none
event id 2, 106, 3028 RRS feed

  • 问题

  • 机器是windows2012 r2, exchange2013 cu11

    现在每次重启时,都会报event id 106和event id 2错误 ,机器每隔一段时间报event id 3028错误。

    event id 2
    Session "FastDocTracingSession" failed to start with the following error: 0xC0000035

    enent id 106
    Performance counter updating error. Counter name is Current Requests Pending, category name is MSExchange LiveIdBasicAuthentication. Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly.
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.get_RawValue()
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
    Last worker process info : System.ArgumentException: Process with an Id of 8464 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Processes running while Performance counter failed to update: 
    9048 MSExchangeHMHost
    1720 svchost
    856 services
    852 svchost
    3864 ccSvcHst
    24464 w3wp
    1704 HpAmsStor
    3424 SMSUtilityService
    5576 w3wp
    3848 conhost
    9880 Microsoft.Exchange.Imap4Service
    8580 w3wp
    13744 Microsoft.Exchange.UM.CallRouter
    1244 hpssaresponder
    3448 svchost
    7356 rundll32
    16748 svchost
    1660 dllhost
    3812 ConsoleAppMgr
    792 winlogon
    13692 WmiPrvSE
    10720 conhost
    1216 svchost
    10696 Microsoft.Exchange.Imap4
    5092 conduit
    11660 Microsoft.Exchange.Store.Worker
    1636 cissesrv
    12840 EdgeTransport
    3788 sftracing
    5076 scanningprocess
    4644 SAVFMSELog
    2056 hpwmistor
    5176 SMSvcHost
    2916 SMSvcHost
    18000 w3wp
    10672 Microsoft.Exchange.Store.Service
    3340 Locator
    4632 hpsmhd
    23164 w3wp
    5060 ConsoleAppMgr
    748 csrss
    2088 inetinfo
    6332 conhost
    8052 MSExchangeFrontendTransport
    13220 umservice
    12788 MSExchangeTransportLogSearch
    1580 certsrv
    6320 rotatelogs
    13644 UMWorkerProcess
    4592 conhost
    4156 Microsoft.Exchange.Directory.TopologyService
    3288 ProLiantMonitor
    7788 Microsoft.Exchange.EdgeSyncSvc
    1560 svchost
    2852 Microsoft.Exchange.Store.Worker
    11896 Microsoft.Exchange.RpcClientAccess.Service
    6292 conhost
    19648 TiWorker
    12224 MSExchangeSubmission
    4988 hpsmhd
    6280 rotatelogs
    4552 cmd
    4120 WMSvc
    5840 noderunner
    664 csrss
    4972 SAVFMSETask
    8844 MSExchangeThrottling
    2808 mqsvc
    15736 w3wp
    1512 pbeagent
    648 svchost
    3232 ForefrontActiveDirectoryConnector
    21764 w3wp
    15728 WmiPrvSE
    4340 SAVFMSECTRL
    11836 conhost
    4508 SAVFMSEUI
    8092 scanningprocess
    4072 SAVFMSESrv
    12860 conhost
    13120 w3wp
    5356 hpqams
    7860 Microsoft.Exchange.Search.Service
    9664 conhost
    608 svchost
    10520 Microsoft.Exchange.Pop3Service
    11812 Microsoft.Exchange.Pop3
    1036 svchost
    3620 conhost
    1460 spoolsv
    11372 Microsoft.Exchange.Pop3
    20852 w3wp
    5504 MSExchangeDagMgmt
    9640 MSExchangeHMWorker
    5328 rotatelogs
    22132 w3wp
    9200 Microsoft.Exchange.Imap4Service
    4456 SAVFMSESp
    11776 msexchangerepl
    1000 svchost
    11340 Microsoft.Exchange.Pop3Service
    4012 smhstart
    1856 hostcontrollerservice
    3148 svchost
    16508 svchost
    1540 pbeserver
    4432 SAVFMSESp
    11388 conhost
    760 wininit
    4856 WmiPrvSE
    4424 SAVFMSESp
    6388 MSExchangeDelivery
    4848 WmiPrvSE
    18204 w3wp
    7852 TrustedInstaller
    520 dwm
    19052 WmiPrvSE
    10000 conhost
    6120 noderunner
    944 svchost
    512 smss
    4440 SAVFMSESp
    16456 svchost
    3520 updateservice
    7224 rundll32
    2880 svchost
    10836 MSExchangeMailboxAssistants
    4796 SAVFMSESJM
    4360 noderunner
    8236 scanningprocess
    5072 conhost
    11248 MSExchangeMailboxReplication
    5212 rotatelogs
    11676 MSExchangeTransport
    3916 CmafReportSrv
    4448 SAVFMSESp
    2188 Microsoft.Exchange.Diagnostics.Service
    16408 WmiApSrv
    460 LogonUI
    12108 Microsoft.Exchange.ServiceHost
    1748 fms
    9936 Microsoft.Exchange.Imap4
    5616 noderunner
    13800 WmiPrvSE
    868 lsass
    4 System
    0 Idle
    Performance Counters Layout information: FileMappingNotFoundException for category MSExchange LiveIdBasicAuthentication : Microsoft.Exchange.Diagnostics.FileMappingNotFoundException: Cound not open File mapping for name Global\netfxcustomperfcounters.1.0msexchange liveidbasicauthentication. Error Details: 2
       at Microsoft.Exchange.Diagnostics.FileMapping.OpenFileMapping(String name, Boolean writable)
       at Microsoft.Exchange.Diagnostics.PerformanceCounterMemoryMappedFile.Initialize(String fileMappingName, Boolean writable)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetAllInstancesLayout(String categoryName)

    event id 3028
    Scenario: ProcessKillBit. Failed to read killbit list file because of exception System.IO.IOException: The process cannot access the file 'D:\Program Files\MicrosoftExchange Server\V15\ClientAccess\owa\prem\15.0.1156.6\ext\killbit\killbit.xml' because it is being used by another process.
       at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
       at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
       at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
       at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
       at System.IO.File.Open(String path, FileMode mode, FileAccess access, FileShare share)
       at Microsoft.Exchange.Data.ApplicationLogic.Extension.KillBitHelper.TryReadKillBitFile(Int32& refreshRate, DateTime& lastModifiedTime)

    2016年1月20日 1:25

全部回复

  • 你好,

    关于Event ID 106,你可以参考下面的文章:

    “Performance counter updating error" after you install an Exchange Server 2013 cumulative update

    关于Event ID 3028,你可以尝试下面的方法试试:

    1.备份报错路径中的killbit.xml文件,然后删除该文件并重启IIS,看是否有帮助,

    2.检查是否有任何三方的软件在同时运行,比如备份/杀毒软件等,如果有,暂时停用一段时间,看是否有改善;

    3.尝试以clean boot模式重启Exchange服务器,看该报错是否还存在,

    谢谢!


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Niko Cheng
    TechNet Community Support

    2016年1月21日 10:10
    版主
  • 关于Event ID 106,按“Performance counter updating error" after you install an Exchange Server 2013 cumulative update  执行中有以下错误 



    New-PerfCounters : The performance counter definition file is invalid.
    At D:\perfcounters.ps1:19 char:4
    +    New-PerfCounters -DefinitionFileName $f
    +    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidData: (:) [New-PerfCounters], TaskException
        + FullyQualifiedErrorId : [Server=XXX-TX9,RequestId=a50c6a7c-675d-436e-a1d5-2afb704a44de,TimeStamp=1/22/2016 2
       :12:05 AM] [FailureCategory=Cmdlet-TaskException] 329FCD67,Microsoft.Exchange.Management.Tasks.NewPerfCounters


    日志中有以下錯誤:

    Cmdlet failed. Cmdlet New-PerfCounters, parameters -DefinitionFileName "D:\Program Files\MicrosoftExchange Server\V15\Setup\Perf\InfoWorkerMultiMailboxSearchPerformanceCounters.xml".

    Cmdlet failed. Cmdlet New-PerfCounters, parameters -DefinitionFileName "D:\Program Files\MicrosoftExchange Server\V15\Setup\Perf\InfoWorkerMultiMailboxSearchPerformanceCounters.xml".

    (Process w3wp.exe, PID 18252) Connection leak detected for key XXX-tx.local/Users/XXXXXX-admin in Microsoft.Exchange.Configuration.Authorization.WSManBudgetManager class. Leaked Value 1.

    2016年1月22日 5:12
  • 关于Event ID 3028

    备份报错路径中的killbit.xml文件,然后删除该文件并重启IIS,还是一样

    机器安装有 Symantec_Mail_Security_For_Microsoft_Exchange_7.5.3.100 和Symantec_Endpoint_Protection_12.1.6

    2016年1月22日 5:14