Home
  •  

Centralized Logging Service Agent aborting write to cache file

Microsoft.LS.2019.Monitoring.UnitMonitor.TimerResetEvent.ClsAgent.CLSAGENT_E_ABORTING_WRITE_TO_CACHE_FILE (UnitMonitor)

Knowledge Base article:

Summary

Centralized Logging Service Agent Aborting write to cache file due to no disk space.

Causes

Out of local disk space. The aborted cache file is usable, but without the corresponding HDR file.

Resolutions

Check why the move to network share keep failing.

Element properties:

TargetMicrosoft.LS.2019.Component.ClsAgent
Parent MonitorSystem.Health.AvailabilityState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityHigh
Alert Auto ResolveTrue
Monitor TypeMicrosoft.LS.2019.MonitorType.TimerResetEvent.Simple
RemotableTrue
AccessibilityPublic
Alert Message
[Skype] Centralized Logging Service Agent Aborting write to cache file due to no disk space.
{0}

Please see the 'Product Knowledge' and the 'Alert Context' tab on Alert Properties view for more information.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.LS.2019.Monitoring.UnitMonitor.TimerResetEvent.ClsAgent.CLSAGENT_E_ABORTING_WRITE_TO_CACHE_FILE" Accessibility="Public" Enabled="true" Target="SFBDiscovery!Microsoft.LS.2019.Component.ClsAgent" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Microsoft.LS.2019.MonitorType.TimerResetEvent.Simple" ConfirmDelivery="true">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Alert_Centralized_Logging_Service_Agent_Aborting_write_to_cache_file_due_to_no_disk_space.">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>High</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="Microsoft.LS.2019.Monitoring.UnitMonitor.TimerResetEvent.ClsAgent.CLSAGENT_E_ABORTING_WRITE_TO_CACHE_FILE.Timer" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>

    <OperationalState ID="Microsoft.LS.2019.Monitoring.UnitMonitor.TimerResetEvent.ClsAgent.CLSAGENT_E_ABORTING_WRITE_TO_CACHE_FILE.Error" MonitorTypeStateID="ErrorEventRaised" HealthState="Error"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>Lync Server</LogName>

    <ErrorExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">33048</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">LS Centralized Logging Agent</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </ErrorExpression>

    <AutoResolveInterval>300</AutoResolveInterval>

  </Configuration>

</UnitMonitor>