Home
  •  

CCRReplicationServiceClusterMonitorNotifyFailE

CCRReplicationServiceClusterMonitorNotifyFailE_2_Rule (Rule)

Knowledge Base article:

Résumé

La surveillance de l’état des clusters du service de réplication CCR de Microsoft Forefront Server Security ne parvient pas à extraire les notifications de changement de cluster.

Causes

1. Un handle de cluster n’est pas valide.

2. Il est impossible de créer un port de notification de cluster.

3. Le service de cluster ou l’autre nœud de cluster n’est peut-être pas disponible.

Résolution

1. Consultez le journal des événements pour obtenir des informations détaillées sur cette erreur. Redémarrez le service si l’erreur se reproduit.

2. Vérifiez que le service de cluster fonctionne sur tous les nœuds de cluster.

Element properties:

TargetFSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation
CategoryEventCollection
EnabledTrue
Event_ID9602
Event SourceFSECCRService
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
CCRReplicationServiceClusterMonitorNotifyFailE
Event LogApplication
CommentMom2005ID='{0FD17489-0E41-4C86-B756-58373B0ADFBE}';MOM2005ComputerGroupID={868E5B4E-34B8-4B10-9055-C4074AF41790}

Member Modules:

ID Module Type TypeId RunAs 
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="CCRReplicationServiceClusterMonitorNotifyFailE_2_Rule" Comment="Mom2005ID='{0FD17489-0E41-4C86-B756-58373B0ADFBE}';MOM2005ComputerGroupID={868E5B4E-34B8-4B10-9055-C4074AF41790}" Enabled="true" Target="FSMPack2007_FSE.Forefront_Security_for_Exchange_Server___All_Servers_Installation" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>9602</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>FSECCRService</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="HealthLibrary!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertName/>

      <AlertDescription/>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="CCRReplicationServiceClusterMonitorNotifyFailE_2_Rule.AlertMessage"]$</AlertMessageId>

      <AlertParameters/>

      <Suppression/>

      <Custom1>Microsoft Forefront Server Security</Custom1>

      <Custom2>Forefront Security for Exchange Server</Custom2>

      <Custom3/>

      <Custom4/>

      <Custom5/>

      <Custom6/>

      <Custom7/>

      <Custom8/>

      <Custom9/>

      <Custom10/>

    </WriteAction>

  </WriteActions>

</Rule>