Ask a questionAsk a question
 

QuestionProcessing Backlogged Events Taking a Long Time

  • Monday, October 05, 2009 2:05 AMClown God Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I've a client got this error message: The Windows Event Log Provider monitoring the System Event Log is 371035 minutes behind in processing events. This can occur when the provider is restarted after being offline for some time, or there are too many events to be handled by the workflow. One or more workflows were affected by this. Workflow name: Microsoft.SystemCenter.Essentials.AUAgentUpdate.InventoryCycleRule Instance name: HK-PO.hknpl.com.hk Instance ID: {8FF0AC3C-3B0C-BD01-4C2E-FB3659ACEC6B} Management group: SCESVR_MG

    I tried to reinstall the agent but still failed.

All Replies

  • Tuesday, October 06, 2009 10:03 AM.Anders BengtssonMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi,
     
    When you reinstall the agent, do you also run the cleanup tool from the resource kit?
    When you have re-installed the agent, does the same event show up direct again?

    Anders Bengtsson | Microsoft MVP - Operations Manager | http://www.contoso.se
  • Wednesday, October 07, 2009 4:28 AMClown God Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    How can I run the cleanup tool? I do not have the resource kit. I have got the SCE setup cd only.
    The same event will show up after 1 or 2 days later. But only that client have this problem. It is a Windows Vista machine.
    Thanks.
  • Wednesday, October 07, 2009 11:27 AMEric Zhang - MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi Clown,

    Please clear the Health Service Store cache on SCE Server.The default location is:C:\Program Files\System Center Essentials 2007\Health Service State\Health Service Store.Please cleanup the content in "Health Service Store" folder. (Please stop Opsmgr Health Service First).

    Also, Please try to clear the cache by running the SCE console from the command line with the option: /clearcache.

     

    Example:

    "C:\Program Files\System Center Essentials 2007\Microsoft.EnterpriseManagement.SCE.UI.Console.exe" /clearcache

  • Thursday, October 08, 2009 5:41 AMClown God Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I was stopped the Opsmgr Health Service. Deleted the files in the "Health Service Store" folder, and run the command line you tauch.
    But it seems cannot solve the problem. Also the management status of monitoring is "Error". All of the Windows Computer Tasks could run successfully, but unable to connect the Event Viewer in Computer Management. It says network path was not found...
    Thanks for help.
  • Monday, October 12, 2009 9:37 AMEric Zhang - MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi Clown,

    Did you create any custom rules?

    If you have for example configure a rule incorrect it can generate a local event on the agent machine very often and that can result in this event.
  • Tuesday, October 13, 2009 1:53 AMClown God Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    No, I did not...
    and I don't know how to create...

    How to check if there have any customize rules??

    Thanks a lot.
  • Tuesday, November 03, 2009 7:46 AMLaKa-3002 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I've a client got this error message: The Windows Event Log Provider monitoring the System Event Log is 371035 minutes behind in processing events. This can occur when the provider is restarted after being offline for some time, or there are too many events to be handled by the workflow. One or more workflows were affected by this. Workflow name: Microsoft.SystemCenter.Essentials.AUAgentUpdate.InventoryCycleRule Instance name: HK-PO.hknpl.com.hk Instance ID: {8FF0AC3C-3B0C-BD01-4C2E-FB3659ACEC6B} Management group: SCESVR_MG

    I tried to reinstall the agent but still failed.

    I have really the same problem. It only occurs, on Windows Server 2008 R2 and Windows 7 Clients. Any hint? Any help?
  • 1 hour 24 minutes agoxTucker01x Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I have the same problem with our Windows 7 clients. We are running mainly XP and 2003, with 2 Windows 7 machines.

    Alert Description:

    The Windows Event Log Provider monitoring the System Event Log is 679802382 minutes behind in processing
    events.  This can occur when the provider is restarted after being offline for some time, or there
    are too many events to be handled by the workflow.

    One or more workflows were affected by this.

    Workflow name: Microsoft.Windows.Client.Win7.Computer.RADAR_Error.Monitor

    Instance name: ukw00952.***.com

    Instance ID: {B9483A25-6CA0-7D30-1AD6-F676B0E1F970}

    Management group: UK-ABI-SIT01_MG

    Anyone have any idea?