Home
  •  

IS Service has attempted to stop a running package

Microsoft.SQLServer.2012.IS_Service_has_attempted_to_stop_a_running_package_5_Rule (Rule)

Knowledge Base article:

Summary

The Integration Services service was used to send a request to the Integration Services runtime to stop a running package.

Causes

A user clicked the Stop option on a package that was listed in Running Packages folder of SQL Server Management Studio.

Resolutions

If this request was unexpected, you should investigate by checking the logs that were generated by the execution instance of the package, as well as the permissions to possible restriction on interruption of the package execution.

External

For more information, see the following Books Online topics: "Integration Services Log Providers", "Implementing Logging in Packages", and "Integration Services Roles".

Overrideable Parameters

Name

Description

Default Value

Enabled

Enables or disables the workflow.

No

Priority

Defines Alert Priority.

1

Severity

Defines Alert Severity.

2

Element properties:

TargetMicrosoft.SQLServer.2012.IntegrationServices
CategoryEventCollection
EnabledFalse
Event_ID336
Event SourceSQLISService110
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
IS Service has attempted to stop a running package
{0}
Event LogApplication
CommentMom2012ID='{2C144436-E486-4528-A00C-32B2A8F100B9}';MOM2012GroupID={467ECC75-C5DA-42BD-955C-A73BBB51AF74}

Member Modules:

ID Module Type TypeId RunAs 
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Microsoft.SQLServer.SQLDefaultAccount
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.SQLServer.2012.IS_Service_has_attempted_to_stop_a_running_package_5_Rule" Target="SQL2012Core!Microsoft.SQLServer.2012.IntegrationServices" Enabled="false" ConfirmDelivery="true" Remotable="true" Comment="Mom2012ID='{2C144436-E486-4528-A00C-32B2A8F100B9}';MOM2012GroupID={467ECC75-C5DA-42BD-955C-A73BBB51AF74}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" Comment="{F6DA1507-12AF-11D3-AB21-00A0C98620CE}" TypeID="Windows!Microsoft.Windows.EventProvider" RunAs="SQL!Microsoft.SQLServer.SQLDefaultAccount">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>336</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>SQLISService110</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.SQLServer.2012.IS_Service_has_attempted_to_stop_a_running_package_5_Rule.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>Event ID: $Data/EventDisplayNumber$. $Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>