Baseline server events (Office SharePoint Server)
Applies To: Office SharePoint Server 2007
This Office product will reach end of support on October 10, 2017. To stay supported, you will need to upgrade. For more information, see , Resources to help you upgrade your Office 2007 servers and clients.
Topic Last Modified: 2015-03-09
In this article:
Web server events
SQL Server database events
Managing servers includes monitoring the applications and services running on the servers so that you can take action, either when an error occurs or before a specified limit is reached. Use the events and alerts to monitor the service status and troubleshoot issues for servers running Microsoft Office SharePoint Server 2007. While monitoring the events for Office SharePoint Server 2007 and related services, you should also ensure that the users' SharePoint sites are available.
To ensure that servers are available to the users, you must monitor baseline server events, such as events for Internet Information Services (IIS) and Microsoft SQL Server. The following tables list the baseline server events in Windows SharePoint Services 3.0 and Office SharePoint Server 2007.
Web server events
The following table describes the rules pertaining to the errors that occur in Office SharePoint Server 2007 and Windows SharePoint Services 3.0 related to the Web server.
| Rule name | Rule properties |
|---|---|
An error occurred while communicating with the SMTP server |
Rule ID: Microsoft.Windows.SharePoint.Services.3.0.An_error_occurred_while_communicating_with_the_SMTP_server Description: This error typically occurs due to a misconfigured SMTP server. Rule Category: Event Collection Rule Target: Microsoft.Windows.SharePoint.Services.3.0.WSS.Application Alert Type: Error Event ID: 6858 Event Source: Windows SharePoint Services 3.0 |
Cannot connect to SMTP host |
Rule ID: Microsoft.Windows.SharePoint.Services.3.0.Cannot_connect_to_SMTP_host Description: This alert indicates that Windows SharePoint Services cannot connect to the Simple Mail Transfer Protocol (SMTP) host. Rule Category: Event Collection Rule Target: Microsoft.Windows.SharePoint.Services.3.0.WSS.Application Alert Type: Warning Event ID: 6857 Event Source: Windows SharePoint Services 3.0 |
Cannot resolve name of the outbound SMTP server |
Rule ID: Microsoft.Windows.SharePoint.Services.3.0.Cannot_resolve_name_of_the_outbound_SMTP_server Description: This alert indicates that Windows SharePoint Services cannot resolve the name of the Simple Mail Transfer Protocol (SMTP) server. This can happen if the name of the SMTP mail server is incorrect or if the Domain Name System (DNS) service server is unavailable. Rule Category: Event Collection Rule Target: Microsoft.Windows.SharePoint.Services.3.0.WSS.Application Alert Type: Warning Event ID: 6856 Event Source: Windows SharePoint Services 3.0 |
The application pool account must be registered as a Kerberos service provider |
Rule ID: Microsoft.Windows.SharePoint.Services.3.0.The_application_pool_account_must_be_registered_as_a_Kerberos_service_provider Description: The application pool account has insufficient permissions to add user accounts to Active Directory. When using Kerberos authentication, the service account used by the Internet Information Services (IIS) application pool for your Web application must be registered in Active Directory as a Service Principal Name (SPN) on the domain on which the Web front-end is a member. Rule Category: Event Collection Rule Target: Microsoft.Windows.SharePoint.Services.3.0.WSS.Application Alert Type: Error Event ID: 6590 Event Source: Windows SharePoint Services 3.0 |
IIS Start Command |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.IIS_Start_Command Description: This rule monitors the IIS Reset action. It will be triggered to alert the user when the IIS Start command has been used as a part of IIS Reset. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 1 Event Source: IISCTLS |
IIS Stop Command |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.IIS_Stop_Command Description: This rule monitors the IIS Reset action and the event IDs created by the IIS Stop command in the System Log. It notifies the user that the IIS Stop command has been used as a part of IIS Reset. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 2 Event Source: IISCTLS |
Web Services for Remote Portlets run-time error |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Web_Services_for_Remote_Portlets_runtime_error Description: This alert indicates that the Web Services for Remote Portlets (WSRP) Web Part could not communicate with the Web service with which it is associated. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5189 Event Source: Office SharePoint Server |
SQL Server database events
Office SharePoint Server 2007 and Windows SharePoint Services 3.0 use SQL Server databases to store content for the Web site and configuration settings. For example, all pages in the site, files in document libraries, files attached to lists, and information in lists, plus security and permission settings are stored in the content database. Other configuration settings are stored in the configuration database in SQL Server.
The following table describes the rules pertaining to the errors related to SQL Server in the Office SharePoint Server and Windows SharePoint Services environment.
| Rule name | Rule properties |
|---|---|
Cannot connect to SQL Server |
Rule ID: Microsoft.Windows.SharePoint.Services.3.0.Cannot_connect_to_SQL_Server Description: This alert indicates that Windows SharePoint Services could not connect to the SQL Server database. Rule Category: Event Collection Rule Target: Microsoft.Windows.SharePoint.Services.3.0.WSS.Application Alert Type: Error Event ID: 3355 Event Source: Windows SharePoint Services 3.0 |
Insufficient SQL Server database permissions |
Rule ID: Microsoft.Windows.SharePoint.Services.3.0.Insufficient_SQL_Server_database_permissions Description: This error typically occurs during when insufficient privileges have been granted in the SQL Server database to the service account specified in Windows SharePoint Services. Rule Category: Event Collection Rule Target: Microsoft.Windows.SharePoint.Services.3.0.WSS.Application Alert Type: Error Event ID: 5214 Event Source: Windows SharePoint Services 3.0 |
SQL Server Database Error |
Rule ID: Microsoft.Windows.SharePoint.Services.3.0.SQL_Server_Database_Error Description: This alert indicates that an unexpected SQL Server database error occurred while the Windows SharePoint Services Search service attempted to communicate with the database. Rule Category: Event Collection Rule Target: Microsoft.Windows.SharePoint.Services.3.0.WSS.Application Alert Type: Warning Event ID: 9511 Event Source: Windows SharePoint Services 3.0 Search |
SQL Server database is full |
Rule ID: Microsoft.Windows.SharePoint.Services.3.0.SQL_Server_database_is_full Description: This alert indicates that a SQL Server error occurred because the database size limit has been reached. Rule Category: Event Collection Rule Target: Microsoft.Windows.SharePoint.Services.3.0.WSS.Application Alert Type: Error Event ID: 3758 Event Source: Windows SharePoint Services 3.0 |
SQL Server database login failed |
Rule ID: Microsoft.Windows.SharePoint.Services.3.0.SQL_Server_database_login_failed Description: This alert indicates that the user name or password for the Windows SharePoint Services service account was invalid before the session or became invalid during the session. Rule Category: Event Collection Rule Target: Microsoft.Windows.SharePoint.Services.3.0.WSS.Application Alert Type: Error Event ID: 3351 Event Source: Windows SharePoint Services 3.0 |
Unknown SQL Exceptions |
Rule ID: Microsoft.Windows.SharePoint.Services.3.0.Unknown_SQL_Exceptions Description: This rule triggers an alert whenever any unknown SQL exceptions occur. The details of the exception are displayed in the alert. Rule Category: Event Collection Rule Target: Microsoft.Windows.SharePoint.Services.3.0.WSS.Application Alert Type: Warning Event ID: 5586 Event Source: Windows SharePoint Services 3.0 |
Audience Compilation failed |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Audience_Compilation_failed Description: A failure occurred while compiling an audience rule. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 5693 Event Source: Office SharePoint Server |
Content Database Synchronization failed |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Content_Database_Synchronization_failed Description: Profile and membership synchronization was abandoned for this content database. The profile synchronization timer job will attempt to synchronize this content database again the next time it is run. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 5555 Event Source: Office SharePoint Server |
Database out of space |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Database_out_of_space Description: This alert indicates that the Office SharePoint Server Search (OSearch) service attempted to update a database but the database was full. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 10031 Event Source: Office SharePoint Server Search |
Failure to commit to SQL |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Failure_to_commit_to_SQL Description: In a search-enabled server farm, the index server periodically writes to the search database on the computer running SQL Server. This alert indicates that an error occurred in the Office SharePoint Server Search (OSearch) service while attempting to commit a write operation to the computer running SQL Server. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 10026 Event Source: Office SharePoint Server Search |
Plug-in failed to connect to SQL Server |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.Plug_in_failed_to_connect_to_SQL_Server Description: A plug-in is a component of the search indexer that is used to process content and properties from crawled items. This alert indicates that an error occurred in the Office SharePoint Server Search service. The plug-in did not connect to the SQL Server computer instance, and the update of the content source cannot continue. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Warning Event ID: 9503, 9510 Event Source: Office SharePoint Server Search |
SQL Server Database Error |
Rule ID: Microsoft.Office.Sharepoint.Server.2007.SQL_Server_Database_Error Description: This alert indicates that an unexpected SQL Server database error occurred while the Office SharePoint Server Search service running on the index server attempted to communicate with the database. Rule Category: Event Collection Rule Target: Microsoft.Office.Sharepoint.Server.2007.MOSS.Application Alert Type: Error Event ID: 9511 Event Source: Office SharePoint Server Search |