This Rule generates alerts when A shortage of available memory caused the Microsoft Forefront TMG Control service to fail
A shortage of available memory caused the Microsoft Forefront TMG Control to fail.
Either the service or other processes are using excessive memory.
To address a low physical memory condition, do one of the following:
Close or stop one or more applications, services, processes
Add physical memory to the computer
Move applications to one or more additional servers
If the system has been adequately provisioned with physical memory and application load but it continually exceeds the available physical memory threshold over time, it is possible that an application is leaking memory. To identify an application that is leaking memory, do the following:
Open System Monitor and monitor the following system wide performance counters over time:o Paging File\% Usageo Paging File\% Usage Peako Memory\Pool Nonpaged Byteso Memory\Pool Paged BytesIf any one of these counters continually increase over time, it is possible that an application may be leaking memory.
If the system appears to be leaking memory, the specific application can be identified by monitoring the following counters for each running process:o Process\Page File Byteso Process\Pool Nonpaged Byteso Process\Pool Paged Byteso Process\Private Byteso Process\Thread Count
If you observe a consistent and significant increase in any of these counters, it may be necessary to contact the application vendor for support.
| Target | Microsoft.Forefront.TMG.Server |
| Category | EventCollection |
| Enabled | True |
| Alert Generate | False |
| Remotable | True |
| ID | Module Type | TypeId | RunAs |
|---|---|---|---|
| DS | DataSource | Microsoft.Forefront.TMG.Rule.AlertGenerate.DS | Default |
| WA | WriteAction | Microsoft.Forefront.TMG.Rule.AlertGenerate.WA | Default |
Home
ENU <Rule ID="Microsoft.Forefront.TMG.A_shortage_of_available_memory_caused_the_Microsoft_ISA_Server_Control_service_to_fail.Rule" Enabled="true" Target="Microsoft.Forefront.TMG.Server" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.Forefront.TMG.Rule.AlertGenerate.DS">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<EventsPattern>^(11007)$</EventsPattern>
<EventType>1</EventType>
<SourcePattern>Microsoft Forefront TMG Control</SourcePattern>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.Forefront.TMG.Rule.AlertGenerate.WA">
<AlertMessageId>$MPElement[Name="Microsoft.Forefront.TMG.A_shortage_of_available_memory_caused_the_Microsoft_ISA_Server_Control_service_to_fail.AlertMessage"]$</AlertMessageId>
<DomainName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>
<Priority>2</Priority>
<Severity>2</Severity>
</WriteAction>
</WriteActions>
</Rule>