Home
  •  

DELLEMC Enterprise SI Windows Service Event 1006

EMC.SI.Service.Event1006.Monitor (UnitMonitor)

Service permissions error

Knowledge Base article:

Summary

This rule checks the Application event log for event 1006 from the DELLEMC Enterprise Storage Integrator Windows service. This event is written when the service is unable to determine if a user can query the service.

Configuration

This monitor will reset to a health state after 15 minutes.

There is a corresponding rule that generates an alert for this same condition. The alert generated by the rule will remain active until closed.

Causes

The DELLEMC Enterprise Storage Integrator service is not running with the correct permissions or can not query the Windows security environment.

Resolutions

If the service is running under a domain account, verify that the account has the required permissions. It running under a predefined system account, it is recommended that you use the “Network Service”.

It is possible that your DELLEMC Enterprise SI Service installation has become corrupted and you may need to uninstall and reinstall it. verify that your Windows installation and security environment have not become corrupted.

Additional

For additional information, refer to the DELLEMC Enterprise Storage Integrator for Windows Technical Notes.

External

For more information or technical support, refer to DELLEMC Online Support at support.emc.com.

Element properties:

TargetEMC.SI.WindowsService
Parent MonitorSystem.Health.ConfigurationState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateFalse
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.SingleEventLogTimer2StateMonitorType
RemotableTrue
AccessibilityPublic
RunAsEMC.SI.ESIServiceMonitoringAccount

Source Code:

<UnitMonitor ID="EMC.SI.Service.Event1006.Monitor" Accessibility="Public" Enabled="true" Target="ESILib!EMC.SI.WindowsService" ParentMonitorID="Health!System.Health.ConfigurationState" Remotable="true" Priority="Normal" RunAs="ESILib!EMC.SI.ESIServiceMonitoringAccount" TypeID="Windows!Microsoft.Windows.SingleEventLogTimer2StateMonitorType" ConfirmDelivery="true">

  <Category>AvailabilityHealth</Category>

  <OperationalStates>

    <OperationalState ID="EventRaised" MonitorTypeStateID="EventRaised" HealthState="Error"/>

    <OperationalState ID="TimerEventRaised" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>Application</LogName>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">EMC-EsiWindowsService</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">1006</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

    <TimerWaitInSeconds>900</TimerWaitInSeconds>

  </Configuration>

</UnitMonitor>