SMS 2003 service failure: SMS_SERVER_LOCATOR_POINT terminated unexpectedly

SMS_2003_service_failure__SMS_SERVER_LOCATOR_POINT_terminated_unexpectedly_14_Rule (Rule)

Knowledge Base article:

Summary

This alert is triggered when the Windows Service Control Manager generates Windows event ID 7023, 7024, 7031, or 7034. These event IDs are not specific to SMS. Service Control Manager may attempt to restart this service. SMS Site Component Manager may also attempt to restart this service. If this service is not successfully restarted, SMS functionality will be impaired on this computer.

To investigate this alert:

Click Start, click Control Panel, double-click Administrative Tools, and then double-click Event Viewer.
In the console tree, click the System log.
In the details pane, locate the event ID or IDs and double-click to view the description.

Causes

This is due to a critical problem with the service or one of its dependent components or services.
For event ID 7023, the message specifies the error encountered by Service Control Manager.
For event ID 7024, the message includes a service-specific error code. To translate the error code in the message, type net helpmsg [error code] at the command prompt.

Resolutions

For event ID 7031, the Windows event message lists the corrective action to be taken by the Service Control Manager. Note the number of times the event has occurred and what corrective action will be taken. Wait to see if the service recovers due to that corrective action.
The action you must take depends on the cause. You might not have to do anything.
If the service does not restart, click Start, click Control Panel, click Administrative Tools, click Services and then start the service manually. If the problem persists, examine the service log file for possible causes.

External

For more assistance, a list of additional support options is available in the support section of the SMS Web site at Support for Systems Management Server.

Additional

This alert is best handled by SMS administrators.

Sample Events

7023 The %1 service terminated with the following error: %n%2\r\n

7024 The %1 service terminated with service-specific error %2.\r\n

7031 The %1 service terminated unexpectedly. It has done this %2 time(s). The following corrective action will be taken in %3 milliseconds: %5.\r\n

7034 The %1 service terminated unexpectedly. It has done this %2 time(s).

Element properties:

Target

Microsoft.SMS.2003.Microsoft_SMS_2003_Server_Locator_Point_Servers_Installation

Category

EventCollection

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Low

Remotable

True

Alert Message

SMS 2003 服务故障: SMS_SERVER_LOCATOR_POINT 异常终止

$Data/LoggingComputer$ - SMS 2003 服务故障: SMS_SERVER_LOCATOR_POINT 异常终止。

检测到 $Data/LoggingComputer$ 上运行的 SMS_SERVER_LOCATOR_POINT 服务在 $Data/@time$ 停止。

Event Log

System

Comment

Mom2005ID='{0E1BC31E-1A7E-4CB7-A556-EE3002C2AEBB}';MOM2005ComputerGroupID={A3D8869C-7418-4249-A623-7B829828B363}

Member Modules:

ID	Module Type	TypeId	RunAs
_907D4578_146C_11D3_AB21_00A0C98620CE_	DataSource	Microsoft.Windows.EventProvider	Default
CollectEventData	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
CollectEventDataWarehouse	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default
GenerateAlert	WriteAction	System.Mom.BackwardCompatibility.AlertResponse	Default

Source Code:

<Rule ID="SMS_2003_service_failure__SMS_SERVER_LOCATOR_POINT_terminated_unexpectedly_14_Rule" Target="Microsoft.SMS.2003.Microsoft_SMS_2003_Server_Locator_Point_Servers_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{0E1BC31E-1A7E-4CB7-A556-EE3002C2AEBB}';MOM2005ComputerGroupID={A3D8869C-7418-4249-A623-7B829828B363}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" Comment="{907D4578-146C-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>MatchesMOM2005BooleanRegularExpression</Operator>

              <Pattern>^(7031|7034|7023|7024)$</Pattern>

            </RegExExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Service Control Manager</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">Params/Param[1]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>SMS_SERVER_LOCATOR_POINT</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/LoggingComputer$

           - SMS 2003 service failure: SMS_SERVER_LOCATOR_POINT terminated unexpectedly.



The SMS_SERVER_LOCATOR_POINT service running on 

            $Data/LoggingComputer$

           was detected as stopped at 

            $Data/@time$

          .</Description>

        <AlertLevel>70</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>SMS 2003 service failure: SMS_SERVER_LOCATOR_POINT terminated unexpectedly</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>