Home
  •  

Login Failed

Microsoft.SharePoint.2016.SPServer.LoginFailed (UnitMonitor)

A critical state of this Monitor indicates that an Application Login failed on this server.

Knowledge Base article:

Summary

To get the most current Knowledge Article from the Microsoft TechNet site, visit:

http://go.microsoft.com/fwlink/?LinkId=245035

Causes

View all current alerts from this object using this link:

View Alerts

Element properties:

TargetMicrosoft.SharePoint.2016.SPServer
Parent MonitorSystem.Health.ConfigurationState
CategoryConfigurationHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityHigh
Alert Auto ResolveTrue
Monitor TypeMicrosoft.SharePoint.Library.RepeatedEventLogManualReset2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
SharePoint: Unable To Login To Server

A critical incident has occurred where SharePoint experienced a login failure on server {2}.

Event ID: {0}
Event Description: {1}
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.SharePoint.2016.SPServer.LoginFailed" Accessibility="Public" Enabled="true" Target="MOSS16Core!Microsoft.SharePoint.2016.SPServer" ParentMonitorID="Health!System.Health.ConfigurationState" Priority="Normal" TypeID="MOSS!Microsoft.SharePoint.Library.RepeatedEventLogManualReset2StateMonitorType">

  <Category>ConfigurationHealth</Category>

  <AlertSettings AlertMessage="Microsoft.SharePoint.2016.SPServer.LoginFailed_AlertMessageResourceID">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>High</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Context/DataItem/EventDisplayNumber$</AlertParameter1>

      <AlertParameter2>$Data/Context/Context/DataItem/EventDescription$</AlertParameter2>

      <AlertParameter3>$Target/Property[Type="MOSS!Microsoft.SharePoint.Library.SPServer"]/ComputerID$</AlertParameter3>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="ManualResetEventRaised" MonitorTypeStateID="ManualResetEventRaised" HealthState="Success"/>

    <OperationalState ID="RepeatedEventRaised" MonitorTypeStateID="RepeatedEventRaised" HealthState="Error"/>

  </OperationalStates>

  <Configuration>

    <RepeatedComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</RepeatedComputerName>

    <RepeatedLogName>Application</RepeatedLogName>

    <RepeatedExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">3351</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">Microsoft-SharePoint Products-SharePoint Foundation</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </RepeatedExpression>

    <Interval>3600</Interval>

    <Count>10</Count>

  </Configuration>

</UnitMonitor>