ReSearch This KB – Operations Manager Failed to Access the Windows Event Log

Alert: Operations Manager Failed to Access the Windows Event Log

Management Pack Name: System Center Core Monitoring

Management Pack Version: 7.1.10226.0

Rule or Monitor: Monitor

Rule or Monitor Name: Failed Accessing Windows Event Log

Rule or Monitor Notes: This monitor only indicates that there was an issue accessing the Windows Event Log. It does not indicate what rule or monitor is trying to actually access this specific event log.

Issue:

The Windows Event Log Provider is still unable to open the Microsoft-Windows-Hyper-V-Image Management-Service-Admin event log on computer ‘XYZ.com’. The Provider has been unable to open the Microsoft-Windows-Hyper-V-Image-Management-Service-Admin event log for 55440 seconds.

Most recent error details: The specified channel could not be found. Check channel configuration.

This is occurring on each Windows 2012 R2 Hyper-V server in the environment.

Resolution:

The Management Packs for Hyper-V 2008 are incorrectly looking for event logs on 2012 servers which don’t exist in 2012. The following blog post discusses the three monitors (Mounted Drive Read-only, Port Connectivity and Port Disconnectivity) which need to be disabled to address this issue.

http://consultingtales.com/2013/03/07/scom-hyper-v-2008-2012-event-log-issue/

Another option is to manually create this event log, or my resolution was to remove the Hyper-V management pack for 2008 and manually reset the health state of the monitors which were impacted.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.