MSSQL Integration Services on Windows: IS Service has attempted to stop a running package

Microsoft.SQLServer.IS.Windows.IS_Service_has_attempted_to_stop_a_running_package_5_Rule (Rule)

The Integration Services service was used to send a request to the Integration Services runtime to stop a running package. Note that this rule is disabled by default. Use overrides to enable it when necessary.

Knowledge Base article:

Summary

The Integration Services service was used to send a request to the Integration Services runtime to stop a running package.

Causes

A user clicked the Stop option on a package that was listed in Running Packages folder of SQL Server Management Studio.

Resolutions

If this request was unexpected, you should investigate by checking the logs that were generated by the execution instance of the package as well as the permissions to possible restrict who can stop package execution.

External

For more information, see the Docs Online topics: "Integration Services Log Providers", "Implementing Logging in Packages", and "Integration Services Roles".

Overridable Parameters

Name	Description	Default Value
Allow Proxying	Specifies whether the module should collect events that do not originate from the computer that is specified in the ComputerName parameter.	No
Enabled	Enables or disables the workflow.	No
Priority	Defines Alert Priority.	1
Severity	Defines Alert Severity.	2

Element properties:

Target

Microsoft.SQLServer.IS.Windows.LocalInstance

Category

EventCollection

Enabled

False

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Remotable

True

Alert Message

MSSQL Integration Services on Windows: IS Service has attempted to stop a running package

Event ID: {0}. Microsoft SSIS Service: stopping running package.
Package instance ID: {1}
Package ID: {2}
Package name: {3}
Package description: {4}
Package started by: {5}.

Comment

Mom2017ID='{2C144436-E486-4528-A00C-32B2A8F100B9}';MOM2017GroupID={467ECC75-C5DA-42BD-955C-A73BBB51AF74}

Member Modules:

ID	Module Type	TypeId	RunAs
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_	DataSource	Microsoft.SQLServer.IS.Windows.EventProvider	Default
GenerateAlert	WriteAction	System.Health.GenerateAlert	Default

Source Code:

<Rule ID="Microsoft.SQLServer.IS.Windows.IS_Service_has_attempted_to_stop_a_running_package_5_Rule" Target="Microsoft.SQLServer.IS.Windows.LocalInstance" Enabled="false" ConfirmDelivery="true" Remotable="true" Comment="Mom2017ID='{2C144436-E486-4528-A00C-32B2A8F100B9}';MOM2017GroupID={467ECC75-C5DA-42BD-955C-A73BBB51AF74}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" Comment="{F6DA1507-12AF-11D3-AB21-00A0C98620CE}" TypeID="Microsoft.SQLServer.IS.Windows.EventProvider">

      <ComputerName>$Target/Property[Type="Microsoft.SQLServer.IS.Windows.LocalInstance"]/NetBiosComputerName$</ComputerName>

      <LogName>Application</LogName>

      <AllowProxying>false</AllowProxying>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>336</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>SQLISService$Target/Property[Type="Microsoft.SQLServer.IS.Windows.LocalInstance"]/MajorVersion$0</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.SQLServer.IS.Windows.IS_Service_has_attempted_to_stop_a_running_package_5_Rule.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDisplayNumber$</AlertParameter1>

        <AlertParameter2>$Data/Params/Param[1]$</AlertParameter2>

        <AlertParameter3>$Data/Params/Param[2]$</AlertParameter3>

        <AlertParameter4>$Data/Params/Param[3]$</AlertParameter4>

        <AlertParameter5>$Data/Params/Param[4]$</AlertParameter5>

        <AlertParameter6>$Data/Params/Param[5]$</AlertParameter6>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>