I have over 75,000 event entries over a week's time for event ID 25261. This is 75% of my total MOM activity.
These errors relate to IIS Application Log Server Staus errors of 404, 400, 403, 500, 503 etc. I would like to consolidate using the event consolidation rules in the IIS Management Pack or by my own to reduce the IIS error noise? How should I proceed?
We had the same problem with our MOM install and the best way for us to proceed was to disable the HTTP 400 error event rule to stop these errors coming in. If you really do need the rule enabled, you need to track down the cause of these events as otherwise you will find your SystemCenterReporting Database getting very big very quick!
"Jamie Bakert" wrote: > I have over 75,000 event entries over a week's time for event ID 25261. This > is 75% of my total MOM activity.
> These errors relate to IIS Application Log Server Staus errors of 404, 400, > 403, 500, 503 etc. I would like to consolidate using the event consolidation > rules in the IIS Management Pack or by my own to reduce the IIS error noise? > How should I proceed?
I have disabled both Collection types (All HTTP 400 Errors and ALL HTTP 500 Errors) from the following rule group: Microsoft Windows Internet Information Services/Internet Information Services 5.0/Core Services/World Wide Web Pulishing Service and I countinue to get 400 and 500 errors showing up as events in the Operators Console.
> We had the same problem with our MOM install and the best way for us to > proceed was to disable the HTTP 400 error event rule to stop these errors > coming in. If you really do need the rule enabled, you need to track down the > cause of these events as otherwise you will find your SystemCenterReporting > Database getting very big very quick!
> Best Regards,
> Andy.
> -- > Andy Dominey > MCSE
> "Jamie Bakert" wrote:
> > I have over 75,000 event entries over a week's time for event ID 25261. This > > is 75% of my total MOM activity.
> > These errors relate to IIS Application Log Server Staus errors of 404, 400, > > 403, 500, 503 etc. I would like to consolidate using the event consolidation > > rules in the IIS Management Pack or by my own to reduce the IIS error noise? > > How should I proceed?
There are a duplicate set of rules under Microsoft Windows Internet Information Services/Internet Information Services 6.0/Core Services/World Wide Web Pulishing Service. Have a look there and make sure they are disabled also.
Here are the rules that we have disabled under both of these sub folders:
"Jamie Bakert" wrote: > I have disabled both Collection types (All HTTP 400 Errors and ALL HTTP 500 > Errors) from the following rule group: Microsoft Windows Internet Information > Services/Internet Information Services 5.0/Core Services/World Wide Web > Pulishing Service and I countinue to get 400 and 500 errors showing up as > events in the Operators Console.
> "Andy Dominey" wrote:
> > Hi there,
> > We had the same problem with our MOM install and the best way for us to > > proceed was to disable the HTTP 400 error event rule to stop these errors > > coming in. If you really do need the rule enabled, you need to track down the > > cause of these events as otherwise you will find your SystemCenterReporting > > Database getting very big very quick!
> > Best Regards,
> > Andy.
> > -- > > Andy Dominey > > MCSE
> > "Jamie Bakert" wrote:
> > > I have over 75,000 event entries over a week's time for event ID 25261. This > > > is 75% of my total MOM activity.
> > > These errors relate to IIS Application Log Server Staus errors of 404, 400, > > > 403, 500, 503 etc. I would like to consolidate using the event consolidation > > > rules in the IIS Management Pack or by my own to reduce the IIS error noise? > > > How should I proceed?
thanks Andy... I have one more question: In the MOM Management Pack Guide, there are references to Security error: 401, I do not have these Rules in either Production or Test Environments. Do you know what they are referring to?
"Andy Dominey" wrote: > There are a duplicate set of rules under Microsoft Windows Internet > Information Services/Internet Information Services 6.0/Core Services/World > Wide Web Pulishing Service. Have a look there and make sure they are disabled > also.
> Here are the rules that we have disabled under both of these sub folders:
> > I have disabled both Collection types (All HTTP 400 Errors and ALL HTTP 500 > > Errors) from the following rule group: Microsoft Windows Internet Information > > Services/Internet Information Services 5.0/Core Services/World Wide Web > > Pulishing Service and I countinue to get 400 and 500 errors showing up as > > events in the Operators Console.
> > "Andy Dominey" wrote:
> > > Hi there,
> > > We had the same problem with our MOM install and the best way for us to > > > proceed was to disable the HTTP 400 error event rule to stop these errors > > > coming in. If you really do need the rule enabled, you need to track down the > > > cause of these events as otherwise you will find your SystemCenterReporting > > > Database getting very big very quick!
> > > Best Regards,
> > > Andy.
> > > -- > > > Andy Dominey > > > MCSE
> > > "Jamie Bakert" wrote:
> > > > I have over 75,000 event entries over a week's time for event ID 25261. This > > > > is 75% of my total MOM activity.
> > > > These errors relate to IIS Application Log Server Staus errors of 404, 400, > > > > 403, 500, 503 etc. I would like to consolidate using the event consolidation > > > > rules in the IIS Management Pack or by my own to reduce the IIS error noise? > > > > How should I proceed?
"Jamie Bakert" wrote: > thanks Andy... > I have one more question: In the MOM Management Pack Guide, there are > references to Security error: 401, I do not have these Rules in either > Production or Test Environments. Do you know what they are referring to?
> "Andy Dominey" wrote:
> > There are a duplicate set of rules under Microsoft Windows Internet > > Information Services/Internet Information Services 6.0/Core Services/World > > Wide Web Pulishing Service. Have a look there and make sure they are disabled > > also.
> > Here are the rules that we have disabled under both of these sub folders:
> > > I have disabled both Collection types (All HTTP 400 Errors and ALL HTTP 500 > > > Errors) from the following rule group: Microsoft Windows Internet Information > > > Services/Internet Information Services 5.0/Core Services/World Wide Web > > > Pulishing Service and I countinue to get 400 and 500 errors showing up as > > > events in the Operators Console.
> > > "Andy Dominey" wrote:
> > > > Hi there,
> > > > We had the same problem with our MOM install and the best way for us to > > > > proceed was to disable the HTTP 400 error event rule to stop these errors > > > > coming in. If you really do need the rule enabled, you need to track down the > > > > cause of these events as otherwise you will find your SystemCenterReporting > > > > Database getting very big very quick!
> > > > Best Regards,
> > > > Andy.
> > > > -- > > > > Andy Dominey > > > > MCSE
> > > > "Jamie Bakert" wrote:
> > > > > I have over 75,000 event entries over a week's time for event ID 25261. This > > > > > is 75% of my total MOM activity.
> > > > > These errors relate to IIS Application Log Server Staus errors of 404, 400, > > > > > 403, 500, 503 etc. I would like to consolidate using the event consolidation > > > > > rules in the IIS Management Pack or by my own to reduce the IIS error noise? > > > > > How should I proceed?
"Andy Dominey" wrote: > Not off the top of my head but I will have a look for you.
> Cheers,
> Andy
> -- > Andy Dominey > MCSE
> "Jamie Bakert" wrote:
> > thanks Andy... > > I have one more question: In the MOM Management Pack Guide, there are > > references to Security error: 401, I do not have these Rules in either > > Production or Test Environments. Do you know what they are referring to?
> > "Andy Dominey" wrote:
> > > There are a duplicate set of rules under Microsoft Windows Internet > > > Information Services/Internet Information Services 6.0/Core Services/World > > > Wide Web Pulishing Service. Have a look there and make sure they are disabled > > > also.
> > > Here are the rules that we have disabled under both of these sub folders:
> > > > I have disabled both Collection types (All HTTP 400 Errors and ALL HTTP 500 > > > > Errors) from the following rule group: Microsoft Windows Internet Information > > > > Services/Internet Information Services 5.0/Core Services/World Wide Web > > > > Pulishing Service and I countinue to get 400 and 500 errors showing up as > > > > events in the Operators Console.
> > > > "Andy Dominey" wrote:
> > > > > Hi there,
> > > > > We had the same problem with our MOM install and the best way for us to > > > > > proceed was to disable the HTTP 400 error event rule to stop these errors > > > > > coming in. If you really do need the rule enabled, you need to track down the > > > > > cause of these events as otherwise you will find your SystemCenterReporting > > > > > Database getting very big very quick!
> > > > > > I have over 75,000 event entries over a week's time for event ID 25261. This > > > > > > is 75% of my total MOM activity.
> > > > > > These errors relate to IIS Application Log Server Staus errors of 404, 400, > > > > > > 403, 500, 503 etc. I would like to consolidate using the event consolidation > > > > > > rules in the IIS Management Pack or by my own to reduce the IIS error noise? > > > > > > How should I proceed?
|
