Wednesday, May 16, 2012 11:14 AM
I have Windows 2008 server with SP2 with an application on. Every now and then, the application clients disconnect with an application session timeout and a look through the logs seems to show the server itself is freezing. As well as there being no application logs produced during this small window of "freezing" there are also no event logs.
Even the security event logs which run fairly frequently and consistently have a gap when the incident occurs.
So my question; I hope to capture some perfmon traces around the time of the "freezing" but with no events produced to trigger the running of these, I wonder if I can use Xpath to trigger the traces if an event isn't produced in a timely fashion - for instance, if a security logs isn't produced within 1 minute.
Now I understand if the server is freezing, maybe the trigger won’t fire immediately either, but at least I would capture the server status immediately after the event.
Alternatively, has anyone seen anything similar and taken a different approach to finding out why the server seems to have stopped processing??Thanks in advance.
Thursday, May 17, 2012 6:33 AMModerator
---So my question; I hope to capture some perfmon traces around the time of the "freezing" but with no events produced to trigger the running of these,
It’s not feasible cause Task Scheduler can trigger a task only when a specified event occurs.
---I wonder if I can use Xpath to trigger the traces if an event isn't produced in a timely fashion - for instance, if a security logs isn't produced within 1 minute.
I cann’t tell as I am not familiar with xml script. You might want to ask in Scripting Guy forum.
Besides the Security Logs, have you checked the Application logs with key words i.e. "Application Hang" or "Hanging Application"? With such a log, you can trigger a perfmon trace task in Task Scheduler.
- Marked As Answer by Cheers ZHANGMicrosoft Contingent Staff, Moderator Friday, May 25, 2012 6:56 AM
Thursday, May 17, 2012 12:58 PM
Thanks for answering.
There is nothing in any of the Windows event logs at the time of the "freeze" so short of scheduling perfmon to run every 30 seconds or so, (which obviously isn't feasible) I don't know how I'm going to capture any diagnostics.
I think this is one of those brick walls we all dread so much :)