MsDrdaService - Event 1027

Microsoft.HostIntegrationServer.2016.MsDrda_WarningEvent_1027 (Rule)

The Microsoft Service for DRDA cannot load the text trace listener.

Knowledge Base article:

Summary

The Microsoft Service for DRDA cannot load the text trace listener.

Causes

DRDA Service will return a warning if it cannot load a text trace listener at service startup. The warning does not prevent the DRDA Service from starting.

Resolutions

The administrator should look in the sources element and the sharedListeners element of the system.diagnostics section of the MsDrdaService.exe.config application configuration file. Check in the sources element that the source name "DrdaAs" is enabled and that the add name="DrdaAsTextListener" is enabled, and then check in the sharedListeners element that the name="DrdaAsTextListener" element values are correctly defined.

Element properties:

TargetMicrosoft.HostIntegrationServer.2016.MsDrda
CategoryEventCollection
EnabledFalse
Event_ID1027
Event SourceMsDrdaService
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
MsDrdaService Alert 1027
Server: {0}
Event ID: {1}
Event Description: {2}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="Microsoft.HostIntegrationServer.2016.MsDrda_WarningEvent_1027" Enabled="false" Target="Microsoft.HostIntegrationServer.2016.MsDrda" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">1027</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">MsDrdaService</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertName/>
<AlertDescription/>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.HostIntegrationServer.2016.MsDrda_WarningEvent_1027.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/LoggingComputer$</AlertParameter1>
<AlertParameter2>$Data/EventDisplayNumber$</AlertParameter2>
<AlertParameter3>$Data/EventDescription$</AlertParameter3>
</AlertParameters>
<Suppression/>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5/>
<Custom6/>
<Custom7/>
<Custom8/>
<Custom9/>
<Custom10/>
</WriteAction>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>