Event Collection: Fail to publish client to WSUS

Microsoft.SystemCenter2012.ConfigurationManager.WsusConfigurationManager.FailedToPublishClient_Events (Rule)

This rule generates alert when the WSUS configuration manager fails to publish client to the WSUS server

Knowledge Base article:

Summary

An error was reported during publishing of the client installation package (ccmsetup) to the Windows Server Update Services (WSUS) server.

Causes

The SMS Executive process may not be running.

The WSUS Process may not be running.

Resolutions

Verify that the Windows Server Update Services (WSUS) process is running on the Software Update Point / WSUS server.

Verify that the SMS Executive process is running on the Configuration Manager site server.

You can get additional information about the failure by viewing the WCM.LOG file in the <ConfigMgr Install Directory>\Logs\ folder.

Element properties:

TargetMicrosoft.SystemCenter2012.ConfigurationManager.WsusConfigurationManager
CategoryEventCollection
EnabledFalse
Event_ID6613
Event SourceSMS Server
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
Fail to publish client to WSUS alert
WSUS configuration manager fails to publish client to the WSUS server
Event LogApplication
CommentSIV:SUM0014

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="Microsoft.SystemCenter2012.ConfigurationManager.WsusConfigurationManager.FailedToPublishClient_Events" Comment="SIV:SUM0014" Enabled="false" Target="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.WsusConfigurationManager" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">6613</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">SMS Server</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
<WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertName/>
<AlertDescription/>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.SystemCenter2012.ConfigurationManager.WsusConfigurationManager.FailedToPublishClient_AlertMessageResourceID"]$</AlertMessageId>
<AlertParameters/>
<Suppression>
<SuppressionValue/>
</Suppression>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5/>
<Custom6/>
<Custom7/>
<Custom8/>
<Custom9/>
<Custom10/>
</WriteAction>
</WriteActions>
</Rule>