Home
  •  

AK557570

Alert_AK557570 (Rule)

Not enough free space for ULS log

Knowledge Base article:

External

http://go.microsoft.com/fwlink/?LinkId=232809

Element properties:

TargetMicrosoft.KnowledgeServices.SharePoint.Foundation.2010.SPServiceInstance.Trace
CategoryAlert
EnabledTrue
Event_ID6457
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Not enough free space for ULS log
<Details>
<Content>SharePoint Foundation 2010 could not write to the trace log. This event occurs when not enough free space is available for logging.

The Microsoft SharePoint Foundation Tracing (SPTracev4) service is used by Microsoft SharePoint Foundation 2010 to manage trace message output. When trace logging is turned on, administrators can specify the path that is to be used to store the trace logs. This log file is used by many applications that are built on top of SharePoint Foundation. The trace log contains information that is useful for diagnosing server problems.

For information about how to address this issue, see the TechNet article.
</Content>
<CollectedInformation>
<Info>
<Name>Server name</Name>
<Value>{0}</Value>
</Info>
<Info>
<Name>ULS Log Location</Name>
<Value>{1}</Value>
</Info>
</CollectedInformation>
</Details>
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
event DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Alert_AK557570" Enabled="true" Target="MicrosoftKnowledgeServicesSharePointFoundation2010Library!Microsoft.KnowledgeServices.SharePoint.Foundation.2010.SPServiceInstance.Trace" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Alert</Category>

  <DataSources>

    <DataSource ID="event" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <Value Type="Integer">$Target/Property[Type="MicrosoftKnowledgeServicesSharePointFoundation2010Library!Microsoft.KnowledgeServices.SharePoint.Foundation.2010.SPServiceInstance.Trace"]/SPMajorVersion$</Value>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="Integer">14</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">6457</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertMessageId>$MPElement[Name="AlertMessage07d9b8a5ea014c73abb6cabd226a6a59"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Target/Property[Type="MicrosoftKnowledgeServicesSharePointFoundation2010Library!Microsoft.KnowledgeServices.SharePoint.Foundation.2010.SPServiceInstance.Trace"]/HostServer$</AlertParameter1>

        <AlertParameter2>$Target/Property[Type="MicrosoftKnowledgeServicesSharePointFoundation2010Library!Microsoft.KnowledgeServices.SharePoint.Foundation.2010.SPServiceInstance.Trace"]/LogLocation$</AlertParameter2>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

      <Custom1>SupportTopic=TBD</Custom1>

      <Custom2/>

      <Custom3/>

      <Custom4/>

      <Custom5/>

      <Custom6/>

      <Custom7/>

      <Custom8/>

      <Custom9/>

      <Custom10>1.0.0.0</Custom10>

    </WriteAction>

  </WriteActions>

</Rule>