Alert for event Id: 24028 ('VIS_GATEWAY_TLS_NEGOTIATION_FAILED')

Microsoft.LS.2019.Monitoring.Rule.InfoEvent.VideoInteropServer.VIS_GATEWAY_TLS_NEGOTIATION_FAILED (Rule)

Knowledge Base article:

Summary

TLS negotiation failed with the Trunk. This event is throttled after 5 consecutive failed calls from a single Trunk peer.

Causes

The Trunk is either not configured correctly or incompatible with Skype for Business Server Video Interop Server.

Resolutions

Check that the Skype for Business Server Video Interop Server and Trunk certificates are configured correctly.

Element properties:

Target

Microsoft.LS.2019.Component.VideoInteropServer

Category

EventCollection

Enabled

True

Event_ID

24028

Event Source

LS Video Interop Server

Alert Generate

True

Alert Severity

Warning

Alert Priority

Low

Remotable

True

Alert Message

[Skype] TLS negotiation failed with the Trunk. This event is throttled after 5 consecutive failed calls from a single Trunk peer.

{0}

Please see the 'Product Knowledge' and the 'Alert Context' tab on Alert Properties view for more information.

Event Log

Lync Server

Member Modules:

ID	Module Type	TypeId	RunAs
CollectEvent	DataSource	Microsoft.Windows.EventProvider	Default
WriteAlert	WriteAction	System.Health.GenerateAlert	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="Microsoft.LS.2019.Monitoring.Rule.InfoEvent.VideoInteropServer.VIS_GATEWAY_TLS_NEGOTIATION_FAILED" Enabled="true" Target="SFBDiscovery!Microsoft.LS.2019.Component.VideoInteropServer" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="CollectEvent" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Lync Server</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">LS Video Interop Server</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">24028</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteAlert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>0</Priority>

      <Severity>1</Severity>

      <AlertMessageId>$MPElement[Name="Alert_TLS_negotiation_failed_with_the_Trunk._This_event_is_throttled_after_5_consecutive_failed_calls_from_a_single_Trunk_peer."]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/PublisherName$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

      </Suppression>

    </WriteAction>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>