An error occurred while writing the queue file.

An_error_occurred_while_writing_the_queue_file._2_Rule (Rule)

Knowledge Base article:

Management Pack

Causes
The notification queue was corrupted in some way, resulting in the potential loss of notifications that were pending in the queue.

Resolutions
You should review the server access logs and installation logs to determine if the service was tampered with in some way

Sample Event
An error occurred while writing the queue file. %1%2

Element properties:

Target

Microsoft.Windows.PasswordChangeNotificationService.2003.Windows_2000_Domain_Controllers_Installation

Category

EventCollection

Enabled

True

Event_ID

6018

Event Source

PCNSSVC

Alert Generate

True

Alert Severity

Error

Alert Priority

Low

Remotable

True

Alert Message

An error occurred while writing the queue file.

$Data/EventDescription$

Event Log

Application

Comment

Mom2005ID='{72506D75-F468-4DB9-80C9-7A2910DAEEA8}';MOM2005ComputerGroupID={F7F2D982-5AF9-11D3-BEEE-00A0C938A970}

Member Modules:

ID	Module Type	TypeId	RunAs
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_	DataSource	Microsoft.Windows.EventProvider	Default
CollectEventData	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
CollectEventDataWarehouse	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default
GenerateAlert	WriteAction	System.Mom.BackwardCompatibility.AlertResponse	Default

Source Code:

<Rule ID="An_error_occurred_while_writing_the_queue_file._2_Rule" Target="Microsoft.Windows.PasswordChangeNotificationService.2003.Windows_2000_Domain_Controllers_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{72506D75-F468-4DB9-80C9-7A2910DAEEA8}';MOM2005ComputerGroupID={F7F2D982-5AF9-11D3-BEEE-00A0C938A970}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" Comment="{F6DA1507-12AF-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">Channel</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Application</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>PCNSSVC</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>6018</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/EventDescription$

          </Description>

        <AlertLevel>50</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>An error occurred while writing the queue file.</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>