InfoPath Forms Services User Has Exceeded The Maximum Allowable Number Of Postbacks

Microsoft.SharePoint.2016.SPServiceInstance.Forms.IPFSDoSPostbacksPerSession (UnitMonitor)

A warning state of this Monitor indicates that a user has exceeded the threshold that has been set for the number of postbacks allowed per form session. When this condition occurs, the user session is terminated to protect the server.

Knowledge Base article:

Summary

To get the most current Knowledge Article from the Microsoft TechNet site, visit:

http://go.microsoft.com/fwlink/?LinkId=244909

Causes

View all current alerts from this object using this link:

View Alerts

Element properties:

Target

Microsoft.SharePoint.2016.SPServiceInstance.Forms

Parent Monitor

System.Health.SecurityState

Category

SecurityHealth

Enabled

True

Alert Generate

True

Alert Severity

Warning

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.SingleEventLogManualReset2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

InfoPath Forms Services: User Has Exceeded The Maximum Allowable Number Of Postbacks

A warning incident has occurred where a user has exceeded the threshold that has been set for the number of postbacks allowed per form session. When this condition occurs, the user session is terminated to protect the server.

Event ID: {0}
Event Description: {1}

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.SharePoint.2016.SPServiceInstance.Forms.IPFSDoSPostbacksPerSession" Accessibility="Public" Enabled="true" Target="MOSS16Core!Microsoft.SharePoint.2016.SPServiceInstance.Forms" ParentMonitorID="Health!System.Health.SecurityState" Priority="Normal" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType">

  <Category>SecurityHealth</Category>

  <AlertSettings AlertMessage="Microsoft.SharePoint.2016.SPServiceInstance.Forms.IPFSDoSPostbacksPerSession_AlertMessageResourceID">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Warning</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/EventDisplayNumber$</AlertParameter1>

      <AlertParameter2>$Data/Context/EventDescription$</AlertParameter2>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="ManualResetEventRaised" MonitorTypeStateID="ManualResetEventRaised" HealthState="Success"/>

    <OperationalState ID="EventRaised" MonitorTypeStateID="EventRaised" HealthState="Warning"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>Application</LogName>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">5736</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">Microsoft-SharePoint Products-InfoPath Forms Services</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

  </Configuration>

</UnitMonitor>