ScanManualProblemE

ScanManualProblemE_5_Rule (Rule)

Knowledge Base article:

Management Pack
Summary

There is a problem with the Manual Scan process.

 
Causes

This may occur when there are broken links inside the Information Store data tables (the tables are corrupted).

 
Resolutions

Some possibilities for resolution might be:
1. Implement the "ContinueManualScanOnFail" setting in Forefront (contact Microsoft Support).
2. Repair the Information Store corruption.

 
© 2006 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.ForeFront.Exchange.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert Message
ScanManualProblemE

$Data/EventDescription$
CommentMom2005ID='{CCF02201-9B9E-4897-8E3E-4F1902F2C8BE}';MOM2005ComputerGroupID={FDF940D4-932E-42EF-9BE3-0613D4273C8D}

Member Modules:

ID Module Type TypeId RunAs 
_04B70447_389D_4DBE_B99E_A5ACC8636261_ DataSource System.Mom.BackwardCompatibility.GenericLogProvider2 Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="ScanManualProblemE_5_Rule" Target="Microsoft.ForeFront.Exchange.Forefront_Security_for_Exchange_Server___Mailbox__Public_Folder_Installation" Enabled="true" ConfirmDelivery="false" Comment="Mom2005ID='{CCF02201-9B9E-4897-8E3E-4F1902F2C8BE}';MOM2005ComputerGroupID={FDF940D4-932E-42EF-9BE3-0613D4273C8D}">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_04B70447_389D_4DBE_B99E_A5ACC8636261_" Comment="{04B70447-389D-4DBE-B99E-A5ACC8636261}" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.GenericLogProvider2">
<PublisherName>Forefront ProgramLog</PublisherName>
<DirectoryRecords>
<DirectoryRecord>
<Directory>%PROGRAMFILES%\Microsoft Forefront Security\Exchange Server\Data</Directory>
<Patterns>
<Pattern>ProgramLog.txt</Pattern>
</Patterns>
</DirectoryRecord>
</DirectoryRecords>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">EventDescription</XPathQuery>
</ValueExpression>
<Operator>ContainsSubstring</Operator>
<Pattern>ERROR: Problems loading scan job from RetrieveManual</Pattern>
</RegExExpression>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">
<AlertGeneration>
<GenerateAlert>true</GenerateAlert>
<Owner/>
<Description>
$Data/EventDescription$
</Description>
<AlertLevel>40</AlertLevel>
<ResolutionState/>
<Source>
$Data/PublisherName$
</Source>
<Name>ScanManualProblemE</Name>
<CustomFields>
<CustomField>Microsoft Forefront Server Security</CustomField>
<CustomField>Forefront Security For Exchange Server</CustomField>
<CustomField>ScanJobFailure</CustomField>
<CustomField/>
<CustomField/>
</CustomFields>
</AlertGeneration>
<InvokerType>0</InvokerType>
</WriteAction>
<WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>