WAS detected invalid configuration data

Microsoft.Windows.InternetInformationServices.2008.WAS.detected.invalid.configuration.data (Rule)

Knowledge Base article:

Summary

The Internet Information Services (IIS) Windows Process Activation Service (WAS) configuration manager manages configuration for the application pools and protocol adapters that it maintains. If WAS encounters problems when it reads configuration or reacts to configuration change notifications, configuration changes for the entities it manages may not be processed..

Resolutions

Correct a configuration property by using IIS Manager

To resolve this issue, use IIS Manager to change the configuration settings for the property specified in the event log message to a valid value. Valid values for IIS 7 configuration can be found online at IIS 7: IIS Settings Schema.

To edit configuration by using IIS Manager:

Configuration example

You receive the following event message:

The 'site' '1' has an invalid value for property 'truncateSize'. The configured value '400' is invalid. The value will default to '20971520'.

To resolve this, follow these steps:

Element properties:

TargetMicrosoft.Windows.InternetInformationServices.2008.WebServer
CategoryAlert
EnabledTrue
Event SourceMicrosoft-Windows-WAS
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
WAS detected invalid configuration data
{0}
Event LogSystem

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
WA WriteAction Microsoft.Windows.Server.IIS.2008.GenerateAlertAction.SuppressedByDescription Default

Source Code:

<Rule ID="Microsoft.Windows.InternetInformationServices.2008.WAS.detected.invalid.configuration.data" Enabled="onEssentialMonitoring" Target="Microsoft.Windows.InternetInformationServices.2008.WebServer" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-Windows-WAS</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^(5174|5179|5180)$</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.Windows.Server.IIS.2008.GenerateAlertAction.SuppressedByDescription">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.InternetInformationServices.2008.WAS.detected.invalid.configuration.data.AlertMessage"]$</AlertMessageId>
</WriteAction>
</WriteActions>
</Rule>