SIS Groveler memory allocation

Microsoft.Windows.FileServer.Service.SIS.2008R2.SISGrovelerMemoryAllocation (UnitMonitor)

Monitors for a failure in the SIS Groveler service due to a memory allocation problem

Knowledge Base article:

Summary

This monitor checks for a failure in the Single Instance Storage (SIS) Groveler Service due to a memory allocation failure. You may receive multiple alerts in this situation as the SIS Groveler service will stop and the service monitor will alert.

The SIS Groveler service scans the hard-disk volumes on a server for duplicate copies of files. If the service locates duplicate copies of files, information about the duplicate copies is sent to the SIS Filter.

If the SIS Groveler service is not running, no additional duplicate files will be de-duplicated

If the health state is unknown, monitoring has either not begun or the monitor may have been disabled for this object.

Causes

The server has run low on available memory and other applications and services may be affected.

Resolutions

On the affected server, review memory utilization using the Performance monitor. If required, add additional physical memory or page file space.

You should monitor memory utilization closely on the server once the problem is rectified to ensure no application has unusual memory consumption patterns.

Use Operations Manager to create a rule to collect performance data which will alert you of any memory issues when they first occur.

Element properties:

TargetMicrosoft.Windows.FileServer.Service.SIS.2008R2
Parent MonitorSystem.Health.AvailabilityState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.2SingleEventLog2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
SIS Groveler service failed to allocate memory
Could not allocate memory for the Single Instance Storage (SIS) Groveler service on computer '{0}'
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.FileServer.Service.SIS.2008R2.SISGrovelerMemoryAllocation" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.FileServer.Service.SIS.2008R2" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" Remotable="true" ConfirmDelivery="true">
<Category>AvailabilityHealth</Category>
<AlertSettings AlertMessage="Microsoft.Windows.FileServer.Service.SIS.2008R2.SISGrovelerMemoryAllocation.AlertMessage">
<AlertOnState>Error</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="MemoryAllocationIssue" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>
<OperationalState ID="MemoryAllocationOK" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>
</OperationalStates>
<Configuration>
<FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>
<FirstLogName>Application</FirstLogName>
<FirstExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">12293</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Groveler</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</FirstExpression>
<SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>
<SecondLogName>Application</SecondLogName>
<SecondExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">4096</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Groveler</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</SecondExpression>
</Configuration>
</UnitMonitor>