Home
  •  

Audit Collection Forwarder - Windows Service

Microsoft.SystemCenter.AuditCollectionService.Forwarder.ServiceMonitor (UnitMonitor)

This monitor checks the state of the ACS forwarder windows service.

Knowledge Base article:

Summary

The Audit Collection Service has entered a stopped state. When the Audit Collection Service is not running, no audit data is being forwarded to a Management Server.

Causes

The Agent side Audit Collection is not configured properly.

Resolutions

Check the System event logs to determine why the Audit Collection Service has entered a stopped state.

You can attempt to restart the service using the following link:

Start Audit Collection Service

Element properties:

TargetMicrosoft.SystemCenter.Agent
Parent MonitorMicrosoft.SystemCenter.AuditCollectionService.AvailabilityHealthRollup
CategoryStateCollection
EnabledTrue
Alert GenerateFalse
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.CheckNTServiceStateMonitorType
RemotableTrue
AccessibilityInternal
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.SystemCenter.AuditCollectionService.Forwarder.ServiceMonitor" Accessibility="Internal" Enabled="true" Target="SCLibrary!Microsoft.SystemCenter.Agent" ParentMonitorID="Microsoft.SystemCenter.AuditCollectionService.AvailabilityHealthRollup" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.CheckNTServiceStateMonitorType" ConfirmDelivery="true">

  <Category>StateCollection</Category>

  <OperationalStates>

    <OperationalState ID="Running" MonitorTypeStateID="Running" HealthState="Success"/>

    <OperationalState ID="NotRunning" MonitorTypeStateID="NotRunning" HealthState="Error"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <ServiceName>AdtAgent</ServiceName>

  </Configuration>

</UnitMonitor>