Shutdown success: Admin Service

Veritas.EnterpriseVault.12.AdminService.Shutdown_success__Admin_Service.Rule (Rule)

Knowledge Base article:

Resolutions

This message is logged when the Enterprise Vault Admin Service stops. This is a critical service, so when the Admin Service is stopped all other Enterprise Vault services on the system should already be stopped.

If the Admin Service has stopped unexpectedly, look for other events logged by the Admin Service that should explain the reason for the controlled shut down.

External

Veritas Event Database

Element properties:

Target	Veritas.EnterpriseVault.12.AdminService
Category	EventCollection
Enabled	True
Alert Generate	False
Remotable	True

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Veritas.EnterpriseVault.12.EventProvider.DataSourceModuleType	Veritas.EnterpriseVault.MonitoringProfile
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Veritas.EnterpriseVault.MonitoringProfile
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Veritas.EnterpriseVault.MonitoringProfile

Source Code:

<Rule ID="Veritas.EnterpriseVault.12.AdminService.Shutdown_success__Admin_Service.Rule" Target="Veritas.EnterpriseVault.12.AdminService" Enabled="true" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Veritas.EnterpriseVault.12.EventProvider.DataSourceModuleType" RunAs="EV!Veritas.EnterpriseVault.MonitoringProfile">

      <ComputerName>$Target/Host/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <EventNumber>4111</EventNumber>

      <LogName>Application</LogName>

      <EventSourceName>Enterprise Vault</EventSourceName>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent" RunAs="EV!Veritas.EnterpriseVault.MonitoringProfile"/>

    <WriteAction ID="WriteToDW" TypeID="MSDL!Microsoft.SystemCenter.DataWarehouse.PublishEventData" RunAs="EV!Veritas.EnterpriseVault.MonitoringProfile"/>

  </WriteActions>

</Rule>