Internal service error monitor.

Microsoft.Windows.DfsReplication.ServiceInternalErrorMonitor (UnitMonitor)

This monitor checks whether the DFS Replication service on the monitored computer stopped as a result of encountering an internal error.

Knowledge Base article:

Summary

The DFS Replication service may register this event if it needs to stop due to an internal error from which it cannot recover.

Event: 1010

Anti-event: 1004

Causes

This error appears when the DFS Replication service has stopped due to an internal error from which it could not recover.

Resolutions

No user action is required – the DFS Replication service will attempt to automatically start DFS Replication after 30 minutes.

To manually start the DFS Replication service from the Operations console, click Start DFS Replication service. To do so from a command prompt, open a command prompt window and then type the following command: net start dfsr

To verify that the DFS Replication service is running from the Operations console, click DFS Replication service Status.

Additional

If the service fails to restart or if you see this error often, check the Microsoft web site at http://go.microsoft.com/fwlink/?LinkId=140177 for available hotfixes or service packs.

For more information, see http://go.microsoft.com/fwlink?linkid=52840

Element properties:

Target

Microsoft.Windows.DfsReplication.Service

Parent Monitor

System.Health.AvailabilityState

Category

StateCollection

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.2SingleEventLog2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

DFS Replication service stopped due to internal error

The DFS Replication service has stopped because of an internal error from which it cannot recover. No content is replicating to or from this server. The service will attempt to restart automatically. Additional Information: {0} {1} {2}

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.DfsReplication.ServiceInternalErrorMonitor" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.DfsReplication.Service" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.DfsReplication.ServiceInternalErrorMonitor_AlertMessageResourceID">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Params/Param[1]$</AlertParameter1>

      <AlertParameter2>$Data/Context/Params/Param[2]$</AlertParameter2>

      <AlertParameter3>$Data/Context/Params/Param[3]$</AlertParameter3>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

    <OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>

    <FirstLogName>DFS Replication</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">1010</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">DFSR</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>

    <SecondLogName>DFS Replication</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">1004</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">DFSR</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </SecondExpression>

  </Configuration>

</UnitMonitor>