|
The following events are logged by this feature with the Performance Monitoring event category. |
Event ID |
Event Description |
Event Type |
Example |
12100 |
Performance counter fell below threshold |
Alert |
The performance counter "%5" (%1) fell below the threshold of %2, the current values are:
Average: %3 Minimum: %6 Maximum: %7
Counter Description: %8 |
12101 |
Performance counter (with instance) fell below threshold |
Alert |
The performance counter "%6" ("%1", instance "%2") fell below the threshold of %3, the current values are:
Average: %4 Minimum: %7 Maximum: %8
Bottom %9 instances: %10
Counter Description: %11 |
12102 |
Performance counter equals value |
Alert |
The performance counter "%4" (%1) equals the value of %2.
Counter Description: %5 |
12103 |
Instance of a performance equals value |
Alert |
The performance counter "%5" ("%1", instance "%2") equals the value of %3.
Counter Description: %6 |
12104 |
Performance counter exceeds threshold |
Alert |
The performance counter "%5" (%1) exceeded the threshold of %2, the current values are:
Average: %3 Minimum: %6 Maximum: %7
Counter Description: %8 |
12105 |
Instance of performance counter exceeds threshold |
Alert |
The performance counter "%6" ("%1", instance "%2") exceeded the threshold of %3, the current values are:
Average: %4 Minimum: %7 Maximum: %8
Top %9 instances: %10
Counter Description: %11 |
12107 |
Counter value is not equal to desired value |
Alert |
The performance counter "%1" (%2) on host %3 does not equal the value of %4, the current value is %5.
Counter Description: %6 |
12108 |
Counter value (instance) is not equal to desired value |
Alert |
The performance counter "%1" ("%2", instance "%3") on host %4 does not equal the value of %5, the current value is %6.
Counter Description: %7 |
12110 |
Required entry points could |
Error |
One or more required function entry points could not be found in the dynamic link library PDH.DLL. Please make sure that the latest version of PDH.DLL is installed on this machine, for example you may copy the DLL from another machine running a later Operating System. Performance monitoring cannot continue. |
12111 |
PDH.DLL could not be found |
Error |
The dynamic link library PDH.DLL could not be found and is required for performance monitoring. Please make sure that the latest version of PDH.DLL is installed on this machine, for example you may copy the DLL from another machine running a later Operating System. Performance monitoring cannot continue. |
12114 |
High handle count due to missing hotfix |
Warning |
The EventSentry agent is experiencing an unusually high handle count (%1 handles) and/or high memory usage (%2 bytes), which is most likely due to a known issue in Windows Server 2003 SP2 (http://support.microsoft.com/kb/938135). It is highly recommended that you navigate to http://support.microsoft.com/kb/938135 to download and install the hotfix to resolve this issue. It is not recommended that you continue to run the agent for an extended time period without installing the Microsoft hotfix.%n%nFailure to install the hotfix may eventually result in system instability or a system crash. Installation of the hotfix will require a reboot. |
12120 |
Counter value is between range |
Alert |
The performance counter "%6" (%1) is between the range of %2 and %3, the current values are:\
Average: %4 Minimum: %7 Maximum: %8
Counter Description: %8 |
12121 |
Counter value (instance) is between range |
Alert |
The performance counter "%7" ("%1", instance "%2") is between the range of %3 and %4, the current values are:
Average: %5 Minimum: %8 Maximum: %9
Counter Description: %10 |
12122 |
Counter value not between range |
Alert |
The performance counter "%6" (%1) is not between the range of %2 and %3, the current values are:
Average: %4 Minimum: %7 Maximum: %8
Counter Description: %9 |
12123 |
Counter value (instance) not between range |
Alert |
The performance counter "%7" ("%1", instance "%2") is not between the range of %3 and %4, the current values are:
Average: %5 Minimum: %8 Maximum: %9
View recent performance data from web reports:%6
Counter Description: %10 |
12150 |
Performance counter is back above threshold |
Alert cleared |
The performance counter "%4" (%1) is back above the threshold of %2, the current values are:
Average: %3 Minimum: %6 Maximum: %7
Counter Description: %8 |
12151 |
Instance of a performance counter is |
Alert cleared |
The performance counter "%5" ("%1", instance "%2") is back above the threshold of %3, the current values are:
Average: %4 Minimum: %7 Maximum: %8
Counter Description: %9 |
12154 |
Performance counter is back below threshold |
Alert cleared |
The performance counter "%4" (%1) is back below the threshold of %2, the current values are:
Average: %3 Minimum: %6 Maximum: %7
Counter Description: %8 |
12155 |
Instance of a performance counter is |
Alert cleared |
The performance counter "%5" ("%1", instance "%2") is back below or at the threshold of %3, the current values are:
Average: %4 Minimum: %7 Maximum: %8
Counter Description: %9 |
12156 |
A previously alerted performance counter is |
Alert cleared |
The performance counter "Process(*)\% Processor Time" (instance "setup") which previously exceeded the configured threshold, is not available anymore and will not be monitored. |
12157 |
Performance counter equals value again |
The performance counter "%1" (%2) on host %3 equals the value of %4 again.
Counter Description: %5 |
|
12158 |
Performance counter (instance) equals value again |
The performance counter "%1" ("%2", instance "%3") on host %4 equals the value of %5 again.
Counter Description: %6 |
|
12170 |
Counter value not between range |
Alert cleared |
The performance counter "%5" (%1) is not between the range of %2 and %3 anymore, the current values are:
Average: %4 Minimum: %6 Maximum: %7
Counter Description: %9 |
12171 |
Counter value (instance) not between range anymore |
Alert cleared |
The performance counter "%6" ("%1", instance "%2") is not between the range of %3 and %4 anymore, the current values are:
Average: %5 Minimum: %7 Maximum: %8
Counter Description: %10 |
12172 |
Counter value back between range |
Alert cleared |
The performance counter "%5" (%1) is back between the range of %2 and %3, the current values are:
Average: %4 Minimum: %6 Maximum: %7%
View recent performance data from web reports: %8
Counter Description: %9 |
12173 |
Counter value (instance) back between range |
Alert cleared |
The performance counter "%6" ("%1", instance "%2") is back between the range of %3 and %4, the current values are:
Average: %5 Minimum: %7 Maximum: %8
Counter Description: %10 |
12174 |
Counter leak detected |
Alert |
EventSentry detected a potential leak for performance counter "%1" ("%2") over the last %3 hours. During this time, the counter value increased from %4 to %5, with an average increase of %6%% per hour. Out of a total of %3 hours, the hourly average increased %7 times (%8%%).
Average: %9 Minimum: %10 Maximum: %11
If available, then you should review the performance data history in the web-based reporting to determine whether you need to take action. If this counter value is not leaking memory, then you may be able to adjust the leak detection settings in the management console.
View recent performance data from web reports: %12
Counter Description: %13 |
12175 |
Counter leak (instance) detected |
Alert |
EventSentry detected a potential leak for performance counter "%1" ("%2", instance "%13") over the last %3 hours. During this time, the counter value increased from %4 to %5, with an average increase of %6%% per hour. Out of a total of %3 hours, the hourly average increased %7 times (%8%%).
Average: %9 Minimum: %10 Maximum: %11
If available, then you should review the performance data history in the web-based reporting to determine whether you need to take action. If this counter value is not leaking memory, then you may be able to adjust the leak detection settings in the management console.
Counter Description: %14 |
12176 |
Counter leak is resolved |
Alert cleared |
The potential leak for performance counter "%1" ("%2") has been resolved, during the last %3 hours the hourly average increased %4 times. The current values are:
Average: %5 Minimum: %6 Maximum: %7
Counter Description:%9 |
12177 |
Counter leak (instance) is resolved |
Alert cleared |
The potential leak for performance counter "%1" ("%2", instance "%10") has been resolved, during the last %3 hours the hourly average increased %4 times. The current values are:
Average: %5 Minimum: %6 Maximum: %7
Counter Description: %9 |
|
Binary data of performance alerts (events) which are dispatched to an email action is converted to images which are subsequently attached to the email alerts. It is not shown as binary data. This is because the EventSentry agent, if configured, generates chart images which are then attached to the event as binary data. |
