Windows Server 2008 Application management pack bug


In the Windows Server 2008 Application management pack (Microsoft.Windows.AppServer.2008) there’s a bug in the “There is a problem with the COM Service” monitor (Microsoft.Windows.Server.2008.AppServer.COM_1.COMGeneralFunctionality.System.CorrectthelowresourceconditionorreporttheerrortoMicrosoft):

 

image

The state condition is inverted and what0s healthy is reported as unhealthy and viceversa. More info at: http://technet.microsoft.com/en-us/library/cc774175(WS.10).aspx

Two solutions here:

  • disable the monitor
  • disable the monitor and rewrite a correct one (snippet follows)

<UnitMonitor ID="Microsoft.Windows.Server.2008.AppServer.Fixed.COM_1.COMGeneralFunctionality.System.CorrectthelowresourceconditionorreporttheerrortoMicrosoft" Accessibility="Public" Enabled="onEssentialMonitoring" Target="Win2008App!Microsoft.Windows.Server.2008.AppServer.COM_1" ParentMonitorID="SystemHealth!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">
        <Category>StateCollection</Category>
        <AlertSettings AlertMessage="Microsoft.Windows.Server.2008.AppServer.FIxed.COM_1.COMGeneralFunctionality.System.CorrectthelowresourceconditionorreporttheerrortoMicrosoft.AlertMessage">
          <AlertOnState>Error</AlertOnState>
          <AutoResolve>true</AutoResolve>
          <AlertPriority>Normal</AlertPriority>
          <AlertSeverity>MatchMonitorHealth</AlertSeverity>
          <AlertParameters>
            <AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>
          </AlertParameters>
        </AlertSettings>
        <OperationalStates>
          <OperationalState ID="Success" MonitorTypeStateID="FirstEventRaised" HealthState="Error" />
          <OperationalState ID="Negative" MonitorTypeStateID="SecondEventRaised" HealthState="Success" />
        </OperationalStates>
        <Configuration>
          <FirstComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>
          <FirstLogName>System</FirstLogName>
          <FirstExpression>
            <And>
              <Expression>
                <SimpleExpression>
                  <ValueExpression>
                    <XPathQuery Type="String">PublisherName</XPathQuery>
                  </ValueExpression>
                  <Operator>Equal</Operator>
                  <ValueExpression>
                    <Value Type="String">Microsoft-Windows-DistributedCOM</Value>
                  </ValueExpression>
                </SimpleExpression>
              </Expression>
              <Expression>
                <RegExExpression>
                  <ValueExpression>
                    <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
                  </ValueExpression>
                  <Operator>MatchesRegularExpression</Operator>
                  <Pattern>^(10000|10001|10005|10010)$</Pattern>
                </RegExExpression>
              </Expression>
            </And>
          </FirstExpression>
          <SecondComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>
          <SecondLogName>System</SecondLogName>
          <SecondExpression>
            <And>
              <Expression>
                <SimpleExpression>
                  <ValueExpression>
                    <XPathQuery Type="String">PublisherName</XPathQuery>
                  </ValueExpression>
                  <Operator>Equal</Operator>
                  <ValueExpression>
                    <Value Type="String">Microsoft-Windows-DistributedCOM</Value>
                  </ValueExpression>
                </SimpleExpression>
              </Expression>
              <Expression>
                <RegExExpression>
                  <ValueExpression>
                    <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
                  </ValueExpression>
                  <Operator>MatchesRegularExpression</Operator>
                  <Pattern>10029</Pattern>
                </RegExExpression>
              </Expression>
            </And>
          </SecondExpression>
        </Configuration>
      </UnitMonitor>

Advertisements
  1. Leave a comment

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: