Home
  •  

SMS 2003 服务故障: SMS 代理主机异常终止

SMS_2003_service_failure__SMS_Agent_Host_terminated_unexpectedly_17_Rule (Rule)

Knowledge Base article:

摘要

当 Windows 服务控制管理器生成 Windows 事件 ID 7023、7024、7031 或 7034 时，将触发此警报。这些事件 ID 并非 SMS 特有的。服务控制管理器可能会尝试重新启动此服务。SMS 站点组件管理器也有可能会尝试重新启动此服务。如果此服务重新启动失败，则该计算机上的 SMS 功能将受到影响。

查找出现此警报的原因：

原因

解决方法

外部支持

若要获取进一步的帮助，请参阅 SMS 网站的支持部分 针对 Systems Management Server 的支持所提供的其他支持选项。

其他信息

最好由 SMS 管理员来处理此警报。

示例事件

7023 %1 服务因下列错误而停止:%n%2。\r\n

7024 %1 服务因服务性错误 %2 而停止。\r\n

7031 %1 服务意外地终止，这种情况已经出现了 %2 次。以下的修正操作将在 %3 毫秒内运行: %5。\r\n

7034 %1 服务意外地终止，这种情况已经出现了 %2 次。

Element properties:

TargetMicrosoft.SMS.2003.Microsoft_SMS_2003_Management_Point_Servers_Installation
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert MessageSMS_2003_service_failure__SMS_Agent_Host_terminated_unexpectedly_17_Rule.AllertMessageBackwardCompatibility
Event LogSystem
CommentMom2005ID='{B333C5B4-BDD0-4ADD-92BC-4E49F787A9BD}';MOM2005ComputerGroupID={E0136218-760E-49A4-929C-755B25988ACB}

Member Modules:

ID Module Type TypeId RunAs 
_907D4578_146C_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="SMS_2003_service_failure__SMS_Agent_Host_terminated_unexpectedly_17_Rule" Target="Microsoft.SMS.2003.Microsoft_SMS_2003_Management_Point_Servers_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{B333C5B4-BDD0-4ADD-92BC-4E49F787A9BD}';MOM2005ComputerGroupID={E0136218-760E-49A4-929C-755B25988ACB}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" Comment="{907D4578-146C-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>MatchesMOM2005BooleanRegularExpression</Operator>

              <Pattern>^(7031|7034|7023|7024)$</Pattern>

            </RegExExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Service Control Manager</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">Params/Param[1]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>SMS Agent Host</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/LoggingComputer$

           - SMS 2003 service failure: SMS Agent Host terminated unexpectedly.



The SMS Agent Host service running on 

            $Data/LoggingComputer$

           was detected as stopped at 

            $Data/@time$

          .</Description>

        <AlertLevel>70</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>SMS 2003 service failure: SMS Agent Host terminated unexpectedly</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>