WIP Resync Warning Events

Microsoft.HostIntegrationServer.2010.WIP_Resync_WarningEvents (Rule)

Captures warning events and generates a warning alert

Knowledge Base article:

Summary

The Transaction Integrator object encountered an abnormal condition when attempting to run a method using 2PC (two phase commit). The HRESULT encountered is contained in the event.

Causes

The Transaction Integrator object encountered an abnormal condition when attempting to run a method using 2PC (two phase commit). The HRESULT encountered is contained in the event.

Resolutions

Check for additional events that provide further details about the problem.

Verify that the underlying SNA transport layer is functioning properly.

Verify that the SNA LU6.2 Resync service is started and that log exchange has been successfully performed.

Restart the SNA connection and the SNA LU6.2 Resync Service.

Enabling tracing for TI WIP and SNA Application may also provide further information about the failure.

Element properties:

Target

Microsoft.HostIntegrationServer.2010.WIP

Category

EventCollection

Enabled

False

Event Source

COMTI

Alert Generate

True

Alert Severity

Warning

Alert Priority

Normal

Remotable

True

Alert Message

WIP Alert for Resync Warning Events

Server: {0}
Event ID: {1}
Event Description: {2}

Event Log

Application

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.Windows.EventProvider	Default
Alert	WriteAction	System.Health.GenerateAlert	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="Microsoft.HostIntegrationServer.2010.WIP_Resync_WarningEvents" Enabled="false" Target="Microsoft.HostIntegrationServer.2010.WIP" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">Channel</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">Application</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>MatchesRegularExpression</Operator>

              <Pattern>^(201|202|203|204)$</Pattern>

            </RegExExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">COMTI</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

    <WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertMessageId>$MPElement[Name="AlertMessageID5bc96f519d0e4ee3b471e9d119b1e864"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/LoggingComputer$</AlertParameter1>

        <AlertParameter2>$Data/EventDisplayNumber$</AlertParameter2>

        <AlertParameter3>$Data/EventDescription$</AlertParameter3>

      </AlertParameters>

    </WriteAction>

  </WriteActions>

</Rule>