Home
  •  

FileServerVssAgent failed to receive the next RPC command in the shadow copy creation sequence.

Microsoft.Windows.FileServices.Service.SMB.10.0.FssAgentRpcServerIdleTimeout (Rule)

Knowledge Base article:

Summary

FileServerVssAgent idle timeout.

Causes

FileServerVssAgent allows only one shadow copy creation session at any time on a specific server. To avoid one unresponsive client holding the file server too long, it maintains a shadow copy creation sequence timer to timeout if the next RPC command is not received within the expected period of time during shadow copy creation sequence. The timer has two intervals: 30 minutes between long client side operations (such as AddToShadowCopySet/PrepareShadowCopySet and GetShareMapping/RecoveryComplete) and 60 seconds between short client side operations.

Resolutions

Check the VSS event log on both file server and application server. Retry and make sure the client side operations are completed with the expected intervals with next RPC command is issued timely.

Element properties:

TargetMicrosoft.Windows.FileServices.Service.SMB.10.0.FssAgentEnabled
CategoryAvailabilityHealth
EnabledTrue
Event_ID1008
Event SourceMicrosoft-Windows-FileShareShadowCopyAgent
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
FileServerVssAgent failed to receive the next RPC command in the shadow copy creation sequence in the time period expected
FileServerVssAgent failed to receive the next RPC command in the shadow copy creation sequence in the time period expected.
Event LogMicrosoft-Windows-FileShareShadowCopyAgent/Operational

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Windows.FileServices.Service.SMB.10.0.FssAgentRpcServerIdleTimeout" Target="Microsoft.Windows.FileServices.Service.SMB.10.0.FssAgentEnabled" Remotable="true" Enabled="true">

  <Category>AvailabilityHealth</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Microsoft-Windows-FileShareShadowCopyAgent/Operational</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">Microsoft-Windows-FileShareShadowCopyAgent</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">1008</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.Windows.FileServices.Service.SMB.10.0.FssAgentRpcServerIdleTimeout.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>