Home
  •  

An error occurred in the resource status monitor.

An_error_occurred_in_the_resource_status_monitor (Rule)

Knowledge Base article:

Summary

This event indicates that Exchange was unable to determine the status of the Microsoft Search instance because of an RPC failure. Investigate other related events to determine the cause of the problem.

Sample Event:

Event Type: Error

Event Source: Microsoft Search

Event Category: Gatherer

Event ID: 10009

Description: An error occurred in the resource status monitor for instance <Exchange MS Search Instance - (SERVER)>: 800706be - The remote procedure call failed.

Related Events:

Event Type: Error

Event Source: Microsoft Search

Event Category: (3)

Event ID: 10009

Description: An error occurred in the resource status monitor for instance <Exchange MSSearch Instance - (SERVER)>: 800706ba - The RPC server is unavailable.

Causes

The most common cause of this failure is a resource problem on the server, or network interface card problems. Other related events can indicate the actual cause of the problem.

Resolutions

External

For more information about Microsoft Search event 10009, see:

Element properties:

TargetMicrosoft.Exchange.ServerRole.2003
CategoryEventCollection
EnabledTrue
Event_ID10009
Event SourceMicrosoft Search
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
An error occurred in the resource status monitor.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
EventDS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="An_error_occurred_in_the_resource_status_monitor" Enabled="onEssentialMonitoring" Target="Exch2003Core!Microsoft.Exchange.ServerRole.2003" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>.</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>Channel</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Application</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Microsoft Search</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>10009</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertOwner>$Data/PublisherName$</AlertOwner>

      <AlertMessageId>$MPElement[Name="An_error_occurred_in_the_resource_status_monitor.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>