Home
  •  

ScanInternalError

ScanInternalError_2_Rule (Rule)

Knowledge Base article:

Management Pack
Summary
An internal Antigen software error has occurred.
 
Causes
Possible causes for an internal error: 1. File or registry corruption. 2. Missing file components. 3. Windows failure in services or components used by Antigen. 4. Unexpected process termination due to application exceptions.
 
Resolutions
Often this type of error is serious and may require services restarts or even a server reboot. In cases where the problem is related to corruption and reinstallation of the software may even be required. Contact Microsoft Support if "internal errors" are occurring.
 
© 2006 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.Antigen.v9.Antigen_For_Exchange_Installation
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert Message
ScanInternalError

$Data/EventDescription$
CommentMom2005ID='{BAD7B546-0F3B-4F3A-8153-DCD66908555E}';MOM2005ComputerGroupID={A892AF5F-2434-4D1E-A72B-9E3CBE68B64C}

Member Modules:

ID Module Type TypeId RunAs 
_0CA5CE51_2D73_4B9F_8FD4_4C8FFC6966BB_ DataSource System.Mom.BackwardCompatibility.GenericLogProvider2 Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="ScanInternalError_2_Rule" Target="Microsoft.Antigen.v9.Antigen_For_Exchange_Installation" Enabled="true" ConfirmDelivery="false" Comment="Mom2005ID='{BAD7B546-0F3B-4F3A-8153-DCD66908555E}';MOM2005ComputerGroupID={A892AF5F-2434-4D1E-A72B-9E3CBE68B64C}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_0CA5CE51_2D73_4B9F_8FD4_4C8FFC6966BB_" Comment="{0CA5CE51-2D73-4B9F-8FD4-4C8FFC6966BB}" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.GenericLogProvider2">

      <PublisherName>Antigen ProgramLog</PublisherName>

      <DirectoryRecords>

        <DirectoryRecord>

          <Directory>%PROGRAMFILES%\Microsoft Antigen for Exchange</Directory>

          <Patterns>

            <Pattern>ProgramLog.txt</Pattern>

          </Patterns>

        </DirectoryRecord>

        <DirectoryRecord>

          <Directory>%PROGRAMFILES%\Microsoft Antigen for SMTP</Directory>

          <Patterns>

            <Pattern>ProgramLog.txt</Pattern>

          </Patterns>

        </DirectoryRecord>

      </DirectoryRecords>

      <Expression>

        <RegExExpression>

          <ValueExpression>

            <XPathQuery Type="String">EventDescription</XPathQuery>

          </ValueExpression>

          <Operator>ContainsSubstring</Operator>

          <Pattern>ERROR: Internal error</Pattern>

        </RegExExpression>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/EventDescription$

          </Description>

        <AlertLevel>50</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>ScanInternalError</Name>

        <CustomFields>

          <CustomField>Microsoft Antigen</CustomField>

          <CustomField/>

          <CustomField>ScanJobFailure</CustomField>

          <CustomField/>

          <CustomField/>

        </CustomFields>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>