Home
  •  

Collection Rule for event with source OnlineResponderWebProxy and ID 20

Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.WebProxy.20 (Rule)

The Online Responder web proxy corrected an invalid configuration.

Knowledge Base article:

Summary

The status and functioning of the Microsoft Online Responder service has dependencies on numerous features and components, including the ability to access timely certificate revocation data, the validity of the certification authority (CA) certificate and chain, and overall system response and availability.

Resolutions

Correct the configuration of the Online Responder Web proxy

The property that contained the invalid value should be identified in the corresponding error message.

For example, the range of acceptable values for the NumOfThreads setting for the Web proxy is between 1 and 9,999. If the property value is set to 0, the number of threads is assumed to be 5. If it is set to a value greater than 9,999, it is assumed to be 50 (the default value).

Investigate the property and, if necessary, replace it with a valid value.

This error indicates that configuration values are not within the permitted range. This can occur if the registry was manually modified.

For more information, see Troubleshooting: Internet Information Services (IIS) 7.0 ( http://go.microsoft.com/fwlink/?LinkId=104212) and Web Server ( http://go.microsoft.com/fwlink/?LinkID=85627).

Element properties:

TargetMicrosoft.Windows.CertificateServices.CARole.2016
CategoryEventCollection
EnabledTrue
Event_ID20
Event SourceMicrosoft-Windows-OnlineResponderWebProxy
Alert GenerateFalse
RemotableTrue
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default

Source Code:

<Rule ID="Microsoft.Windows.CertificateServices.CARole.2016.OCSPEvents.WebProxy.20" Enabled="true" Target="CSDisc!Microsoft.Windows.CertificateServices.CARole.2016" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">20</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">Microsoft-Windows-OnlineResponderWebProxy</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

  </WriteActions>

</Rule>