| Author |
Message |
Jéjé
Guest
|
 Posted:
Wed Oct 26, 2005 8:51 pm Post subject:
the event id 2012 fill my application log... |
|
|
Hi,
does anyone know why I receive a lot of event id 2012 (perfos)
"Unable to get system process information from system. The status code
returned is in the first DWORD in the Data section."
if I stop the MOM service, there is no more events in my log.
any idea?
thanks.
Jerome. |
|
| Back to top |
|
 |
Daniel Lai [MVP-Managemen
Guest
|
| Posted:
Thu Oct 27, 2005 12:52 am Post subject:
Re: the event id 2012 fill my application log... |
|
|
Hello,
Thank you for your posting!
Please refer
http://www.eventid.net/display.asp?eventid=2012&eventno=3810&source=PerfOS&phase=1
If you have any questions, please feel to let me know. I am glad to be of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
<Jéj? <willgart_A_@hotmail_A_.com>> wrote in message
news:uGmB44m2FHA.1420@TK2MSFTNGP09.phx.gbl...
| Quote: | Hi,
does anyone know why I receive a lot of event id 2012 (perfos)
"Unable to get system process information from system. The status code
returned is in the first DWORD in the Data section."
if I stop the MOM service, there is no more events in my log.
any idea?
thanks.
Jerome.
|
|
|
| Back to top |
|
|
Jéjé
Guest
|
| Posted:
Thu Oct 27, 2005 6:34 am Post subject:
Re: the event id 2012 fill my application log... |
|
|
mmm...
my free system page table entries is low... when MOM is active the value go
to 800!!!
I'll try to change the config in the registry entry.
thanks for the link.
"Daniel Lai [MVP-Management Infrastructure]" <laigarry@hotmail.com> wrote in
message news:%23weUdSo2FHA.2492@TK2MSFTNGP09.phx.gbl...
| Quote: | Hello,
Thank you for your posting!
Please refer
http://www.eventid.net/display.asp?eventid=2012&eventno=3810&source=PerfOS&phase=1
If you have any questions, please feel to let me know. I am glad to be of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
Jéj? <willgart_A_@hotmail_A_.com>> wrote in message
news:uGmB44m2FHA.1420@TK2MSFTNGP09.phx.gbl...
Hi,
does anyone know why I receive a lot of event id 2012 (perfos)
"Unable to get system process information from system. The status code
returned is in the first DWORD in the Data section."
if I stop the MOM service, there is no more events in my log.
any idea?
thanks.
Jerome.
|
|
|
| Back to top |
|
|
Blake Mengotto
Guest
|
| Posted:
Thu Oct 27, 2005 8:51 am Post subject:
Re: the event id 2012 fill my application log... |
|
|
I have seen free pte's drop before on Exchange servers. There is some sort
of mem leak on that box. I am not certian it would be MOM. I would look
for custom services. You need to find out what process is eating up free
pte's.
--
Regards,
Blake Mengotto
My Blog: http://spaces.msn.com/members/DiscussITnow/
Community Sites for MOM:
MOM Answers: http://www.momanswers.com
myITforum: http://www.myitforum.com
Momcommunity: http://www.momcommunity.com
Other Sites of Interest:
Silect Software: http://www.silect.com - MP Studio Express
eXc Software: http://www.excsoftware.com - MOM solution provider
Skywire Software: http://www.skiwiresoftware.com - MOM Connectors
"Jéjé" <willgart@BBBhotmailAAA.com> wrote in message
news:emwcIap2FHA.3788@tk2msftngp13.phx.gbl...
| Quote: | mmm...
my free system page table entries is low... when MOM is active the value
go
to 800!!!
I'll try to change the config in the registry entry.
thanks for the link.
"Daniel Lai [MVP-Management Infrastructure]" <laigarry@hotmail.com> wrote
in
message news:%23weUdSo2FHA.2492@TK2MSFTNGP09.phx.gbl...
Hello,
Thank you for your posting!
Please refer
http://www.eventid.net/display.asp?eventid=2012&eventno=3810&source=PerfOS&phase=1
If you have any questions, please feel to let me know. I am glad to be
of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
Jéj? <willgart_A_@hotmail_A_.com>> wrote in message
news:uGmB44m2FHA.1420@TK2MSFTNGP09.phx.gbl...
Hi,
does anyone know why I receive a lot of event id 2012 (perfos)
"Unable to get system process information from system. The status code
returned is in the first DWORD in the Data section."
if I stop the MOM service, there is no more events in my log.
any idea?
thanks.
Jerome.
|
|
|
| Back to top |
|
|
Jéjé
Guest
|
| Posted:
Thu Oct 27, 2005 8:51 pm Post subject:
Re: the event id 2012 fill my application log... |
|
|
I have a lot of services:
Portal Server
Exchange
SQL Server
CRM
MOM
....
I'm not sure which one consume the free pages...
;-)
"Blake Mengotto" <mengotto@nospam.hotmail.com> wrote in message
news:eU%238his2FHA.3600@TK2MSFTNGP12.phx.gbl...
| Quote: | I have seen free pte's drop before on Exchange servers. There is some sort
of mem leak on that box. I am not certian it would be MOM. I would look
for custom services. You need to find out what process is eating up free
pte's.
--
Regards,
Blake Mengotto
My Blog: http://spaces.msn.com/members/DiscussITnow/
Community Sites for MOM:
MOM Answers: http://www.momanswers.com
myITforum: http://www.myitforum.com
Momcommunity: http://www.momcommunity.com
Other Sites of Interest:
Silect Software: http://www.silect.com - MP Studio Express
eXc Software: http://www.excsoftware.com - MOM solution provider
Skywire Software: http://www.skiwiresoftware.com - MOM Connectors
"Jéjé" <willgart@BBBhotmailAAA.com> wrote in message
news:emwcIap2FHA.3788@tk2msftngp13.phx.gbl...
mmm...
my free system page table entries is low... when MOM is active the value
go
to 800!!!
I'll try to change the config in the registry entry.
thanks for the link.
"Daniel Lai [MVP-Management Infrastructure]" <laigarry@hotmail.com> wrote
in
message news:%23weUdSo2FHA.2492@TK2MSFTNGP09.phx.gbl...
Hello,
Thank you for your posting!
Please refer
http://www.eventid.net/display.asp?eventid=2012&eventno=3810&source=PerfOS&phase=1
If you have any questions, please feel to let me know. I am glad to be
of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
Jéj? <willgart_A_@hotmail_A_.com>> wrote in message
news:uGmB44m2FHA.1420@TK2MSFTNGP09.phx.gbl...
Hi,
does anyone know why I receive a lot of event id 2012 (perfos)
"Unable to get system process information from system. The status code
returned is in the first DWORD in the Data section."
if I stop the MOM service, there is no more events in my log.
any idea?
thanks.
Jerome.
|
|
|
| Back to top |
|
|
Blake Mengotto
Guest
|
| Posted:
Fri Oct 28, 2005 12:51 am Post subject:
Re: the event id 2012 fill my application log... |
|
|
WMI is notorious for mem leaks. I would monitor for WMI handle counts.
Look to monitor Winmgmt handle count and if it gets about 90K then WMI is
most likely your leak. It has been the cause of our servers getting low on
free ptes in the past year.
"Jéjé" <willgart@BBBhotmailAAA.com> wrote in message
news:OwvtNRz2FHA.1396@TK2MSFTNGP15.phx.gbl...
| Quote: | I have a lot of services:
Portal Server
Exchange
SQL Server
CRM
MOM
...
I'm not sure which one consume the free pages...
;-)
"Blake Mengotto" <mengotto@nospam.hotmail.com> wrote in message
news:eU%238his2FHA.3600@TK2MSFTNGP12.phx.gbl...
I have seen free pte's drop before on Exchange servers. There is some
sort
of mem leak on that box. I am not certian it would be MOM. I would
look
for custom services. You need to find out what process is eating up
free
pte's.
--
Regards,
Blake Mengotto
My Blog: http://spaces.msn.com/members/DiscussITnow/
Community Sites for MOM:
MOM Answers: http://www.momanswers.com
myITforum: http://www.myitforum.com
Momcommunity: http://www.momcommunity.com
Other Sites of Interest:
Silect Software: http://www.silect.com - MP Studio Express
eXc Software: http://www.excsoftware.com - MOM solution provider
Skywire Software: http://www.skiwiresoftware.com - MOM Connectors
"Jéjé" <willgart@BBBhotmailAAA.com> wrote in message
news:emwcIap2FHA.3788@tk2msftngp13.phx.gbl...
mmm...
my free system page table entries is low... when MOM is active the
value
go
to 800!!!
I'll try to change the config in the registry entry.
thanks for the link.
"Daniel Lai [MVP-Management Infrastructure]" <laigarry@hotmail.com
wrote
in
message news:%23weUdSo2FHA.2492@TK2MSFTNGP09.phx.gbl...
Hello,
Thank you for your posting!
Please refer
http://www.eventid.net/display.asp?eventid=2012&eventno=3810&source=PerfOS&phase=1
If you have any questions, please feel to let me know. I am glad to
be
of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
Jéj? <willgart_A_@hotmail_A_.com>> wrote in message
news:uGmB44m2FHA.1420@TK2MSFTNGP09.phx.gbl...
Hi,
does anyone know why I receive a lot of event id 2012 (perfos)
"Unable to get system process information from system. The status
code
returned is in the first DWORD in the Data section."
if I stop the MOM service, there is no more events in my log.
any idea?
thanks.
Jerome.
|
|
|
| Back to top |
|
|
Jéjé
Guest
|
| Posted:
Fri Oct 28, 2005 12:51 am Post subject:
Re: the event id 2012 fill my application log... |
|
|
mmm...
I don't have the winmgmt task in my task manager!
but the service is up & running!
wmiprvse process(es) takes less then 1000 handles
but...
if the Winmgmt is the cause, what is the solution?
"Blake Mengotto" <mengotto@nospam.hotmail.com> wrote in message
news:%23YKVXq02FHA.3628@TK2MSFTNGP12.phx.gbl...
| Quote: | WMI is notorious for mem leaks. I would monitor for WMI handle counts.
Look to monitor Winmgmt handle count and if it gets about 90K then WMI is
most likely your leak. It has been the cause of our servers getting low
on
free ptes in the past year.
"Jéjé" <willgart@BBBhotmailAAA.com> wrote in message
news:OwvtNRz2FHA.1396@TK2MSFTNGP15.phx.gbl...
I have a lot of services:
Portal Server
Exchange
SQL Server
CRM
MOM
...
I'm not sure which one consume the free pages...
;-)
"Blake Mengotto" <mengotto@nospam.hotmail.com> wrote in message
news:eU%238his2FHA.3600@TK2MSFTNGP12.phx.gbl...
I have seen free pte's drop before on Exchange servers. There is some
sort
of mem leak on that box. I am not certian it would be MOM. I would
look
for custom services. You need to find out what process is eating up
free
pte's.
--
Regards,
Blake Mengotto
My Blog: http://spaces.msn.com/members/DiscussITnow/
Community Sites for MOM:
MOM Answers: http://www.momanswers.com
myITforum: http://www.myitforum.com
Momcommunity: http://www.momcommunity.com
Other Sites of Interest:
Silect Software: http://www.silect.com - MP Studio Express
eXc Software: http://www.excsoftware.com - MOM solution provider
Skywire Software: http://www.skiwiresoftware.com - MOM Connectors
"Jéjé" <willgart@BBBhotmailAAA.com> wrote in message
news:emwcIap2FHA.3788@tk2msftngp13.phx.gbl...
mmm...
my free system page table entries is low... when MOM is active the
value
go
to 800!!!
I'll try to change the config in the registry entry.
thanks for the link.
"Daniel Lai [MVP-Management Infrastructure]" <laigarry@hotmail.com
wrote
in
message news:%23weUdSo2FHA.2492@TK2MSFTNGP09.phx.gbl...
Hello,
Thank you for your posting!
Please refer
http://www.eventid.net/display.asp?eventid=2012&eventno=3810&source=PerfOS&phase=1
If you have any questions, please feel to let me know. I am glad to
be
of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
Jéj? <willgart_A_@hotmail_A_.com>> wrote in message
news:uGmB44m2FHA.1420@TK2MSFTNGP09.phx.gbl...
Hi,
does anyone know why I receive a lot of event id 2012 (perfos)
"Unable to get system process information from system. The status
code
returned is in the first DWORD in the Data section."
if I stop the MOM service, there is no more events in my log.
any idea?
thanks.
Jerome.
|
|
|
| Back to top |
|
|
Blake Mengotto
Guest
|
| Posted:
Fri Oct 28, 2005 7:38 am Post subject:
Re: the event id 2012 fill my application log... |
|
|
Winmgmt only exists if its w2k. If w2k3 I don't know what the process is
called. If its W2K and the culprit is WMI, then there are several fixes for
WMI mem leaks.
--
Regards,
Blake Mengotto
My Blog: http://spaces.msn.com/members/DiscussITnow/
Community Sites for MOM:
MOM Answers: http://www.momanswers.com
myITforum: http://www.myitforum.com
Momcommunity: http://www.momcommunity.com
Other Sites of Interest:
Silect Software: http://www.silect.com - MP Studio Express
eXc Software: http://www.excsoftware.com - MOM solution provider
Skywire Software: http://www.skiwiresoftware.com - MOM Connectors
"Jéjé" <willgart@BBBhotmailAAA.com> wrote in message
news:Od0Pjj12FHA.3272@TK2MSFTNGP09.phx.gbl...
| Quote: | mmm...
I don't have the winmgmt task in my task manager!
but the service is up & running!
wmiprvse process(es) takes less then 1000 handles
but...
if the Winmgmt is the cause, what is the solution?
"Blake Mengotto" <mengotto@nospam.hotmail.com> wrote in message
news:%23YKVXq02FHA.3628@TK2MSFTNGP12.phx.gbl...
WMI is notorious for mem leaks. I would monitor for WMI handle counts.
Look to monitor Winmgmt handle count and if it gets about 90K then WMI
is
most likely your leak. It has been the cause of our servers getting low
on
free ptes in the past year.
"Jéjé" <willgart@BBBhotmailAAA.com> wrote in message
news:OwvtNRz2FHA.1396@TK2MSFTNGP15.phx.gbl...
I have a lot of services:
Portal Server
Exchange
SQL Server
CRM
MOM
...
I'm not sure which one consume the free pages...
;-)
"Blake Mengotto" <mengotto@nospam.hotmail.com> wrote in message
news:eU%238his2FHA.3600@TK2MSFTNGP12.phx.gbl...
I have seen free pte's drop before on Exchange servers. There is some
sort
of mem leak on that box. I am not certian it would be MOM. I would
look
for custom services. You need to find out what process is eating up
free
pte's.
--
Regards,
Blake Mengotto
My Blog: http://spaces.msn.com/members/DiscussITnow/
Community Sites for MOM:
MOM Answers: http://www.momanswers.com
myITforum: http://www.myitforum.com
Momcommunity: http://www.momcommunity.com
Other Sites of Interest:
Silect Software: http://www.silect.com - MP Studio Express
eXc Software: http://www.excsoftware.com - MOM solution provider
Skywire Software: http://www.skiwiresoftware.com - MOM Connectors
"Jéjé" <willgart@BBBhotmailAAA.com> wrote in message
news:emwcIap2FHA.3788@tk2msftngp13.phx.gbl...
mmm...
my free system page table entries is low... when MOM is active the
value
go
to 800!!!
I'll try to change the config in the registry entry.
thanks for the link.
"Daniel Lai [MVP-Management Infrastructure]" <laigarry@hotmail.com
wrote
in
message news:%23weUdSo2FHA.2492@TK2MSFTNGP09.phx.gbl...
Hello,
Thank you for your posting!
Please refer
http://www.eventid.net/display.asp?eventid=2012&eventno=3810&source=PerfOS&phase=1
If you have any questions, please feel to let me know. I am glad
to
be
of
assistance.
--
Daniel Lai
Microsoft MVP Program Top Contributor
Windows Server-Management Infrastructure
Microsoft Management Solution Consultant
http://msmvps.com/daniel
Jéj? <willgart_A_@hotmail_A_.com>> wrote in message
news:uGmB44m2FHA.1420@TK2MSFTNGP09.phx.gbl...
Hi,
does anyone know why I receive a lot of event id 2012 (perfos)
"Unable to get system process information from system. The status
code
returned is in the first DWORD in the Data section."
if I stop the MOM service, there is no more events in my log.
any idea?
thanks.
Jerome.
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in