Snapshot Debugger enabled. Microsoft warns that snapshots can contain sensitive variable and parameter values; use safe test data and appropriately controlled access. Microsoft Learn.

\n

DSE recommendation

\n

Test the exception’s collection-plan lifecycle with controlled repetitions instead of treating the first missing snapshot as a broken uploader. Record the configured threshold and rate limits before the test. Choose one identifiable, safe exception scenario and keep its repetitions distinct from unrelated exceptions. Do not raise production capture limits simply to make an initial test look successful.

\n

Verification

\n

Compare the exception observations, elapsed time and snapshot availability with the configured collection behavior. Confirm that the test did not exceed an applicable capture or upload limit before escalating a missing artifact. If capture still fails under the expected conditions, preserve the settings and sanitized event sequence for focused troubleshooting. Report the actual observations rather than claiming that every exception receives a snapshot or that one successful capture proves complete diagnostic coverage.

\n

Official references

\n

Microsoft Learn: Snapshot Debugger process. Source reviewed September 9, 2026.

", "content_text": "Source facts\nSnapshot Debugger counts exceptions by problem ID and adds the ID to a collection plan when the threshold is reached. With the default ThresholdForSnapshotting value of one, the same exception must occur twice before a snapshot is created. Collection also defaults to one snapshot per ten minutes, and the uploader is limited to fifty per day. WPF, Windows Forms and UWP clients are unsupported. Microsoft Learn.\nApplicability\nThis concerns supported .NET server applications with Snapshot Debugger enabled. Microsoft warns that snapshots can contain sensitive variable and parameter values; use safe test data and appropriately controlled access. Microsoft Learn.\nDSE recommendation\nTest the exception’s collection-plan lifecycle with controlled repetitions instead of treating the first missing snapshot as a broken uploader. Record the configured threshold and rate limits before the test. Choose one identifiable, safe exception scenario and keep its repetitions distinct from unrelated exceptions. Do not raise production capture limits simply to make an initial test look successful.\nVerification\nCompare the exception observations, elapsed time and snapshot availability with the configured collection behavior. Confirm that the test did not exceed an applicable capture or upload limit before escalating a missing artifact. If capture still fails under the expected conditions, preserve the settings and sanitized event sequence for focused troubleshooting. Report the actual observations rather than claiming that every exception receives a snapshot or that one successful capture proves complete diagnostic coverage.\nOfficial references\nMicrosoft Learn: Snapshot Debugger process. Source reviewed September 9, 2026.", "content_markdown": "## Source facts\n\nSnapshot Debugger counts exceptions by problem ID and adds the ID to a collection plan when the threshold is reached. With the default ThresholdForSnapshotting value of one, the same exception must occur twice before a snapshot is created. Collection also defaults to one snapshot per ten minutes, and the uploader is limited to fifty per day. WPF, Windows Forms and UWP clients are unsupported. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/snapshot-debugger/snapshot-debugger).\n\n## Applicability\n\nThis concerns supported .NET server applications with Snapshot Debugger enabled. Microsoft warns that snapshots can contain sensitive variable and parameter values; use safe test data and appropriately controlled access. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/snapshot-debugger/snapshot-debugger).\n\n## DSE recommendation\n\nTest the exception’s collection-plan lifecycle with controlled repetitions instead of treating the first missing snapshot as a broken uploader. Record the configured threshold and rate limits before the test. Choose one identifiable, safe exception scenario and keep its repetitions distinct from unrelated exceptions. Do not raise production capture limits simply to make an initial test look successful.\n\n## Verification\n\nCompare the exception observations, elapsed time and snapshot availability with the configured collection behavior. Confirm that the test did not exceed an applicable capture or upload limit before escalating a missing artifact. If capture still fails under the expected conditions, preserve the settings and sanitized event sequence for focused troubleshooting. Report the actual observations rather than claiming that every exception receives a snapshot or that one successful capture proves complete diagnostic coverage.\n\n## Official references\n\n[Microsoft Learn: Snapshot Debugger process](https://learn.microsoft.com/en-us/azure/azure-monitor/snapshot-debugger/snapshot-debugger). Source reviewed September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/", "url": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Allow for the Snapshot Debugger collection plan before expecting a snapshot of an exception", "item": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/", "url": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/", "headline": "Allow for the Snapshot Debugger collection plan before expecting a snapshot of an exception", "description": "Why does the default snapshot threshold of one still require an exception to occur twice?", "abstract": "Why does the default snapshot threshold of one still require an exception to occur twice?", "articleBody": "Source facts\nSnapshot Debugger counts exceptions by problem ID and adds the ID to a collection plan when the threshold is reached. With the default ThresholdForSnapshotting value of one, the same exception must occur twice before a snapshot is created. Collection also defaults to one snapshot per ten minutes, and the uploader is limited to fifty per day. WPF, Windows Forms and UWP clients are unsupported. Microsoft Learn.\nApplicability\nThis concerns supported .NET server applications with Snapshot Debugger enabled. Microsoft warns that snapshots can contain sensitive variable and parameter values; use safe test data and appropriately controlled access. Microsoft Learn.\nDSE recommendation\nTest the exception’s collection-plan lifecycle with controlled repetitions instead of treating the first missing snapshot as a broken uploader. Record the configured threshold and rate limits before the test. Choose one identifiable, safe exception scenario and keep its repetitions distinct from unrelated exceptions. Do not raise production capture limits simply to make an initial test look successful.\nVerification\nCompare the exception observations, elapsed time and snapshot availability with the configured collection behavior. Confirm that the test did not exceed an applicable capture or upload limit before escalating a missing artifact. If capture still fails under the expected conditions, preserve the settings and sanitized event sequence for focused troubleshooting. Report the actual observations rather than claiming that every exception receives a snapshot or that one successful capture proves complete diagnostic coverage.\nOfficial references\nMicrosoft Learn: Snapshot Debugger process. Source reviewed September 9, 2026.", "datePublished": "2026-09-10T00:29:52+00:00", "dateModified": "2026-09-10T00:52:38+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-124-allow-for-the-snapshot-debugger-collection-plan-before-expecting-a-snapshot-of-an/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Allow for the Snapshot Debugger collection plan before expecting a snapshot of an exception" }, "articleSection": [ "IT" ], "keywords": [ "IT", "Explainer", "Information priority" ], "genre": "Explainer", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 242, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Snapshot Debugger for .NET Exception Debugging - Azure Monitor | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/snapshot-debugger/snapshot-debugger" } } ] } }