Home
  •  

Alert for event Id: 30553 ('LOGEM_W_ARCHIVE_PROCESS_DEADLETTER_FAILURE')

Microsoft.LS.2010.Monitoring.Rule.InfoEvent.Registrar_LOGEM_W_ARCHIVE_PROCESS_DEADLETTER_FAILURE (Rule)

Knowledge Base article:

Summary

Lync Server archiving agent failed to process messages in the archiving dead letter queue.

Causes

This can occur if the archiving agent cannot read messages from the dead letter queue or cannot resend messages to the archiving queue.

Resolutions

Verify that Lync Server archiving agent has the appropriate permissions to read messages from the archiving dead letter queue and that Message Queuing has enough resources to process messages.

Element properties:

TargetMicrosoft.LS.2010.Component.Registrar
CategoryEventCollection
EnabledTrue
Event_ID30553
Event SourceLS Archiving Agent
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityLow
RemotableTrue
Alert Message
Lync Server archiving agent failed to process messages in the archiving dead letter queue.
{0}

Please see the 'Product Knowledge' and the 'Alert Context' tab on Alert Properties view for more information.
Event LogLync Server

Member Modules:

ID Module Type TypeId RunAs 
CollectEvent DataSource Microsoft.Windows.EventProvider Default
WriteAlert WriteAction System.Health.GenerateAlert Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="Microsoft.LS.2010.Monitoring.Rule.InfoEvent.Registrar_LOGEM_W_ARCHIVE_PROCESS_DEADLETTER_FAILURE" Enabled="true" Target="Microsoft.LS.2010.Component.Registrar" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="CollectEvent" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Lync Server</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">LS Archiving Agent</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">30553</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteAlert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>0</Priority>

      <Severity>1</Severity>

      <AlertMessageId>$MPElement[Name="Alert_Lync_Server_archiving_agent_failed_to_process_messages_in_the_archiving_dead_letter_queue."]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/PublisherName$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

      </Suppression>

    </WriteAction>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>