WSRM - WSRM managing processes when there is no CPU contention

WSRM___WSRM_managing_processes_when_there_is_no_CPU_contention_1_Rule (Rule)

Knowledge Base article:

Management Pack

Summary
Windows System Resource Manager (WSRM) will adjust the priorities of processes even when there is no contention for CPU in the system. The normal behavior of WSRM is that process priorities should not be adjusted when there is no contention for CPU.

Causes
This could occur when the system is low on resources or if the WMI Performance Adapter service is disabled.

Resolutions
Enable the WMI Performance Adaptor service if it is currently disabled. If it is already enabled, then try to free up some system resources by stopping some applications that are using up a lot of system resources. If the problem still persists, contact the WSRM administrator.

Sample Event
Windows System Resource Manager (WSRM) will manage (tweak priorities of) processes even when there is no contention for CPU in the system. This could occur when the system is low on resources or if the WMI Performance Adapter service is disabled.

Element properties:

Target	Microsoft.Windows.SystemResourceManager.2003.Microsoft_Windows_System_Resource_Manager_Installation
Category	EventCollection
Enabled	True
Event_ID	127
Event Source	WSRM
Alert Generate	False
Remotable	True
Event Log	Application
Comment	Mom2005ID='{6DE18E60-C2B4-4556-9554-E68F5394F89C}';MOM2005ComputerGroupID={791B481B-0184-4791-8BE9-DEC48A385750}

Member Modules:

ID	Module Type	TypeId	RunAs
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_	DataSource	Microsoft.Windows.EventProvider	Default
CollectEventData	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
CollectEventDataWarehouse	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default
GenerateAlert	WriteAction	System.Mom.BackwardCompatibility.AlertResponse	Default

Source Code:

<Rule ID="WSRM___WSRM_managing_processes_when_there_is_no_CPU_contention_1_Rule" Target="Microsoft.Windows.SystemResourceManager.2003.Microsoft_Windows_System_Resource_Manager_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{6DE18E60-C2B4-4556-9554-E68F5394F89C}';MOM2005ComputerGroupID={791B481B-0184-4791-8BE9-DEC48A385750}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" Comment="{F6DA1507-12AF-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>127</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>WSRM</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>false</GenerateAlert>

        <Owner/>

        <Description>

            $Data/EventDescription$

          </Description>

        <AlertLevel>50</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>WSRM - WSRM managing processes when there is no CPU contention</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>