WMI provider registration

Microsoft.Windows.FileServer.Service.SIS.2008R2.SISWMIProviderFailure (UnitMonitor)

Monitors if the SIS Groveler service cannot register the WMI provider

Knowledge Base article:

Summary

This monitor checks for a failure of the Single Instance Storage (SIS) Groveler Service on startup due to a Windows Management Instrumentation (WMI) issue. The SIS Groveler Service relies on WMI. You may receive multiple alerts in this situation as the SIS Groveler service will fail to start and the service monitor will alert.

The SIS Groveler service scans the hard-disk volumes on a server for duplicate copies of files. If the service locates duplicate copies of files, information about the duplicate copies is sent to the SIS Filter.

If the SIS Groveler service is not running, no additional duplicate files will be de-duplicated

If the health state is unknown, it means that monitoring has not yet begun or the monitor may have been disabled for this object.

Causes

This problem is caused by the SIS Groveler service failing to register the WMI provider on start. In this situation the WMI service on the server will be running but may not be functioning.

Resolutions

Restarting the WMI service on the affected server may resolve this situation. Many other services may have a dependency on the WMI service so you may need to restart other services as well.

On the affected server, open the Services MMC snap-in
Locate the Windows Management Instrumentation service
Stop the service (you may have to stop other services first)
Restart the Windows Management Instrumentation service
Locate the Single Instance Storage Groveler service and start the service
Ensure the service is running

If this does not resolve the problem you should restart the server.

This monitor automatically resets to a Healthy state after the SIS Groveler service starts successfully.

Element properties:

Target

Microsoft.Windows.FileServer.Service.SIS.2008R2

Parent Monitor

System.Health.AvailabilityState

Category

AvailabilityHealth

Enabled

True

Alert Generate

True

Alert Severity

MatchMonitorHealth

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.2SingleEventLog2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

SIS Groveler service could not start it's WMI provider

The Single Instance Storage (SIS) Groveler could not register it's WMI provider during start up on computer '{0}'

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.FileServer.Service.SIS.2008R2.SISWMIProviderFailure" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.FileServer.Service.SIS.2008R2" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" Remotable="true" ConfirmDelivery="true">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.FileServer.Service.SIS.2008R2.SISWMIProviderFailure.AlertMessage">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="WMIProviderIssue" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

    <OperationalState ID="WMIProviderOK" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>

    <FirstLogName>Application</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">12297</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">Groveler</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>

    <SecondLogName>Application</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">4096</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">Groveler</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </SecondExpression>

  </Configuration>

</UnitMonitor>