Core Alert: ERROR - FTP-Receive message suspended

Microsoft.BizTalk.Server.2016.FTPReceiveMessageSuspended (Rule)

Core Alert: ERROR - FTP-Receive message suspended.

Knowledge Base article:

Summary

This error indicates that the FTP transport receive adapter is suspending an inbound message.

Causes

There are a variety of causes for this event log error message. The most common reason for suspending an inbound message is not finding subscriptions for the message. Other causes are failures in the inbound Pipeline. The error message contains the following details to aid in debugging this: Adapter, Receive Location, Receive Location URI and details of the error.

Resolutions

For every suspended message:

Check if there is a subscription for the message.
Check if the destination Send Port or Orchestration is enlisted.
Check if there is a Schema deployed for the message.
If this is an encrypted message, check if the decryption certificate is configured and available.
Check if the custom Pipeline components configured correctly.
If any of those actions found a problem then fix it and resume message.
If none of those actions help then the error is possibly caused by the message payload.

Configuration

Not Available

Additional

Not Available

External

Not Available

Element properties:

Target

Microsoft.BizTalk.Server.2016.BizTalkRuntimeRole

Category

EventCollection

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

High

Remotable

True

Alert Message

ERROR: FTP-Receive Message Suspended

{0}

Event Log

Application

Member Modules:

ID	Module Type	TypeId	RunAs
Microsoft.BizTalk.Server.2016.FTPReceiveMessageSuspended.DataSource	DataSource	Microsoft.Windows.EventProvider	Default
GenerateAlert	WriteAction	System.Health.GenerateAlert	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="Microsoft.BizTalk.Server.2016.FTPReceiveMessageSuspended" Enabled="true" Target="BTSLib!Microsoft.BizTalk.Server.2016.BizTalkRuntimeRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="Microsoft.BizTalk.Server.2016.FTPReceiveMessageSuspended.DataSource" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Property[Type="BTSLib!Microsoft.BizTalk.Server.2016.ServerRole"]/ComputerName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <Or>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">PublisherName</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">BizTalk Server 2006</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">PublisherName</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">BizTalk Server 2009</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">PublisherName</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">BizTalk Server</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

            </Or>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">5753</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="String">Params/Param[3]</XPathQuery>

              </ValueExpression>

              <Operator>ContainsSubstring</Operator>

              <Pattern>FTP</Pattern>

            </RegExExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

    <WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>2</Priority>

      <Severity>2</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.BizTalk.Server.2016.FTPReceiveMessageSuspended.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Target/Property[Type="BTSLib!Microsoft.BizTalk.Server.2016.ServerRole"]/ComputerName$</SuppressionValue>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/PublisherName$</SuppressionValue>

      </Suppression>

      <Custom1>Messaging Alerts</Custom1>

    </WriteAction>

  </WriteActions>

</Rule>