Mombu the Microsoft Forum sponsored links

Go Back   Mombu the Microsoft Forum > Microsoft > Suppression of 25261 errors
User Name
Password
REGISTER NOW! Mark Forums Read

sponsored links


Reply
 
1 2nd February 14:21
jamie bakert%xz].Ȩɢr,\
External User
 
Posts: 1
Default Suppression of 25261 errors



I have over 75,000 event entries over a week's time for event ID 25261. This
is 75% of my total MOM activity.

These errors relate to IIS Application Log Server Staus errors of 404, 400,
403, 500, 503 etc. I would like to consolidate using the event consolidation
rules in the IIS Management Pack or by my own to reduce the IIS error noise?
How should I proceed?

Any help would be much appreciated.

Thanks,
-Jamie
  Reply With Quote


  sponsored links


2 2nd February 14:21
andy domineywr읊.Ȩɢr,\
External User
 
Posts: 1
Default Suppression of 25261 errors



Hi there,

We had the same problem with our MOM install and the best way for us to
proceed was to disable the HTTP 400 error event rule to stop these errors
coming in. If you really do need the rule enabled, you need to track down the
cause of these events as otherwise you will find your SystemCenterReporting
Database getting very big very quick!

Best Regards,

Andy.

--
Andy Dominey
MCSE
  Reply With Quote
3 2nd February 14:21
jamie bakert%xz].Ȩɢr,\
External User
 
Posts: 1
Default Suppression of 25261 errors


I have disabled both Collection types (All HTTP 400 Errors and ALL HTTP 500
Errors) from the following rule group: Microsoft Windows Internet Information
Services/Internet Information Services 5.0/Core Services/World Wide Web
Pulishing Service and I countinue to get 400 and 500 errors showing up as
events in the Operators Console.
  Reply With Quote
4 2nd February 14:21
andy domineywr읊.Ȩɢr,\
External User
 
Posts: 1
Default Suppression of 25261 errors


There are a duplicate set of rules under Microsoft Windows Internet
Information Services/Internet Information Services 6.0/Core Services/World
Wide Web Pulishing Service. Have a look there and make sure they are disabled
also.

Here are the rules that we have disabled under both of these sub folders:

All HTTP 400 Errors
Error 404.....
Error 405.....
Security: Error 403....
Security: Error 414....

Hope this helps,

Best Regards,

Andy


--
Andy Dominey
MCSE
  Reply With Quote
5 2nd February 14:21
jamie bakert%xz].Ȩɢr,\
External User
 
Posts: 1
Default Suppression of 25261 errors


thanks Andy...
I have one more question: In the MOM Management Pack Guide, there are
references to Security error: 401, I do not have these Rules in either
Production or Test Environments. Do you know what they are referring to?
  Reply With Quote
6 2nd February 14:21
andy domineywr읊.Ȩɢr,\
External User
 
Posts: 1
Default Suppression of 25261 errors


Not off the top of my head but I will have a look for you.

Cheers,

Andy

--
Andy Dominey
MCSE
  Reply With Quote
7 2nd February 14:21
jamie bakert%xz].Ȩɢr,\
External User
 
Posts: 1
Default Suppression of 25261 errors


Andy,

Two more questions:
Why do the following need to be disabled:
Error 404.....
Error 405.....
Security: Error 403....
Security: Error 414....

Shouldn't disabling All HTTP 400 Errors take care of anything all other
subsequent alerts. Also, what are you doing about 500 errors.
-Jamie

They're exposed under:

Core Services\World Wide Web Publishing Services\Event Rules
All HTTP 400 errors
  Reply With Quote
Reply


Thread Tools
Display Modes




Copyright 2006 SmartyDevil.com - Dies Mies Jeschet Boenedoesef Douvema Enitemaus -
666