Home
  •  

Alert for Event 5000 Watson Report

TeamFoundationServer2008.AlertRuleforTFS5000 (Rule)

Error 5000 Watson report filed

Knowledge Base article:

Summary

This means a Watson report was filed

Configuration

This might be due to configuration issues

Causes

Following a Watson report, these entries are created. The Watson report was filed, but not delivered to the reporting site. If you file a bug, make note of the event log entry contents in the bug report. This should be collected because something failed and the customer has to know about it, so that when support is called they can have this information.

Resolutions

A Watson Report is filed. Make note of the error details and file a bug.

Additional

This has to be diagnosed further based on info in the Watson report

External

TBD

Element properties:

TargetTeamFoundationServer2008.TFSApplicationTier
CategoryCustom
EnabledTrue
Event_ID5000
Event SourceTFS Services
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
Alert for Event 5000 - Watson Report generated on internal error
Error :5000 Watson report filed. Following a Watson report, these entries are created.The Watson report was filed, but not delivered to the reporting site. If you file a bug, make note of the event log entry contents in the bug report. This should be collected because something failed and the customer can use this info when contacting support. .
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="TeamFoundationServer2008.AlertRuleforTFS5000" Enabled="onEssentialMonitoring" Target="TeamFoundationServer2008.TFSApplicationTier" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Custom</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">5000</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">TFS Services</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="TeamFoundationServer2008.AlertRuleforTFS5000.AlertMessage"]$</AlertMessageId>

      <Custom1/>

      <Custom2/>

      <Custom3/>

      <Custom4/>

      <Custom5/>

      <Custom6/>

      <Custom7/>

      <Custom8/>

      <Custom9/>

      <Custom10/>

    </WriteAction>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" TypeID="SystemCenter!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>