Home
  •  

SIP Proxy: Internal DNS SRV cache overflow condition

Microsoft.LS.2019.Monitoring.UnitMonitor.TimerResetEvent.AccessEdge.SIPPROXY_EVENT_DNS_SRV_CACHE_OVERFLOW (UnitMonitor)

Knowledge Base article:

Summary

Internal DNS SRV cache overflow condition.

Causes

The SIP protocol stack in the Access Edge Server retains an in-memory cache of DNS query results in order to reduce the amount of network traffic generated by DNS SRV queries against tenant and federated partner domains. The cache might overflow if the Access Edge Server interacts with many federated partners, or in a service deployment that hosts many tenant domains. Frequent overflow can lead to serious deterioration of the local network.

Resolutions

Consider increasing the size of the DNS cache using the "DnsCacheRecordCount" setting in the configuration.

Element properties:

TargetMicrosoft.LS.2019.Component.AccessEdge
Parent MonitorSystem.Health.AvailabilityState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityHigh
Alert Auto ResolveTrue
Monitor TypeMicrosoft.LS.2019.MonitorType.TimerResetEvent.Simple
RemotableTrue
AccessibilityPublic
Alert Message
[Skype] Internal DNS SRV cache overflow condition.
{0}

Please see the 'Product Knowledge' and the 'Alert Context' tab on Alert Properties view for more information.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.LS.2019.Monitoring.UnitMonitor.TimerResetEvent.AccessEdge.SIPPROXY_EVENT_DNS_SRV_CACHE_OVERFLOW" Accessibility="Public" Enabled="true" Target="SFBDiscovery!Microsoft.LS.2019.Component.AccessEdge" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Microsoft.LS.2019.MonitorType.TimerResetEvent.Simple" ConfirmDelivery="true">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Alert_Internal_DNS_SRV_cache_overflow_condition.">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>High</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="Microsoft.LS.2019.Monitoring.UnitMonitor.TimerResetEvent.AccessEdge.SIPPROXY_EVENT_DNS_SRV_CACHE_OVERFLOW.Timer" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>

    <OperationalState ID="Microsoft.LS.2019.Monitoring.UnitMonitor.TimerResetEvent.AccessEdge.SIPPROXY_EVENT_DNS_SRV_CACHE_OVERFLOW.Error" MonitorTypeStateID="ErrorEventRaised" HealthState="Error"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>Lync Server</LogName>

    <ErrorExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">14618</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">LS Protocol Stack</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </ErrorExpression>

    <AutoResolveInterval>3600</AutoResolveInterval>

  </Configuration>

</UnitMonitor>