locked
Unable to expand message 301 [301]. in desription RRS feed

  • Question

  • we are seeing somany alerts are generated without complete description,specialy for hardware related alerts.

    in operator console the description of the alert shows "Unable to expand message 301 [301].

    where as we are seeing complete description in server application log,this is only happens with Windows 2003 X64 agents.

    These alerts are generated from CPQTeam and NICAgent sources

    Any idea?

    Wednesday, July 14, 2010 4:33 PM

Answers

  • Hi,

    According to the following article:

    http://support.microsoft.com/kb/903847

    When Windows components and applications do not ship both versions of the message files, the 32-bit agent cannot access their event log messages. When this issue occurs, an event that looks similar to the following may be displayed in the description of an alert:


    Unable to expand message 301 [301].
    It may also apply to SCOM.

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Vivian Xing Monday, July 19, 2010 10:02 AM
    Friday, July 16, 2010 7:15 AM

All replies

  • What this means typically is that the event collection mechanism that adds boilerplate localized text to a message is missing the dll that contains that message.  In a 64 bit system, this could be (a guess on my part) a result of a 32 bit application DLL that holds the boiler plate text, or possibly permissions on the same DLL.

    The EventVwr applicaiton adds the boiler plate text when you look at a log entry.  So it is unlikely a missing DLL issue in this case if you can see the full text from EventVwr.  In that case, it is probably a permission problem on the DLL itself for the account that is running the health service agent or workflow.  Is this for an applicaiton that is locked down pretty tight, permissions wise?


    Microsoft Corporation
    Wednesday, July 14, 2010 5:18 PM
  • in EventVwr the exact error message is "

    NIC Agent: Connectivity has been lost for the NIC in slot 3, port 4. [SNMP TRAP: 18012 in CPQNIC.MIB].

    But in operator console we are seeing description as "

    Description:
    Unable to expand message 1291 [-1003158261] 3 4"
    Not only with this agent we are also seeing same issue with some other applications as well only on windows 2003 X64,
    do you have any idea which dll it could be for which permissions needs to be changed?
    "

    Thursday, July 15, 2010 2:46 PM
  • No, no idea. 
    Microsoft Corporation
    Thursday, July 15, 2010 4:50 PM
  • Hi,

    According to the following article:

    http://support.microsoft.com/kb/903847

    When Windows components and applications do not ship both versions of the message files, the 32-bit agent cannot access their event log messages. When this issue occurs, an event that looks similar to the following may be displayed in the description of an alert:


    Unable to expand message 301 [301].
    It may also apply to SCOM.

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Vivian Xing Monday, July 19, 2010 10:02 AM
    Friday, July 16, 2010 7:15 AM