Share via


Services events used in Office SharePoint Server 2007

Applies To: Office SharePoint Server 2007

This Office product will reach end of support on October 10, 2017. To stay supported, you will need to upgrade. For more information, see , Resources to help you upgrade your Office 2007 servers and clients.

 

Topic Last Modified: 2015-03-09

In this article:

  • Excel Calculation Services rules

  • InfoPath Forms Services rules

  • Search service rules

  • Single sign-on service rules

  • Windows Services rules

Excel Calculation Services rules

Excel Calculation Services is the server-side engine that performs the following tasks, either directly in the browser or through the different calls done by smart clients of the Web service:

  • Loading the workbook

  • Performing the calculations

  • Maintaining a session for the user, with a certain level of interactivity

Excel Services in Microsoft Office SharePoint Server 2007 work only with the trusted document library, and the administrators can enforce rules when connecting to external data sources.

The following table describes the rules pertaining to the events that occur while using Excel Calculation Services.

Rule name Rule properties

Error communicating with Excel Calculation Services

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Error_communicating_with_Excel_Calculation_Services

Description: This error occurs when the front-end Web server attempts to establish a connection to Excel Calculation Services, but a communication error occurred.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5239, 5240

Event Source: Office SharePoint Server

Excel Calculation Services is not running locally

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Excel_Calculation_Services_is_not_running_locally

Description: The load-balancing scheme is configured in Central Administration as local, but Excel Calculation Services is not running on the front-end Web server.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 2029, 5271

Event Source: Office SharePoint Server

Excel Calculation Services not available

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Excel_Calculation_Services_not_available

Description: This alert indicates that Excel Calculation Services is not running on any computer in the farm.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Critical

Event ID: 5234

Event Source: Office SharePoint Server

Invalid File Access method configured

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Invalid_File_Access_method_configured

Description: Excel Calculation Services provides a setting for configuring the file access method that is used for UNC and HTTP trusted locations. If the file access method is configured as impersonation, Excel Calculation Services must be able to delegate the end-user credential for accessing files.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5557

Event Source: Office SharePoint Server

Invalid SessionID in the request

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Invalid_SessionID_in_the_request

Description: Invalid SessionID in the request.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Critical

Event ID: 2041

Event Source: Office SharePoint Server

Maximum memory configured for Excel Calculation Services has been exceeded

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Maximum_memory_configured_ for_Excel_Calculation_Services_has_been_exceeded

Description: Excel Calculation Services provides a configurable setting for Maximum Private Bytes that is used by the application pool in which Excel Calculation Services runs. When the number of private bytes used by the application pool process exceeds the value of the Maximum Private Bytes setting, Excel Calculation Services stops processing requests for new sessions and only processes navigation and find requests on existing sessions.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5255

Event Source: Office SharePoint Server

SSL is required but is not configured

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.SSL_is_required_but_is_not_configured

Description: Excel Calculation Services is configured to use Secure Sockets Layer (SSL), also referred to as HTTPS, but SSL is not configured. This results in client requests being denied by Excel Calculation Services.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Critical

Event ID: 2043

Event Source: Office SharePoint Server

Unable to delegate credentials

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Unable_to_delegate_credentials

Description: Excel Calculation Services is configured to use delegated credentials. This error indicates that the front-end Web server was unable to delegate end-user credentials to Excel Calculation Services.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5243

Event Source: Office SharePoint Server

Unable to establish a connection with Excel Calculation Services

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Unable_to_establish_a_connection_with_Excel_Calculation_Services

Description: The front-end Web server cannot establish a connection with Excel Calculation Services.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5231, 5232, 5233

Event Source: Office SharePoint Server

Unauthorized attempt to access a session

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Unauthorized_attempt_to_access_a_session

Description: When a user attempts to hijack another user’s session, Excel Calculation Services denies requests made by the user who does not own the session and logs an event in the Event log.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 2011

Event Source: Office SharePoint Server

Workbook disk cache cannot be created

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Workbook_disk_cache_cannot_be_created

Description: Excel Calculation Services uses the workbook disk cache to store workbooks that have been previously opened by user request. This cache is created on the hard disk of each computer running Excel Calculation Services.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Critical

Event ID: 5226

Event Source: Office SharePoint Server

Workbook disk cache is full

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Workbook_disk_cache_is_full

Description: Excel Calculation Services uses the workbook disk cache to store workbooks that have been previously opened by user request. This error indicates that the workbook cache is full and that there is no space to load a workbook.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 2015, 2016

Event Source: Office SharePoint Server

InfoPath Forms Services rules

InfoPath Forms Services is a server technology that makes it possible for users to fill out InfoPath forms in a Web browser. Users do not need to have InfoPath Forms Services installed on their computer to fill out this type of form, nor are they required to download anything extra from the Internet. All they need is access to a browser, such as Windows Internet Explorer, Apple Safari, or Mozilla Firefox.

InfoPath Forms Services also enables you to store and manage forms and form templates in a centralized location. InfoPath Forms Services is built on and requires Windows SharePoint Services 3.0, which enables you to publish form templates that you design to a common location across an organization. Additionally, users can submit forms to SharePoint libraries, which are folders where a collection of files is stored and where the files often use the same template. It is also possible to integrate forms into document management and life-cycle tasks such as workflow and rights management.

The following table describes the rules pertaining to the events that occur while using InfoPath Forms Services.

Rule name Rule properties

A form template’s business logic caused an Out Of Memory exception

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.A_form_templates_business_logic_caused_an_OutOfMemory_exception

Description: An Out of Memory exception has been generated from the form template’s business logic. This rule is turned off by default; to use this rule, the administrator must turn it on.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert type: Warning

Event ID: 5342

Event source: Office SharePoint Server

Exception occurred while processing an InfoPath form template request

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.Exception_occurred_while_processing_an_InfoPath_form_template_request

Description: An error occurred while InfoPath Forms Services was processing a form template request.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5367

Event Source: Office SharePoint Server

InfoPath form templates have conflicting business logic assembly identities

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_form_templates_have_conflicting_business_logic_assembly_identities

Description: When conflicting business logic assemblies in InfoPath form templates are identified, an entry is logged in the Event log.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 5733

Event Source: Office SharePoint Server

InfoPath Forms Services business logic attempted to store a nonserializable object

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_business_logic_attempted_to_store_a_nonserializable_object

Description: This error occurs when business logic attempts to store a nonserializable type in the FormState property bag.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 5734

Event Source: Office SharePoint Server

InfoPath Forms Services business logic exceeded the maximum limit of operations

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_business_logic_exceeded_the_maximum_limit_of_operations

Description: This alert indicates that an error occurred in the business logic of a form.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 5340

Event Source: Office SharePoint Server

InfoPath Forms Services business logic exception occurred while loading a form template

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_business_logic_exception_occurred_while_loading_a_form_template

Description: The form template used by InfoPath Forms Services cannot be loaded due to a business logic exception. The logged event identifies the form template.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 5343

Event Source: Office SharePoint Server

InfoPath Forms Services calculations exceeded the maximum limit

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_calculations_exceeded_the_maximum_limit

Description: This alert indicates that an error occurred when a form hosted by InfoPath Forms Services was running calculations.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5338

Event Source: Office SharePoint Server

InfoPath Forms Services cannot find or load ifsFileNames.xml

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_cannot_find_or_load_ifsFileNames.xml

Description: InfoPath Forms Services includes a file name ifsFileNames.xml that contains pointers to downloadable files such as scripts and images for forms.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5369

Event Source: Office SharePoint Server

InfoPath Forms Services event counter mismatch

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_event_counter_mismatch

Description: This alert indicates that the current version of session state does not match the version that the server running InfoPath Forms Services was expecting.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5760

Event Source: Office SharePoint Server

InfoPath Forms Services failed to load a form template

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_failed_to_load_a_form_template

Description: This alert indicates that InfoPath Forms Services cannot load a particular form template.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 7056

Event Source: Office SharePoint Server

InfoPath Forms Services found an unexpected session state version

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_found_an_unexpected_session_state_version

Description: InfoPath Forms Services has found a session state entry from a version of InfoPath Forms Services which is a later version than the one that is currently running.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5757

Event Source: Office SharePoint Server

InfoPath Forms Services postback failure

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_postback_failure

Description: This alert indicates that an error occurred while a form request was being processed by InfoPath Forms Services.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5374

Event Source: Office SharePoint Server

InfoPath Forms Services rules exceeded the maximum limit

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_rules_exceeded_the_maximum_limit

Description: This alert indicates that an error occurred in one of the form template’s rules. Specifically, the number of rule actions for a single update in the data has exceeded the maximum limit.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 5339

Event Source: Office SharePoint Server

InfoPath Forms Services user has exceeded the maximum number of actions per postback

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_user_has_exceeded_the_maximum_number_of_actions_per_postback

Description: This alert indicates that a user has exceeded the threshold set for the number of form actions allowed per postback. When this condition occurs, InfoPath Forms Services terminates the user session to protect the server.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 5737

Event Source: Office SharePoint Server

InfoPath Forms Services user has exceeded the maximum session state size

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_user_has_exceeded_the_maximum_session_state_size

Description: This alert indicates that a user has exceeded the threshold set in InfoPath Forms Services for the maximum amount of data that can be stored in a form session state. When this condition occurs, InfoPath Forms Services terminates the user session to protect the server and logs an error in the Events log.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 7083

Event Source: Office SharePoint Server

InfoPath Forms Services was running business logic when ASP.NET request timed out

Rule ID:Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.InfoPath_Forms_Services_was_running_business_logic_when_ASP.NET_request_timed_out

Description: This alert indicates that the value set in the ASP .NET request timeout was exceeded when an InfoPath Forms Services form template was running business logic.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 5341

Event Source: Office SharePoint Server

User has exceeded the maximum allowable number of postbacks

Rule ID: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.User_has_exceeded_the_maximum_allowable_number_of_postbacks

Description: A user has exceeded the maximum number of postbacks configured for the InfoPath Forms Services. When this condition occurs, InfoPath Forms Services terminates the user session to protect the server.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 5736

Event Source: Office SharePoint Server

Search service rules

The Search component of Office SharePoint Server 2007 is enhanced to provide the following:

  • Consistent and familiar search experience

  • Increased relevance of search results

  • Capability to search for people and expertise

  • Ability to index and search data in line-of-business (LOB) applications

  • Improved manageability and extensibility

The following table describes the rules pertaining to the events that occur while using the Search service.

Rule name Rule properties

Crawl failed because no contact e-mail is set

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Crawl_failed_because_no_contact_e_mail_is_set

Description: A contact e-mail address is not set for the Office SharePoint Server Search service.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 2448

Event Source: Office SharePoint Server Search

Crawler cannot read from registry

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Crawler_cannot_read_from_registry

Description: The crawler component of the search uses the Office SharePoint Server Search (OSearch) service to read its settings from the Windows registry of the index server. This alert indicates that the crawler was unable to read from the registry in order to load configuration information needed by the OSearch service.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 2438

Event Source: Office SharePoint Server Search

Crawler exception

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Crawler_exception

Description: The crawler component of Search uses the Office SharePoint Server Search (OSearch) service to read its settings from the Windows registry of the index server. This alert indicates that an unexpected error has occurred in the crawler.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 2414

Event Source: Office SharePoint Server Search

Encountered errors while indexing anchor text

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Encountered_errors_while_indexing_anchor_text

Description: This alert indicates that an error in the ranking calculation occurred while the Office SharePoint Server Search (OSearch) service was updating the content index. This alert occurs at the end of a crawl that contains anchor text calculation errors for any page that was crawled. The severity of this error is determined by how many pages are affected.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 2499

Event Source: Office SharePoint Server Search

Failed to load index

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Failed_to_load_index

Description: This alert indicates that the Office SharePoint Server Search (OSearch) service could not load the index. This can occur on either a query server or an index server.

After this error occurs, the Search service attempts to retry loading the index every 15 minutes, and the event will be logged again for subsequent failures. If the oldest occurrence of this event in the Event log is older than 15 minutes, this means that the retry of the index load succeeded.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Critical

Event ID: 4127

Event Source: Office SharePoint Server Search

Failed to load protocol handler

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Failed_to_load_protocol_handler

Description: Office SharePoint Server 2007 uses protocol handlers to access the content that you want to crawl. This alert indicates that the protocol handler cannot be loaded. This means that documents that require the protocol handler cannot be crawled.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Error

Event ID: 2483, 2484

Event Source: Office SharePoint Server Search

Failed to load word breaker

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Failed_to_load_word_breaker

Description: This alert indicates that the word breaker for a particular language could not be loaded and, therefore, documents that require this word breaker will be crawled using a language-neutral word breaker.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Error

Event ID: 2462

Event Source: Office SharePoint Server Search

Index is corrupt

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Index_is_corrupt

Description: The Office SharePoint Server Search (OSearch) service has detected that the content index is corrupt. This can occur on either an index server or a query server. When this error occurs on an index server, the OSearch service automatically attempts to reset and start a full update of the content index.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Error

Event ID: 4138

Event Source: Office SharePoint Server Search

Instance of search could not be initialized

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Instance_of_search_could_not_be_initialized

Description: This alert indicates that the configuration information for search could not be loaded from the SQL Server computer, which prevented an instance of the Search service from initializing.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Error

Event ID: 2458

Event Source: Office SharePoint Server Search

Internal plug-in error

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Internal_plug_in_error

Description: A plug-in is a component of the search indexer that is used to process content and properties from crawled items. When this error occurs, a Dr. Watson report is usually created and an entry containing the call stack of the exception is written to the Event log.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: RepeatCountEqual5

Event Source: Office SharePoint Server Search Master merge error

Master merge error

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Master_merge_error

Description: A master merge is the process of merging a group of indexes into a single index. This process occurs on index servers when you crawl content and on query servers when the index is propagated from the index server. If this alert occurs repeatedly, the Office SharePoint Server Search (OSearch) service will eventually be unable to index new documents.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 4105, 4106

Event Source: Office SharePoint Server Search

Propagation failed to communicate with a query server

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Propagation_failed_to_communicate_with_a_query_server

Description: This alert indicates that the index server was unable to propagate the content index to a particular query server.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Error

Event ID: 42

Event Source: Office SharePoint Server Search

Propagation of the content index paused because of a lagging query server

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Propagation_of_the_content_index_paused_because_of_a_lagging_query_server

Description: If your search-enabled server farm contains a query server that is separate from the index server, the Office SharePoint Server Search (OSearch) service automatically propagates a copy of the index from the index server to each query server simultaneously.

In order to maintain consistent content among the query servers, the propagation has been paused to accommodate one query server that is slow to receive the updated index from the index server.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 43

Event Source: Office SharePoint Server Search

Publication of ranking information failed

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Publication_of_ranking_information_failed

Description: After crawled content is indexed, relevant anchor text is then indexed. This alert indicates that publication of anchor text failed. In this case, the index might be available but the relevance of search results will be diminished to some degree.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 4169, 4170

Event Source: Office SharePoint Server Search

Query server removed from rotation

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Query_server_removed_from_rotation

Description: This alert indicates that a query server has been removed from the load-balanced rotation because IIS has encountered errors while communicating with the query server.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Error

Event ID: 10038

Event Source: Office SharePoint Server Search

Search – Number of queries towards an index

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Search_Number_of_queries_towards_an_index

Description: This rule uses the Total # of queries counter to count the total number of queries since the index was mounted.

Rule Category: Performance Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Not applicable

Search – Query Rate

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Search_Query_Rate

Description: This rule uses the Queries counter to measure the number of queries posted to the server.

Rule Category: Performance Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Not applicable

Search – Succeeded Queries

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Search_Succeeded_Queries

Description: This rule uses the Queries Succeeded counter to count the number of queries that produce successful searches.

Rule Category: Performance Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Not applicable

Search – Total Number of Documents

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Search_Total_Number_of_Documents

Description: This rule uses the Total # documents counter to count the total number of documents in the index.

Rule Category: Performance Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

The last query server was removed from rotation

Rule ID: Microsoft.Office.Sharepoint.Server.2007.The_last_query_server_was_removed_from_rotation

Description: This alert indicates that the last query server has been removed from the load-balanced rotation. This means that users cannot perform search queries until this issue is resolved.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Critical

Event ID: 10040

Event Source: Office SharePoint Server Search

Single sign-on service rules

Office SharePoint Server 2007 provides a default single sign-on (SSO) service for storing and mapping the credentials to be used in connecting with third-party or back-end systems. Office SharePoint Server 2007 provides a mechanism called pluggable SSO, to specify an alternate SSO Provider to the standard SSO Provider instead of maintaining credential mapping in two places.

The following table describes the rules pertaining to the events that occur while using SSO.

Rule name Rule properties

Error adding enterprise application definition

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Error_adding_enterprise_application_definition

Description: An error occurred while using Microsoft Single Sign-On (SSOSrv) and enterprise application definitions. This error indicates that the inputs to the Single Sign-On object model are invalid.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5

Event Source: Office SharePoint Server

Error deleting enterprise application definition

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Error_deleting_enterprise_application_definition

Description: An error occurred while using Microsoft Single Sign-On (SSOSrv) and enterprise application definitions. The requested application does not exist.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: Repeat CountGreaterEqual5

Event Source: Office SharePoint Server

Error retrieving credentials

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Error_retreiving_credentials

Description: An error occurred while attempting to retrieve credentials while using Microsoft Single Sign-On (SSOSrv) with an enterprise application definition. The credentials for a user cannot be retrieved.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: Repeat CountGreaterEqual10

Event Source: Office SharePoint Server

Error retrieving credentials – Consolidator

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Error_retreiving_credentials_Consolidator

Description: An error occurred when attempting to retrieve credentials while using Microsoft Single Sign-On with an enterprise application definition because the credentials for the user cannot be retrieved.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 1012

Event Source: Office SharePoint Server

Error retrieving cryptographic sign

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Error_retreiving_cryptographic_sign

Description: An error occurred while using Microsoft Single Sign-On (SSOSrv) and the cryptographic sign. An unauthorized user may have attempted to access the Single Sign-On database.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: Repeat CountGreaterEqual5

Event Source: Office SharePoint Server

Failed to load Single Sign-On configuration settings

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Failed_to_load_Single_Sign_On_configuration_settings

Description: The Microsoft Single Sign-On (SSOSrv) service failed to load the configuration settings from the Single Sign-On database. The Single Sign-On database may be unavailable, or the Single Sign-On administrator account may have changed.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Error

Event ID: 1026

Event Source: Office SharePoint Server

Internal Single Sign-On service error

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Internal_Single_Sign_On_service_error

Description: An unexpected error occurred while using Microsoft Single Sign-On (SSOSrv).

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 1019

Event Source: Office SharePoint Server

Microsoft Single Sign-On service failed to start

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Microsoft_Single_Sign_On_service_failed_to_start

Description: The Microsoft Single Sign-On (SSOSrv) service did not start.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Error

Event ID: 1007

Event Source: Office SharePoint Server

Microsoft Single Sign-On service failed to stop

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Microsoft_Single_Sign_On_service_failed_to_stop

Description: An error occurred while using Microsoft Single Sign-On (SSOSrv). This alert indicates that an administrator attempted to stop the SSOSrv service, but the service failed to stop.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 1008

Event Source: Office SharePoint Server

Remote Procedure Call service failed to start

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Remote_Procedure_Call_service_failed_to_start

Description: When the Microsoft Single Sign-On (SSOSrv) service starts up, it attempts to start the Remote Procedure Call (RPC) service. This alert indicates that the RPC service failed to start, which indicates a problem with the RPC subsystem of the operating system.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Error

Event ID: 1009

Event Source: Office SharePoint Server

Remote Procedure Call service failed to stop

Rule ID: Microsoft.Office.SharePoint.Server.2007.Remote_Procedure_Call_service_failed_to_stop

Description: An error occurred while the Microsoft Single Sign-On service attempted to call the Remote Procedure Call (RPC) service. An unauthorized user may have attempted to access the Single Sign-On database.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 1010

Event Source: Office SharePoint Server

Single Sign-On audit failure

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Single_Sign_On_audit_failure

Description: An error occurred while the Microsoft Single Sign-On (SSOSrv) service was attempting to insert a row into the Audit table in Microsoft SQL Server.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 1022

Event Source: Office SharePoint Server

Single Sign-On failure

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Single_Sign_On_failure

Description: The Microsoft Single Sign-On service is a mechanism used to authenticate a user only once to allow the user to gain access to all computers and systems. Excel Services uses single sign-on for authenticating with external data sources.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Information

Event ID: 4969

Event Source: Office SharePoint Server

Windows Services rules

Windows Services are applications that are automatically launched, when the computer is starting up. They operate in the background, while the Windows operating system is running. Windows Services are useful as long-running and independent applications that do not involve user interaction, because they require a significant part of the memory and processing resources of the servers. SharePoint sometimes requires windows services to run the SharePoint processes. Windows Services ensure that these tasks function in periods of low-user load. Windows Services can also manage SharePoint activities, because they run independently of Windows SharePoint Services (and Office SharePoint Server), depending exclusively on the Windows operating system infrastructure.

The following table describes the rules pertaining to the events that occur while using Windows Services.

Rule name Rule properties

Microsoft.Office.SharePoint.Server.2007.The_Microsoft_Single_Sign-on_Service_is_not_running

Rule ID: Microsoft.Office.SharePoint.Server.2007.The_Microsoft_Single_Sign-on_Service_is_not_running

Description: This rule monitors the state of the Single Sign-On service. Ensure that the Single Sign-On service is enabled and started for the farm if it is required.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 21207

Event Source: SSOSrv

Site Synch failed

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Site_Synch_failed

Description: A particular site collection encountered a failure during profile and membership synchronization. The profile synchronization timer job will attempt to synchronize this site collection again when it is next executed.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5553

Event Source: Office SharePoint Server

Sweep Synch failed

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Sweep_Synch_failed

Description: A failure was encountered while synchronizing user profiles for new active users on a content database.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5554

Event Source: Office SharePoint Server

Synch Job Scheduler failed

Rule ID: Microsoft.Office.Sharepoint.Server.2007.Synch_Job_Scheduler_failed

Description: A failure occurred while an administrator was creating and scheduling a profile synchronization timer job for synchronizing with Web applications. The failed profile synchronization timer job will attempt to schedule these again when it is rerun.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 5556

Event Source: Office SharePoint Server

The Office SharePoint Server Search State

Rule ID: Microsoft.Office.Sharepoint.Server.2007.The_Office_SharePoint_Server_Search_State

Description: This rule monitors the state of the Office SharePoint Server Search Service. Ensure that the Office SharePoint Server Search Service is enabled and started for the farm if it is required.

Rule Category: Event Collection

Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application

Alert Type: Warning

Event ID: 21207

Event Source: OSearch