Monitor to detect event 6004 - TFS crash response

TeamFoundationServer2008.MonitorTFSCrashError6004 (UnitMonitor)

Knowledge Base article:

Summary

TFS Event 6004 occurred. This is generally a crash response.

Causes

One of the causes could be the Data Tier is unavailable

Resolutions

Check if the Data Tier host is reachable by pinging it. If it can be pinged check if the TFS Databases are up and running. If TFS databases are up and running check the IIS server on the Application Tier.

Element properties:

Target	TeamFoundationServer2008.TFSApplicationTier
Parent Monitor	System.Health.AvailabilityState
Category	SecurityHealth
Enabled	True
Alert Generate	False
Alert Auto Resolve	True
Monitor Type	Microsoft.Windows.SingleEventLogManualReset2StateMonitorType
Remotable	True
Accessibility	Internal
RunAs	Default

Source Code:

<UnitMonitor ID="TeamFoundationServer2008.MonitorTFSCrashError6004" Accessibility="Internal" Enabled="onEssentialMonitoring" Target="TeamFoundationServer2008.TFSApplicationTier" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType" ConfirmDelivery="true">

  <Category>SecurityHealth</Category>

  <OperationalStates>

    <OperationalState ID="EventRaised" MonitorTypeStateID="EventRaised" HealthState="Warning"/>

    <OperationalState ID="ManualResetEventRaised" MonitorTypeStateID="ManualResetEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>Application</LogName>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">6004</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">TFS Services</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

  </Configuration>

</UnitMonitor>