Monitor for TFS Event 4008 - Download Ticket Validation Exception

TeamFoundationServer2010.MonitorTFSEvent4008 (UnitMonitor)

Monitor to detect event 4008 - Download Ticket Validation Exception

Knowledge Base article:

Summary

TFS Event 4008 occurred. Raised by the version control service or version control proxy when it can’t verify a download ticket. This could be a malformed ticket, expired ticket, or failure in the cryptographic system used to validate the ticket.

Resolutions

Information only, if this error continues check the mid-tier server is healthy.

Element properties:

Target	TeamFoundationServer2010.TFS2010AppComponentBase
Parent Monitor	System.Health.AvailabilityState
Category	SecurityHealth
Enabled	True
Alert Generate	False
Alert Auto Resolve	True
Monitor Type	Microsoft.Windows.SingleEventLogTimer2StateMonitorType
Remotable	True
Accessibility	Public
RunAs	Default

Source Code:

<UnitMonitor ID="TeamFoundationServer2010.MonitorTFSEvent4008" Accessibility="Public" Enabled="true" Target="TeamFoundationServer2010.TFS2010AppComponentBase" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.SingleEventLogTimer2StateMonitorType" ConfirmDelivery="true">

  <Category>SecurityHealth</Category>

  <OperationalStates>

    <OperationalState ID="EventRaised" MonitorTypeStateID="EventRaised" HealthState="Warning"/>

    <OperationalState ID="TimerEventRaised" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>Application</LogName>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">4008</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">TFS Services</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

    <TimerWaitInSeconds>600</TimerWaitInSeconds>

  </Configuration>

</UnitMonitor>