Event ID 25222 is logged when you use the Internet Information Server (IIS) Management Pack for MOM 2005 to monitor IIS (922335)



The information in this article applies to:

  • Microsoft Operations Manager 2005

SYMPTOMS

Events that resemble the following are logged in the Application event log on the computer that is running Microsoft Operations Manager (MOM) 2005:Event Type: Error
Event Source: Microsoft Operations Manager
Event Category: MOM Agent
Event ID: 25222
Date: date
Time: time
User: NT AUTHORITY\SYSTEM
Computer: ServerName
Description: The Application Log Provider cannot monitor the directory because an unrecoverable error has occurred.
Source: Internet Information Server web server log Directory: C:\WINNT\System32\LogFiles\W3svc1

For more information, see Help and Support Center at http://support.microsoft.com. You experience this problem if the following conditions are true:
  • You use the Microsoft Internet Information Server (IIS) Management Pack for MOM 2005 to monitor a computer that is running IIS.
  • One or more IIS log file folders are empty.

    Note By default, IIS stores log files in the %WINDIR%\System32\LogFiles folder.

CAUSE

This problem occurs because the IIS Application log file provider expects a log file to exist in the log file folder. IIS creates a folder in which to store the log files. Then, IIS creates an empty log file in the log file folder.

When you use the Internet Information Server (IIS) Management Pack for MOM 2005 to monitor a computer that is running IIS, a MOM rule monitors the IIS Application log file provider for errors. If no log file exists in a log file folder, the MOM agent reports that an error occurred in reading the log file.

WORKAROUND

To work around this problem, do not remove IIS log files from the IIS log file folder.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

To obtain the Internet Information Server (IIS) Management Pack for MOM 2005, visit the following Microsoft Web site:

Modification Type:MajorLast Reviewed:9/22/2006
Keywords:kbEventLog kbpending kbBug kbprb KB922335 kbAudITPRO