Captures warning events and generates a warning alert
To maintain consistent configuration files across the domain, a backup SnaBase was in the process of updating a backup configuration file from the primary Host Integration Server computer.
It does this by:
1) Copying the backup COM.CFG to COM.BAK.
2) Copying the primary COM.CFG to COM.TMP.
3) Copying COM.TMP to the backup COM.CFG.
The most common cause of this error is Host Integration Server SNA Manager locking the file prior to writing a change. This will lead to retcode 32 and should clear once Host Integration Server SNA Manager releases its lock.
If the retcode is not 32 or this event is not eventually followed by the informational message 660 (indicating a successful copy), then contact your support personnel.
Target | Microsoft.HostIntegrationServer.2010.SNAGateway | ||
Category | EventCollection | ||
Enabled | False | ||
Event_ID | 671 | ||
Event Source | SNA Base Service | ||
Alert Generate | True | ||
Alert Severity | Warning | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
| ||
Event Log | Application |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
Alert | WriteAction | System.Health.GenerateAlert | Default |
WriteToDB | WriteAction | Microsoft.SystemCenter.CollectEvent | Default |
WriteToDW | WriteAction | Microsoft.SystemCenter.DataWarehouse.PublishEventData | Default |
<Rule ID="Microsoft.HostIntegrationServer.2010.SNABase_WarningEvent_671" Enabled="false" Target="Microsoft.HostIntegrationServer.2010.SNAGateway" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Channel</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Application</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">671</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">SNA Base Service</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
<WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertMessageId>$MPElement[Name="AlertMessageIDdec2de8ec5004888aacb6aef725026be"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/LoggingComputer$</AlertParameter1>
<AlertParameter2>$Data/EventDisplayNumber$</AlertParameter2>
<AlertParameter3>$Data/EventDescription$</AlertParameter3>
</AlertParameters>
</WriteAction>
</WriteActions>
</Rule>