Reporting Server Windows Event Log Service

Microsoft.ApplicationVirtualization.5.Server.MP.ReportEventLog (UnitMonitor)

The Application Virtualization dependent eventlog service (Windows Event Log Service) stopped.

Knowledge Base article:

Summary

The eventlog service manages events and event logs. It supports logging events, querying events.

Configuration

Windows Server has a default recovery for the eventlog service such that if it stops two attempts to restart the service will automatically occur. After which the service would need to be started manually

Causes

The eventlog service has stopped.

Resolutions

If the alert persists for the server access the machine:

Open Services

Double-click Windows Event Log

In General tab

Verify Startup type = Automatic

Select Recovery tab

Verify that for first and second failures “Restart the Service” recovery is configured

Element properties:

TargetMicrosoft.ApplicationVirtualization.5.Server.MP.ReportingService
Parent MonitorMicrosoft.ApplicationVirtualization.5.Server.MP.ReportServices
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.CheckNTServiceStateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
Reporting Server Windows Event Log Service
If this alert persists verify on the machine that the service is configured correctly. Startup type = automatic Recovery = computer will attempt to restart the service twice.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.ApplicationVirtualization.5.Server.MP.ReportEventLog" Accessibility="Public" Enabled="true" Target="Microsoft.ApplicationVirtualization.5.Server.MP.ReportingService" ParentMonitorID="Microsoft.ApplicationVirtualization.5.Server.MP.ReportServices" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.CheckNTServiceStateMonitorType" ConfirmDelivery="false">
<Category>AvailabilityHealth</Category>
<AlertSettings AlertMessage="Microsoft.ApplicationVirtualization.5.Server.MP.ReportEventLog_AlertMessageResourceID">
<AlertOnState>Error</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>Error</AlertSeverity>
</AlertSettings>
<OperationalStates>
<OperationalState ID="Running" MonitorTypeStateID="Running" HealthState="Success"/>
<OperationalState ID="NotRunning" MonitorTypeStateID="NotRunning" HealthState="Error"/>
</OperationalStates>
<Configuration>
<ComputerName/>
<ServiceName>eventlog</ServiceName>
<CheckStartupType/>
</Configuration>
</UnitMonitor>