MSSQL on Windows: Step of a job caused an exception in the subsystem

Microsoft.SQLServer.Windows.CollectionRule.Agent.Step_of_a_job_caused_an_exception_in_the_subsystem_1_5_Rule (Rule)

A specific job step caused SQL Server Agent to write an error to the Windows Application log. The log will show the specific job and job step.

Knowledge Base article:

Summary

A specific job step caused SQL Server Agent to write an error to the Windows Application log. The log will show the specific job and job step.

Note that this rule does not work if SQL Server on Windows instance is monitored agentlessly.

Resolutions

Check the Windows Application log to identify the job step and job that caused the exception. Modify the job step to avoid causing the exception. If the error persists, contact Microsoft Customer Service and Support.

Overridable Parameters

Name

Description

Default Value

Allow Proxying

Specifies whether the module should collect events that do not originate from the computer that is specified in the ComputerName parameter.

No

Enabled

Enables or disables the workflow.

Yes

Priority

Defines Alert Priority.

1

Severity

Defines Alert Severity.

1

Element properties:

TargetMicrosoft.SQLServer.Windows.Agent
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
MSSQL on Windows: Step of a job caused an exception in the subsystem
Event ID: {2}. Step {3} of job '{4}' ({5}) has caused an exception in the {6} subsystem and has been terminated.
CommentMom2017ID='{7AE19E92-5610-4757-9697-FFEB169DCC7E}';MOM2017GroupID={467ECC75-C5DA-42BD-955C-A73BBB51AF74}

Member Modules:

ID Module Type TypeId RunAs 
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_ DataSource Microsoft.SQLServer.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.SQLServer.Windows.CollectionRule.Agent.Step_of_a_job_caused_an_exception_in_the_subsystem_1_5_Rule" Target="SqlDiscW!Microsoft.SQLServer.Windows.Agent" Enabled="true" ConfirmDelivery="true" Remotable="true" Comment="Mom2017ID='{7AE19E92-5610-4757-9697-FFEB169DCC7E}';MOM2017GroupID={467ECC75-C5DA-42BD-955C-A73BBB51AF74}">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" Comment="{F6DA1507-12AF-11D3-AB21-00A0C98620CE}" TypeID="Microsoft.SQLServer.Windows.EventProvider">
<ComputerName>$Target/Property[Type="SqlDiscW!Microsoft.SQLServer.Windows.Agent"]/ComputerName$</ComputerName>
<LogName>Application</LogName>
<AllowProxying>false</AllowProxying>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Channel</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Application</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>209</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>$Target/Property[Type="SqlDiscW!Microsoft.SQLServer.Windows.Agent"]/ServiceName$</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.SQLServer.Windows.CollectionRule.Agent.Step_of_a_job_caused_an_exception_in_the_subsystem_1_5_Rule.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Target/Host/Property[Type="SqlCoreLib!Microsoft.SQLServer.Core.DBEngine"]/MachineName$</AlertParameter1>
<AlertParameter2>$Target/Host/Property[Type="SqlCoreLib!Microsoft.SQLServer.Core.DBEngine"]/InstanceName$</AlertParameter2>
<AlertParameter3>$Data/EventDisplayNumber$</AlertParameter3>
<AlertParameter4>$Data/Params/Param[1]$</AlertParameter4>
<AlertParameter5>$Data/Params/Param[2]$</AlertParameter5>
<AlertParameter6>$Data/Params/Param[3]$</AlertParameter6>
<AlertParameter7>$Data/Params/Param[4]$</AlertParameter7>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>