Home
  •  

Unregister Trace Provider State

Microsoft.ApplicationServer.EventCollector.Event146.ManualReset (UnitMonitor)

This event indicates that the Event Collection Service could not unregister an event source (provider) from an ETW session.

Knowledge Base article:

Summary

This event indicates that the Event Collection Service could not unregister an event source (provider) from an ETW session.

Resolutions

This should not cause any failures to occur with monitoring, but you should inspect your Event Collection Service’s logon account and check to make sure you are not overloading ETW by having too many sessions or too many providers per session.

Element properties:

TargetMicrosoft.ApplicationServer.EventCollectorService
Parent MonitorSystem.Health.AvailabilityState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateFalse
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.SingleEventLogManualReset2StateMonitorType
RemotableTrue
AccessibilityPublic
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.ApplicationServer.EventCollector.Event146.ManualReset" Accessibility="Public" Enabled="true" Target="MicrosoftApplicationServerLibrary!Microsoft.ApplicationServer.EventCollectorService" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType" ConfirmDelivery="true">

  <Category>AvailabilityHealth</Category>

  <OperationalStates>

    <OperationalState ID="EventRaised" MonitorTypeStateID="EventRaised" HealthState="Warning"/>

    <OperationalState ID="ManualResetEventRaised" MonitorTypeStateID="ManualResetEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>Microsoft-Windows-Application Server-System Services/Admin</LogName>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">146</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">Microsoft-Windows-Application Server-System Services Event Collector</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Params/Param[4]</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">$Target/Property[Type="MicrosoftApplicationServerLibrary!Microsoft.ApplicationServer.EventCollectorService"]/CollectorName$</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

  </Configuration>

</UnitMonitor>