Alert for event Id: 27019 ('DBVersionMismatch')

Microsoft.LS.2013.Monitoring.Rule.InfoEvent.LegalInterceptService.DBVersionMismatch (Rule)

Knowledge Base article:

Summary

Lcslog database schema or sproc version is smaller than a supported version by Lync Online Legal Intercept Service.

Causes

Lync Online Legal Intercept Service has been updated after lcslog database has been deployed.

Resolutions

Verify that both Lync Online Legal Intercept Service and lcslog database were installed or modified by the same installation package.

Element properties:

Target

Microsoft.LS.2013.Component.LegalInterceptService

Category

EventCollection

Enabled

True

Event_ID

27019

Event Source

LS Legal Intercept Service

Alert Generate

True

Alert Severity

Warning

Alert Priority

Low

Remotable

True

Alert Message

[LYNC] Lcslog database schema or sproc version is smaller than a supported version by Lync Online Legal Intercept Service.

{0}

Please see the 'Product Knowledge' and the 'Alert Context' tab on Alert Properties view for more information.

Event Log

Lync Server

Member Modules:

ID	Module Type	TypeId	RunAs
CollectEvent	DataSource	Microsoft.Windows.EventProvider	Default
WriteAlert	WriteAction	System.Health.GenerateAlert	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="Microsoft.LS.2013.Monitoring.Rule.InfoEvent.LegalInterceptService.DBVersionMismatch" Enabled="true" Target="Microsoft.LS.2013.Component.LegalInterceptService" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="CollectEvent" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Lync Server</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">LS Legal Intercept Service</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">27019</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteAlert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>0</Priority>

      <Severity>1</Severity>

      <AlertMessageId>$MPElement[Name="Alert_Lcslog_database_schema_or_sproc_version_is_smaller_than_a_supported_version_by_Lync_Online_Legal_Intercept_Service."]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/PublisherName$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

      </Suppression>

    </WriteAction>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>