Home
  •  

Application pool configuration related failure: A process serving an application pool failed to respond to a ping.

Application_pool_configuration_related_failure__A_process_serving_an_application_pool_failed_to_respond_to_a_ping__3_Rule (Rule)

Knowledge Base article:

Summary

A worker process failed to respond to a ping.

Sample Event:

A process serving application pool %1 terminated unexpectedly. The process id was %2. The process exit code was 0x%3

Causes

All worker process threads were busy or blocked.

Resolutions

Consider increasing the application pool’s PingResponseTime property if the application pool is too busy.

Or, use Orphaning to determine what the threads are doing. Orphaning allows you to configure a command-line executable to run when a process fails to respond to a ping. One such example would be to use a debugger to produce a dumpfile for later analysis.

Element properties:

TargetMicrosoft.Windows.InternetInformationServices.2003.ApplicationPool
CategoryEventCollection
EnabledTrue
Alert GenerateFalse
RemotableTrue
Event LogSystem
CommentMom2005ID='{6681D1E9-9B0D-4DC7-AFB7-982BAF6D5902}'

Member Modules:

ID Module Type TypeId RunAs 
DataSource DataSource Microsoft.Windows.EventProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="Application_pool_configuration_related_failure__A_process_serving_an_application_pool_failed_to_respond_to_a_ping__3_Rule" Comment="Mom2005ID='{6681D1E9-9B0D-4DC7-AFB7-982BAF6D5902}'" Enabled="onStandardMonitoring" Target="Microsoft.Windows.InternetInformationServices.2003.ApplicationPool" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DataSource" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>1010</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>W3SVC</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>Params/Param[1]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>$Target/Property[Type="IISCommon!Microsoft.Windows.InternetInformationServices.ApplicationPool"]/PoolID$</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>