Services events used in Office SharePoint Server 2007
Applies To: Office SharePoint Server 2007
This Office product will reach end of support on October 10, 2017. To stay supported, you will need to upgrade. For more information, see , Resources to help you upgrade your Office 2007 servers and clients.
Topic Last Modified: 2015-03-09
In this article:
Excel Calculation Services rules
InfoPath Forms Services rules
Search service rules
Single sign-on service rules
Windows Services rules
Excel Calculation Services rules
Excel Calculation Services is the server-side engine that performs the following tasks, either directly in the browser or through the different calls done by smart clients of the Web service:
Loading the workbook
Performing the calculations
Maintaining a session for the user, with a certain level of interactivity
Excel Services in Microsoft Office SharePoint Server 2007 work only with the trusted document library, and the administrators can enforce rules when connecting to external data sources.
The following table describes the rules pertaining to the events that occur while using Excel Calculation Services.
| Rule name | Rule properties |
|---|---|
Error communicating with Excel Calculation Services |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Error_communicating_with_Excel_Calculation_Services Description: This error occurs when the front-end Web server attempts to establish a connection to Excel Calculation Services, but a communication error occurred. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5239, 5240 Event Source: Office SharePoint Server |
Excel Calculation Services is not running locally |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Excel_Calculation_Services_is_not_running_locally Description: The load-balancing scheme is configured in Central Administration as local, but Excel Calculation Services is not running on the front-end Web server. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 2029, 5271 Event Source: Office SharePoint Server |
Excel Calculation Services not available |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Excel_Calculation_Services_not_available Description: This alert indicates that Excel Calculation Services is not running on any computer in the farm. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Critical Event ID: 5234 Event Source: Office SharePoint Server |
Invalid File Access method configured |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Invalid_File_Access_method_configured Description: Excel Calculation Services provides a setting for configuring the file access method that is used for UNC and HTTP trusted locations. If the file access method is configured as impersonation, Excel Calculation Services must be able to delegate the end-user credential for accessing files. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5557 Event Source: Office SharePoint Server |
Invalid SessionID in the request |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Invalid_SessionID_in_the_request Description: Invalid SessionID in the request. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Critical Event ID: 2041 Event Source: Office SharePoint Server |
Maximum memory configured for Excel Calculation Services has been exceeded |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Maximum_memory_configured_ for_Excel_Calculation_Services_has_been_exceeded Description: Excel Calculation Services provides a configurable setting for Maximum Private Bytes that is used by the application pool in which Excel Calculation Services runs. When the number of private bytes used by the application pool process exceeds the value of the Maximum Private Bytes setting, Excel Calculation Services stops processing requests for new sessions and only processes navigation and find requests on existing sessions. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5255 Event Source: Office SharePoint Server |
SSL is required but is not configured |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.SSL_is_required_but_is_not_configured Description: Excel Calculation Services is configured to use Secure Sockets Layer (SSL), also referred to as HTTPS, but SSL is not configured. This results in client requests being denied by Excel Calculation Services. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Critical Event ID: 2043 Event Source: Office SharePoint Server |
Unable to delegate credentials |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Unable_to_delegate_credentials Description: Excel Calculation Services is configured to use delegated credentials. This error indicates that the front-end Web server was unable to delegate end-user credentials to Excel Calculation Services. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5243 Event Source: Office SharePoint Server |
Unable to establish a connection with Excel Calculation Services |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Unable_to_establish_a_connection_with_Excel_Calculation_Services Description: The front-end Web server cannot establish a connection with Excel Calculation Services. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5231, 5232, 5233 Event Source: Office SharePoint Server |
Unauthorized attempt to access a session |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Unauthorized_attempt_to_access_a_session Description: When a user attempts to hijack another user’s session, Excel Calculation Services denies requests made by the user who does not own the session and logs an event in the Event log. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 2011 Event Source: Office SharePoint Server |
Workbook disk cache cannot be created |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Workbook_disk_cache_cannot_be_created Description: Excel Calculation Services uses the workbook disk cache to store workbooks that have been previously opened by user request. This cache is created on the hard disk of each computer running Excel Calculation Services. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Critical Event ID: 5226 Event Source: Office SharePoint Server |
Workbook disk cache is full |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Workbook_disk_cache_is_full Description: Excel Calculation Services uses the workbook disk cache to store workbooks that have been previously opened by user request. This error indicates that the workbook cache is full and that there is no space to load a workbook. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 2015, 2016 Event Source: Office SharePoint Server |
InfoPath Forms Services rules
InfoPath Forms Services is a server technology that makes it possible for users to fill out InfoPath forms in a Web browser. Users do not need to have InfoPath Forms Services installed on their computer to fill out this type of form, nor are they required to download anything extra from the Internet. All they need is access to a browser, such as Windows Internet Explorer, Apple Safari, or Mozilla Firefox.
InfoPath Forms Services also enables you to store and manage forms and form templates in a centralized location. InfoPath Forms Services is built on and requires Windows SharePoint Services 3.0, which enables you to publish form templates that you design to a common location across an organization. Additionally, users can submit forms to SharePoint libraries, which are folders where a collection of files is stored and where the files often use the same template. It is also possible to integrate forms into document management and life-cycle tasks such as workflow and rights management.
The following table describes the rules pertaining to the events that occur while using InfoPath Forms Services.
| Rule name | Rule properties |
|---|---|
A form template’s business logic caused an Out Of Memory exception |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.A_form_templates_business_logic_caused_an_OutOfMemory_exception Description: An Out of Memory exception has been generated from the form template’s business logic. This rule is turned off by default; to use this rule, the administrator must turn it on. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert type: Warning Event ID: 5342 Event source: Office SharePoint Server |
Exception occurred while processing an InfoPath form template request |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Exception_occurred_while_processing_an_InfoPath_form_template_request Description: An error occurred while InfoPath Forms Services was processing a form template request. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5367 Event Source: Office SharePoint Server |
InfoPath form templates have conflicting business logic assembly identities |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_form_templates_have_conflicting_business_logic_assembly_identities Description: When conflicting business logic assemblies in InfoPath form templates are identified, an entry is logged in the Event log. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 5733 Event Source: Office SharePoint Server |
InfoPath Forms Services business logic attempted to store a nonserializable object |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_business_logic_attempted_to_store_a_nonserializable_object Description: This error occurs when business logic attempts to store a nonserializable type in the FormState property bag. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 5734 Event Source: Office SharePoint Server |
InfoPath Forms Services business logic exceeded the maximum limit of operations |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_business_logic_exceeded_the_maximum_limit_of_operations Description: This alert indicates that an error occurred in the business logic of a form. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 5340 Event Source: Office SharePoint Server |
InfoPath Forms Services business logic exception occurred while loading a form template |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_business_logic_exception_occurred_while_loading_a_form_template Description: The form template used by InfoPath Forms Services cannot be loaded due to a business logic exception. The logged event identifies the form template. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 5343 Event Source: Office SharePoint Server |
InfoPath Forms Services calculations exceeded the maximum limit |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_calculations_exceeded_the_maximum_limit Description: This alert indicates that an error occurred when a form hosted by InfoPath Forms Services was running calculations. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5338 Event Source: Office SharePoint Server |
InfoPath Forms Services cannot find or load ifsFileNames.xml |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_cannot_find_or_load_ifsFileNames.xml Description: InfoPath Forms Services includes a file name ifsFileNames.xml that contains pointers to downloadable files such as scripts and images for forms. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5369 Event Source: Office SharePoint Server |
InfoPath Forms Services event counter mismatch |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_event_counter_mismatch Description: This alert indicates that the current version of session state does not match the version that the server running InfoPath Forms Services was expecting. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5760 Event Source: Office SharePoint Server |
InfoPath Forms Services failed to load a form template |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_failed_to_load_a_form_template Description: This alert indicates that InfoPath Forms Services cannot load a particular form template. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 7056 Event Source: Office SharePoint Server |
InfoPath Forms Services found an unexpected session state version |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_found_an_unexpected_session_state_version Description: InfoPath Forms Services has found a session state entry from a version of InfoPath Forms Services which is a later version than the one that is currently running. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5757 Event Source: Office SharePoint Server |
InfoPath Forms Services postback failure |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_postback_failure Description: This alert indicates that an error occurred while a form request was being processed by InfoPath Forms Services. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5374 Event Source: Office SharePoint Server |
InfoPath Forms Services rules exceeded the maximum limit |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_rules_exceeded_the_maximum_limit Description: This alert indicates that an error occurred in one of the form template’s rules. Specifically, the number of rule actions for a single update in the data has exceeded the maximum limit. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 5339 Event Source: Office SharePoint Server |
InfoPath Forms Services user has exceeded the maximum number of actions per postback |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_user_has_exceeded_the_maximum_number_of_actions_per_postback Description: This alert indicates that a user has exceeded the threshold set for the number of form actions allowed per postback. When this condition occurs, InfoPath Forms Services terminates the user session to protect the server. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 5737 Event Source: Office SharePoint Server |
InfoPath Forms Services user has exceeded the maximum session state size |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_user_has_exceeded_the_maximum_session_state_size Description: This alert indicates that a user has exceeded the threshold set in InfoPath Forms Services for the maximum amount of data that can be stored in a form session state. When this condition occurs, InfoPath Forms Services terminates the user session to protect the server and logs an error in the Events log. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 7083 Event Source: Office SharePoint Server |
InfoPath Forms Services was running business logic when ASP.NET request timed out |
Rule ID:Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_was_running_business_logic_when_ASP.NET_request_timed_out Description: This alert indicates that the value set in the ASP .NET request timeout was exceeded when an InfoPath Forms Services form template was running business logic. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 5341 Event Source: Office SharePoint Server |
User has exceeded the maximum allowable number of postbacks |
Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.User_has_exceeded_the_maximum_allowable_number_of_postbacks Description: A user has exceeded the maximum number of postbacks configured for the InfoPath Forms Services. When this condition occurs, InfoPath Forms Services terminates the user session to protect the server. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 5736 Event Source: Office SharePoint Server |
Search service rules
The Search component of Office SharePoint Server 2007 is enhanced to provide the following:
Consistent and familiar search experience
Increased relevance of search results
Capability to search for people and expertise
Ability to index and search data in line-of-business (LOB) applications
Improved manageability and extensibility
The following table describes the rules pertaining to the events that occur while using the Search service.
| Rule name | Rule properties |
|---|---|
Crawl failed because no contact e-mail is set |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Crawl_failed_because_no_contact_e_mail_is_set Description: A contact e-mail address is not set for the Office SharePoint Server Search service. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 2448 Event Source: Office SharePoint Server Search |
Crawler cannot read from registry |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Crawler_cannot_read_from_registry Description: The crawler component of the search uses the Office SharePoint Server Search (OSearch) service to read its settings from the Windows registry of the index server. This alert indicates that the crawler was unable to read from the registry in order to load configuration information needed by the OSearch service. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 2438 Event Source: Office SharePoint Server Search |
Crawler exception |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Crawler_exception Description: The crawler component of Search uses the Office SharePoint Server Search (OSearch) service to read its settings from the Windows registry of the index server. This alert indicates that an unexpected error has occurred in the crawler. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 2414 Event Source: Office SharePoint Server Search |
Encountered errors while indexing anchor text |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Encountered_errors_while_indexing_anchor_text Description: This alert indicates that an error in the ranking calculation occurred while the Office SharePoint Server Search (OSearch) service was updating the content index. This alert occurs at the end of a crawl that contains anchor text calculation errors for any page that was crawled. The severity of this error is determined by how many pages are affected. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 2499 Event Source: Office SharePoint Server Search |
Failed to load index |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Failed_to_load_index Description: This alert indicates that the Office SharePoint Server Search (OSearch) service could not load the index. This can occur on either a query server or an index server. After this error occurs, the Search service attempts to retry loading the index every 15 minutes, and the event will be logged again for subsequent failures. If the oldest occurrence of this event in the Event log is older than 15 minutes, this means that the retry of the index load succeeded. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Critical Event ID: 4127 Event Source: Office SharePoint Server Search |
Failed to load protocol handler |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Failed_to_load_protocol_handler Description: Office SharePoint Server 2007 uses protocol handlers to access the content that you want to crawl. This alert indicates that the protocol handler cannot be loaded. This means that documents that require the protocol handler cannot be crawled. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 2483, 2484 Event Source: Office SharePoint Server Search |
Failed to load word breaker |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Failed_to_load_word_breaker Description: This alert indicates that the word breaker for a particular language could not be loaded and, therefore, documents that require this word breaker will be crawled using a language-neutral word breaker. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 2462 Event Source: Office SharePoint Server Search |
Index is corrupt |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Index_is_corrupt Description: The Office SharePoint Server Search (OSearch) service has detected that the content index is corrupt. This can occur on either an index server or a query server. When this error occurs on an index server, the OSearch service automatically attempts to reset and start a full update of the content index. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 4138 Event Source: Office SharePoint Server Search |
Instance of search could not be initialized |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Instance_of_search_could_not_be_initialized Description: This alert indicates that the configuration information for search could not be loaded from the SQL Server computer, which prevented an instance of the Search service from initializing. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 2458 Event Source: Office SharePoint Server Search |
Internal plug-in error |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Internal_plug_in_error Description: A plug-in is a component of the search indexer that is used to process content and properties from crawled items. When this error occurs, a Dr. Watson report is usually created and an entry containing the call stack of the exception is written to the Event log. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: RepeatCountEqual5 Event Source: Office SharePoint Server Search Master merge error |
Master merge error |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Master_merge_error Description: A master merge is the process of merging a group of indexes into a single index. This process occurs on index servers when you crawl content and on query servers when the index is propagated from the index server. If this alert occurs repeatedly, the Office SharePoint Server Search (OSearch) service will eventually be unable to index new documents. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 4105, 4106 Event Source: Office SharePoint Server Search |
Propagation failed to communicate with a query server |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Propagation_failed_to_communicate_with_a_query_server Description: This alert indicates that the index server was unable to propagate the content index to a particular query server. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 42 Event Source: Office SharePoint Server Search |
Propagation of the content index paused because of a lagging query server |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Propagation_of_the_content_index_paused_because_of_a_lagging_query_server Description: If your search-enabled server farm contains a query server that is separate from the index server, the Office SharePoint Server Search (OSearch) service automatically propagates a copy of the index from the index server to each query server simultaneously. In order to maintain consistent content among the query servers, the propagation has been paused to accommodate one query server that is slow to receive the updated index from the index server. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 43 Event Source: Office SharePoint Server Search |
Publication of ranking information failed |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Publication_of_ranking_information_failed Description: After crawled content is indexed, relevant anchor text is then indexed. This alert indicates that publication of anchor text failed. In this case, the index might be available but the relevance of search results will be diminished to some degree. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 4169, 4170 Event Source: Office SharePoint Server Search |
Query server removed from rotation |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Query_server_removed_from_rotation Description: This alert indicates that a query server has been removed from the load-balanced rotation because IIS has encountered errors while communicating with the query server. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 10038 Event Source: Office SharePoint Server Search |
Search – Number of queries towards an index |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Search_Number_of_queries_towards_an_index Description: This rule uses the Total # of queries counter to count the total number of queries since the index was mounted. Rule Category: Performance Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Not applicable |
Search – Query Rate |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Search_Query_Rate Description: This rule uses the Queries counter to measure the number of queries posted to the server. Rule Category: Performance Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Not applicable |
Search – Succeeded Queries |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Search_Succeeded_Queries Description: This rule uses the Queries Succeeded counter to count the number of queries that produce successful searches. Rule Category: Performance Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Not applicable |
Search – Total Number of Documents |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Search_Total_Number_of_Documents Description: This rule uses the Total # documents counter to count the total number of documents in the index. Rule Category: Performance Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning |
The last query server was removed from rotation |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.The_last_query_server_was_removed_from_rotation Description: This alert indicates that the last query server has been removed from the load-balanced rotation. This means that users cannot perform search queries until this issue is resolved. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Critical Event ID: 10040 Event Source: Office SharePoint Server Search |
Single sign-on service rules
Office SharePoint Server 2007 provides a default single sign-on (SSO) service for storing and mapping the credentials to be used in connecting with third-party or back-end systems. Office SharePoint Server 2007 provides a mechanism called pluggable SSO, to specify an alternate SSO Provider to the standard SSO Provider instead of maintaining credential mapping in two places.
The following table describes the rules pertaining to the events that occur while using SSO.
| Rule name | Rule properties |
|---|---|
Error adding enterprise application definition |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Error_adding_enterprise_application_definition Description: An error occurred while using Microsoft Single Sign-On (SSOSrv) and enterprise application definitions. This error indicates that the inputs to the Single Sign-On object model are invalid. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5 Event Source: Office SharePoint Server |
Error deleting enterprise application definition |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Error_deleting_enterprise_application_definition Description: An error occurred while using Microsoft Single Sign-On (SSOSrv) and enterprise application definitions. The requested application does not exist. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: Repeat CountGreaterEqual5 Event Source: Office SharePoint Server |
Error retrieving credentials |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Error_retreiving_credentials Description: An error occurred while attempting to retrieve credentials while using Microsoft Single Sign-On (SSOSrv) with an enterprise application definition. The credentials for a user cannot be retrieved. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: Repeat CountGreaterEqual10 Event Source: Office SharePoint Server |
Error retrieving credentials – Consolidator |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Error_retreiving_credentials_Consolidator Description: An error occurred when attempting to retrieve credentials while using Microsoft Single Sign-On with an enterprise application definition because the credentials for the user cannot be retrieved. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 1012 Event Source: Office SharePoint Server |
Error retrieving cryptographic sign |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Error_retreiving_cryptographic_sign Description: An error occurred while using Microsoft Single Sign-On (SSOSrv) and the cryptographic sign. An unauthorized user may have attempted to access the Single Sign-On database. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: Repeat CountGreaterEqual5 Event Source: Office SharePoint Server |
Failed to load Single Sign-On configuration settings |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Failed_to_load_Single_Sign_On_configuration_settings Description: The Microsoft Single Sign-On (SSOSrv) service failed to load the configuration settings from the Single Sign-On database. The Single Sign-On database may be unavailable, or the Single Sign-On administrator account may have changed. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 1026 Event Source: Office SharePoint Server |
Internal Single Sign-On service error |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Internal_Single_Sign_On_service_error Description: An unexpected error occurred while using Microsoft Single Sign-On (SSOSrv). Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 1019 Event Source: Office SharePoint Server |
Microsoft Single Sign-On service failed to start |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Microsoft_Single_Sign_On_service_failed_to_start Description: The Microsoft Single Sign-On (SSOSrv) service did not start. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 1007 Event Source: Office SharePoint Server |
Microsoft Single Sign-On service failed to stop |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Microsoft_Single_Sign_On_service_failed_to_stop Description: An error occurred while using Microsoft Single Sign-On (SSOSrv). This alert indicates that an administrator attempted to stop the SSOSrv service, but the service failed to stop. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 1008 Event Source: Office SharePoint Server |
Remote Procedure Call service failed to start |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Remote_Procedure_Call_service_failed_to_start Description: When the Microsoft Single Sign-On (SSOSrv) service starts up, it attempts to start the Remote Procedure Call (RPC) service. This alert indicates that the RPC service failed to start, which indicates a problem with the RPC subsystem of the operating system. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 1009 Event Source: Office SharePoint Server |
Remote Procedure Call service failed to stop |
Rule ID: Microsoft.Office.SharePoint.Server.2007.Remote_Procedure_Call_service_failed_to_stop Description: An error occurred while the Microsoft Single Sign-On service attempted to call the Remote Procedure Call (RPC) service. An unauthorized user may have attempted to access the Single Sign-On database. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 1010 Event Source: Office SharePoint Server |
Single Sign-On audit failure |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Single_Sign_On_audit_failure Description: An error occurred while the Microsoft Single Sign-On (SSOSrv) service was attempting to insert a row into the Audit table in Microsoft SQL Server. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 1022 Event Source: Office SharePoint Server |
Single Sign-On failure |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Single_Sign_On_failure Description: The Microsoft Single Sign-On service is a mechanism used to authenticate a user only once to allow the user to gain access to all computers and systems. Excel Services uses single sign-on for authenticating with external data sources. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Information Event ID: 4969 Event Source: Office SharePoint Server |
Windows Services rules
Windows Services are applications that are automatically launched, when the computer is starting up. They operate in the background, while the Windows operating system is running. Windows Services are useful as long-running and independent applications that do not involve user interaction, because they require a significant part of the memory and processing resources of the servers. SharePoint sometimes requires windows services to run the SharePoint processes. Windows Services ensure that these tasks function in periods of low-user load. Windows Services can also manage SharePoint activities, because they run independently of Windows SharePoint Services (and Office SharePoint Server), depending exclusively on the Windows operating system infrastructure.
The following table describes the rules pertaining to the events that occur while using Windows Services.
| Rule name | Rule properties |
|---|---|
Microsoft.Office.SharePoint.Server.2007.The_Microsoft_Single_Sign-on_Service_is_not_running |
Rule ID: Microsoft.Office.SharePoint.Server.2007.The_Microsoft_Single_Sign-on_Service_is_not_running Description: This rule monitors the state of the Single Sign-On service. Ensure that the Single Sign-On service is enabled and started for the farm if it is required. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 21207 Event Source: SSOSrv |
Site Synch failed |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Site_Synch_failed Description: A particular site collection encountered a failure during profile and membership synchronization. The profile synchronization timer job will attempt to synchronize this site collection again when it is next executed. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5553 Event Source: Office SharePoint Server |
Sweep Synch failed |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Sweep_Synch_failed Description: A failure was encountered while synchronizing user profiles for new active users on a content database. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5554 Event Source: Office SharePoint Server |
Synch Job Scheduler failed |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Synch_Job_Scheduler_failed Description: A failure occurred while an administrator was creating and scheduling a profile synchronization timer job for synchronizing with Web applications. The failed profile synchronization timer job will attempt to schedule these again when it is rerun. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5556 Event Source: Office SharePoint Server |
The Office SharePoint Server Search State |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.The_Office_SharePoint_Server_Search_State Description: This rule monitors the state of the Office SharePoint Server Search Service. Ensure that the Office SharePoint Server Search Service is enabled and started for the farm if it is required. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 21207 Event Source: OSearch |