Home
  •  

DELLEMC Enterprise SI Windows Service Event 1021 Alert Rule

EMC.SI.Service.Event1021.Rule (Rule)

Knowledge Base article:

Summary

This rule checks the Application event log for event 1021 from the DELLEMC Enterprise Storage Integrator Windows service. This event is written when the service is not responding to HTTP requests and is being restarted.

Causes

Once each day a program is run to check the status of the DELLEMC Enterprise Storage Integrator Service. This program checks for several conditions that can impact the availability and performance of the service and restarts the service if any of these conditions are found.

Resolutions

Typically, none. If this event is issued often it indicates some type of problem with the service. Check the Application event log for related problems and contact EMC technical support if required.

Additional

For additional information, refer to the DELLEMC Enterprise Storage Integrator for Windows Technical Notes.

External

For more information or technical support, refer to DELLEMC Online Support at support.emc.com.

Element properties:

TargetEMC.SI.WindowsService
CategoryAlert
EnabledTrue
Event_ID1021
Event SourceEMC-EsiWindowsService
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
DELLEMC Enterprise SI Windows Service is not responding to HTTP requests and is being restarted.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="EMC.SI.Service.Event1021.Rule" Enabled="true" Target="ESILib!EMC.SI.WindowsService" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Alert</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">EMC-EsiWindowsService</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">1021</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertName/>

      <AlertDescription/>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="EMC.SI.Service.Event1021.Rule.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/PublisherName$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

      </Suppression>

      <Custom1/>

      <Custom2/>

      <Custom3/>

      <Custom4/>

      <Custom5/>

      <Custom6/>

      <Custom7/>

      <Custom8/>

      <Custom9/>

      <Custom10/>

    </WriteAction>

  </WriteActions>

</Rule>