InfoPath Forms Services User Has Exceeded The Maximum Number Of Actions Per Postback

Microsoft.SharePoint.Server.2010.SPServiceInstance.Forms.IPFSDoSActionsPerPostback (UnitMonitor)

A warning state of this Monitor indicates that a user has exceeded the threshold that has been set for the number of form actions allowed per postback. When this condition occurs, InfoPath Forms Services terminates the user session to protect the server.

Knowledge Base article:

Summary

To get the most current Knowledge Article from the Microsoft TechNet site, visit:

http://go.microsoft.com/fwlink/?LinkId=142755

Causes

View all current alerts from this object using this link:

View Alerts

Element properties:

Target

Microsoft.SharePoint.Server.2010.SPServiceInstance.Forms

Parent Monitor

System.Health.SecurityState

Category

SecurityHealth

Enabled

True

Alert Generate

True

Alert Severity

Warning

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.SingleEventLogManualReset2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

InfoPath Forms Services: User Has Exceeded The Maximum Number Of Actions Per Postback

A warning incident has occurred where a user has exceeded the threshold that has been set for the number of form actions allowed per postback. When this condition occurs, InfoPath Forms Services terminates the user session to protect the server.

Event ID: {0}
Event Description: {1}

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.SharePoint.Server.2010.SPServiceInstance.Forms.IPFSDoSActionsPerPostback" Accessibility="Public" Enabled="true" Target="Microsoft.SharePoint.Server.2010.SPServiceInstance.Forms" ParentMonitorID="Health!System.Health.SecurityState" Priority="Normal" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType">

  <Category>SecurityHealth</Category>

  <AlertSettings AlertMessage="Microsoft.SharePoint.Server.2010.SPServiceInstance.Forms.IPFSDoSActionsPerPostback_AlertMessageResourceID">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Warning</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/EventDisplayNumber$</AlertParameter1>

      <AlertParameter2>$Data/Context/EventDescription$</AlertParameter2>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="ManualResetEventRaised" MonitorTypeStateID="ManualResetEventRaised" HealthState="Success"/>

    <OperationalState ID="EventRaised" MonitorTypeStateID="EventRaised" HealthState="Warning"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>Application</LogName>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">5737</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">Microsoft-SharePoint Products-InfoPath Forms Services</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

  </Configuration>

</UnitMonitor>