none
Error messages in eventlog after installation of SNMP RRS feed

  • Question

  • hi

     

    I have installed SNMP on several windows 2008 servers. On all servers, I have the same problem. If the SNMP service starts, I can find the following entries in the application event log. It does not matter whether the service is configured or not.

     

    Log Name:      Application
    Source:        EvntAgnt
    Date:          11.03.2008 12:49:40
    Event ID:      3003
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      TESTSRV001
    Description:
    Error positioning to end of log file -- can't get oldest log record. Handle specified is 22282296. Return code from GetOldestEventLogRecord is 223.

     

    *************************************************************************************************************

    Log Name:      Application
    Source:        EvntAgnt
    Date:          11.03.2008 12:49:40
    Event ID:      3001
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          N/A
    Computer:      TESTSRV001
    Description:
    Log file not positioned at end.

     

    *************************************************************************************************************

    Log Name:      Application
    Source:        EvntAgnt
    Date:          11.03.2008 12:49:40
    Event ID:      2019
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      TESTSRV001
    Description:
    SNMP Event Log Extension Agent did not initialize correctly.

     

    *************************************************************************************************************

    Log Name:      Application
    Source:        EvntAgnt
    Date:          11.03.2008 12:49:40
    Event ID:      1020
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      TESTSRV001
    Description:
    Error processing registry parameters. Extension agent terminating.

     

    *************************************************************************************************************

    Log Name:      Application
    Source:        EvntAgnt
    Date:          11.03.2008 12:49:40
    Event ID:      2019
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      TESTSRV001
    Description:
    SNMP Event Log Extension Agent did not initialize correctly.

     

    *************************************************************************************************************

    Log Name:      Application
    Source:        EvntAgnt
    Date:          11.03.2008 12:49:40
    Event ID:      2020
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      TESTSRV001
    Description:
    SNMP Event Log Extension Agent has terminated.

     

    *************************************************************************************************************

     

    Any ideas?

    Thank’s a lot

    Martin Hofstetter

     

     

     

    Tuesday, March 11, 2008 1:38 PM

All replies

  •  

    Yes, I receive these same event log messages, as well.  we're running an HP Proliant DL380 G5, ver. 8.0 of SmartStart and Server 2008 x64 Standard.  After a clean install, the only features that were loaded by default were the SNMP features and those were the only event log messages that wer critical or warning.  I tried uninstalling the SNMP services and reinstalling them, but that had no effect.  Any help would be appreciated.  Thanks.

     

    Carl...

    Friday, March 14, 2008 5:34 PM
  • It's a known Bug in Windows 2008. Microsoft is working on a solution.

    Thursday, March 20, 2008 10:23 AM
  • Would you happen by any chance to have a link to this info.

    Thanks

    Thursday, March 27, 2008 9:59 PM
  • Same thins is happening with me, add another person to the pile waiting to see the fix.

     

    Thursday, March 27, 2008 11:32 PM
  • I'm having simmilar issue to this on Windows Server 2003 R2 SP2.

    Event Type:    Information
    Event Source:    EvntAgnt
    Event Category:    None
    Event ID:    2020
    Date:        3/04/2008
    Time:        6:38:40 AM
    User:        N/A
    Computer:    SIGGWY1
    Description:
    SNMP Event Log Extension Agent has terminated.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    ============================================================================
    Event Type:    Error
    Event Source:    EvntAgnt
    Event Category:    None
    Event ID:    2019
    Date:        3/04/2008
    Time:        6:38:40 AM
    User:        N/A
    Computer:    SIGGWY1
    Description:
    SNMP Event Log Extension Agent did not initialize correctly.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    ============================================================================
    Event Type:    Error
    Event Source:    EvntAgnt
    Event Category:    None
    Event ID:    1020
    Date:        3/04/2008
    Time:        6:38:40 AM
    User:        N/A
    Computer:    SIGGWY1
    Description:
    Error processing registry parameters. Extension agent terminating.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    ============================================================================
    Event Type:    Warning
    Event Source:    EvntAgnt
    Event Category:    None
    Event ID:    3001
    Date:        3/04/2008
    Time:        6:38:40 AM
    User:        N/A
    Computer:    SIGGWY1
    Description:
    Log file not positioned at end.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    ============================================================================
    Event Type:    Error
    Event Source:    EvntAgnt
    Event Category:    None
    Event ID:    3005
    Date:        3/04/2008
    Time:        6:38:40 AM
    User:        N/A
    Computer:    SIGGWY1
    Description:
    Error positioning to end of log file -- seek to end of log failed. Handle specified is 611688. Return code from ReadEventLog is 122.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    ============================================================================
    Event Type:    Information
    Event Source:    DrWatson
    Event Category:    None
    Event ID:    4097
    Date:        3/04/2008
    Time:        6:37:39 AM
    User:        N/A
    Computer:    SIGGWY1
    Description:
    The application, C:\WINDOWS\System32\snmp.exe, generated an application error The error occurred on 04/03/2008 @ 06:37:38.906 The exception generated was c0000005 at address 10007C28 (aus_snmp!SnmpExtensionTrap)

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    ---------------------------------
    hex dump goes here...
    ---------------------------------

    ============================================================================
    Event Type:    Error
    Event Source:    Application Error
    Event Category:    (100)
    Event ID:    1000
    Date:        3/04/2008
    Time:        6:37:30 AM
    User:        N/A
    Computer:    SIGGWY1
    Description:
    Faulting application snmp.exe, version 5.2.3790.3959, faulting module aus-snmp.dll, version 8.40.0.0, fault address 0x00007c28.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    ---------------------------------
    hex dump goes here...
    ---------------------------------

    ============================================================================

    This is client facing system in a datacenter, we rely on SNMP to monitor services and metrics on the box.  Kind of can't monitor the box when snmp is crashing all the time, sms messages about a crashed server at 4am are getting abit frustrating. 

    This is happeing on 2 servers, but the same version of R2 SP2.

    Any ideas?
    Thursday, April 3, 2008 3:44 AM
  • I'm having the same issue on HP Proliant DL385 G2 with Server 2008 x64 Enterprise and ver. 8.0 of SmartStart.  I'm not receiving SNMP traps after creating some test ones from the server.  I've been working with Microsoft on the issue, and a hotfix was released to me, but it did not fix the issue.  Microsoft SE will be calling me to get some more logs on the server.

    Wednesday, April 23, 2008 2:07 PM
  • Does anyone have any updates on this. I am experiencing the same issue on a Proliant DL 380 G5 with Windows Server 2008 Server Core x64.

    SNMP is needed if you want to install HP Insight Management Agents or for other administrative and monitoring purposes. If you use other forms or monitoring and administration you could just uninstall it.

     

    Wednesday, May 7, 2008 1:38 PM
  •  

    I think the issue revovles around the fact that the basic installation of SCCM 2007 was NOT compatiple with Server 2008.  It's only supported on Server 2008 as an SP1 installation.  If you're experiencing these issues, I would upgrade your SCCM 2007 server to SCCM 2007 SP1 and see if that makes any difference.  My end solution was to install it on a Server 2003 machine and the problem went away.
    Wednesday, May 7, 2008 3:37 PM
  • Thursday, May 8, 2008 9:03 PM
  • Hi,

    The KB article provided is for windows 2008 and Vista. Is there any hotfix for Windows 2003, especially R2 version with SP2.
    Wednesday, June 4, 2008 8:21 AM
  • The KB article provided is for windows 2008 and Vista. Is there any hotfix for Windows 2003, especially R2 version with SP2.
    Wednesday, June 4, 2008 8:41 AM
  •  I had the same problem on a 2003 server std edition (not R2) with SP2. This is running on a HP proliant DL360 G4 server. I installed the latest PSP 8.0 and the problem whent away. Most likely something was not working with the SNMP interaction with hte HP agents.
    Sunday, June 8, 2008 2:09 PM
  • I am facing problem on IBM X series 366 server. For Dell OMSA and SNMP; dell has released a hot fix.

    I haven't seen any thing for IBM yet :(

    Not sure if Microsoft is going to release a hotfix which can be applied cross platform.

    -Prashant
    Tuesday, June 10, 2008 6:24 AM
  • Wednesday, July 9, 2008 6:19 AM
  • This is crazy. I too am using HP DL380 G5. perhaps it's related or do you think it's just a common server? I can't believe this cuz I'm responsible for deploying a whole server farm and we're just starting the monitoring piece for my supervisor. This is not going to go over well that there's still no fix. That MSFT link only has hotfix for vista.
    Sunday, February 22, 2009 5:04 AM
  • I am having the same issue on Windows Web Server 2008 white box server. I was going to apply the fix in KB 950923, but when I go to download the hotfix the only platform version listed is Vista. Can someone confirm that this is also the hotfix for 2008?
    Wednesday, April 1, 2009 1:11 PM
  • I ran into the same dead end: the only available hotfix is for Vista.  And it doesn't seem to matter what hardware it's on, the problem is the same.  If they have it for Vista, why doesn't Microsoft have it for 2008 already?
    Thursday, April 9, 2009 3:16 PM
  • just download the fix for windows vista, install it on your Windows 2008 server , and everything works fine.
    Tuesday, April 14, 2009 3:13 PM
  • I received a non-public release of their windows 2008 hotfix for this. It worked great on my HP DL380 G5.

    However it doesn't work on the VMs I've created that have the same issue.

    Here's the link to the file they gave me. * Use at your own risk. I assume no responsibility for it's effects.

    http://drop.io/download/4a0c6949/e302320950003a6942fcb44dbbc458cdc09c1ad1/b5759cf0-22e6-012c-5ee5-f8087479e084/b6442f60-22e6-012c-9379-f47e654c92a6/snmp_hot-fix_windows6.0-kb950923-x64_j3r_ljn_i.msu/snmp_hot_fix_windows6_0_kb950923_x64_j3r_ljn_i_msu.msu

    Blake
    Thursday, May 14, 2009 6:58 PM
  • Hi, this is an old thread but seems to be a recurring unsolved problem.

    I am getting this error on a VMWare virtual machine - Windows Server 2003 R2 SP2 - which has been running error-free for 6 months. Then after a restart this weekend getting these errors in the log. The SNMP service is installed but not being used (pending another project).

    Event Type: Error
    Event Source: EvntAgnt
    Event Category: None
    Event ID: 3005
    Date:  1/31/2010
    Time:  8:22:24 AM
    User:  N/A
    Computer: VM-ONBASEP02
    Description:
    Error positioning to end of log file -- seek to end of log failed. Handle specified is 620296. Return code from ReadEventLog is 122.

    Event Type: Warning
    Event Source: EvntAgnt
    Event Category: None
    Event ID: 3001
    Date:  1/31/2010
    Time:  8:22:24 AM
    User:  N/A
    Computer: VM-ONBASEP02
    Description:
    Log file not positioned at end.

    Event Type: Error
    Event Source: EvntAgnt
    Event Category: None
    Event ID: 2019
    Date:  1/31/2010
    Time:  8:22:24 AM
    User:  N/A
    Computer: VM-ONBASEP02
    Description:
    SNMP Event Log Extension Agent did not initialize correctly.

    Event Type: Error
    Event Source: EvntAgnt
    Event Category: None
    Event ID: 1020
    Date:  1/31/2010
    Time:  8:22:24 AM
    User:  N/A
    Computer: VM-ONBASEP02
    Description:
    Error processing registry parameters. Extension agent terminating.

    Event Type: Error
    Event Source: EvntAgnt
    Event Category: None
    Event ID: 2019
    Date:  1/31/2010
    Time:  8:22:24 AM
    User:  N/A
    Computer: VM-ONBASEP02
    Description:
    SNMP Event Log Extension Agent did not initialize correctly.

    Event Type: Information
    Event Source: EvntAgnt
    Event Category: None
    Event ID: 2020
    Date:  1/31/2010
    Time:  8:22:24 AM
    User:  N/A
    Computer: VM-ONBASEP02
    Description:
    SNMP Event Log Extension Agent has terminated.

    Event Type: Error
    Event Source: EvntAgnt
    Event Category: None
    Event ID: 3005
    Date:  1/31/2010
    Time:  8:24:18 AM
    User:  N/A
    Computer: VM-ONBASEP02
    Description:
    Error positioning to end of log file -- seek to end of log failed. Handle specified is 620296. Return code from ReadEventLog is 122.

    Restarting the SNMP service just now, got this additional error:

    Event Type: Warning
    Event Source: EvntAgnt
    Event Category: None
    Event ID: 3006
    Date:  2/3/2010
    Time:  9:42:27 AM
    User:  N/A
    Computer: VM-ONBASEP02
    Description:
    Error reading log event record. Handle specified is 620296. Return code from ReadEventLog is 122.

    Any ideas?

    Thanks.

    Wednesday, February 3, 2010 4:07 PM
  • Hi, I tried but it shows this fix is unsupported for this system. Windows Vista fix cannot be applied on 2008 server.
    Wednesday, August 4, 2010 6:27 AM