Service definition removal from topology configuration

Microsoft.LS.2015.Monitoring.UnitMonitor.PairedEvent.LegalInterceptService.ErrorServiceDefinitionRemoved (UnitMonitor)

Knowledge Base article:

Summary

Skype for Business Online Legal Intercept Service definition is removed from topology configuration. The service will be running using the old topology configuration. However, once it is stopped, it may no longer be re-started until service definition is added back into the topology configuration.

Causes

Possible misconfiguration issues.

Resolutions

If this service is intended to be part of your deployment, then please ensure that topology configuration includes the definition for this service. Otherwise, please stop this service and run deployment tools to uninstall it from this machine.

Element properties:

Target

Microsoft.LS.2015.Component.LegalInterceptService

Parent Monitor

System.Health.ConfigurationState

Category

ConfigurationHealth

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.LS.2015.MonitorType.PairedEvent.Simple

Remotable

True

Accessibility

Public

Alert Message

[Skype] Skype for Business Online Legal Intercept Service definition is removed from topology configuration. The service will be running using the old topology configuration. However, once it is stopped, it may no longer be re-started until service defi..

{0}

Please see the 'Product Knowledge' and the 'Alert Context' tab on Alert Properties view for more information.

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.LS.2015.Monitoring.UnitMonitor.PairedEvent.LegalInterceptService.ErrorServiceDefinitionRemoved" Accessibility="Public" Enabled="true" Target="Microsoft.LS.2015.Component.LegalInterceptService" ParentMonitorID="Health!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Microsoft.LS.2015.MonitorType.PairedEvent.Simple" ConfirmDelivery="true">

  <Category>ConfigurationHealth</Category>

  <AlertSettings AlertMessage="Alert_Skype_for_Business_Online_Legal_Intercept_Service_definition_is_removed_from_topology_configuration._The_service_will_be_running_using_the_old_topology_configuration._However__once_it_is_stopped__it_may_no_longer_be_re_started_until_service_defini...">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="Microsoft.LS.2015.Monitoring.UnitMonitor.PairedEvent.LegalInterceptService.ErrorServiceDefinitionRemoved.Success" MonitorTypeStateID="SuccessEventRaised" HealthState="Success"/>

    <OperationalState ID="Microsoft.LS.2015.Monitoring.UnitMonitor.PairedEvent.LegalInterceptService.ErrorServiceDefinitionRemoved.Error" MonitorTypeStateID="ErrorEventRaised" HealthState="Error"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>Lync Server</LogName>

    <SuccessExpression>

      <Or>

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">27024</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="String">PublisherName</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="String">LS Legal Intercept Service</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">23002</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="String">PublisherName</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="String">LS Provisioning Service</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </Or>

    </SuccessExpression>

    <ErrorExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">27025</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">LS Legal Intercept Service</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </ErrorExpression>

  </Configuration>

</UnitMonitor>