Failed to query Alarms & Events, alarms not logging

Hi all,
I've recently run in to an issue with the DSC Alarm & Event logging. I have a number of shared variable libraries all setup to log both data and alarms to Citadel. I've double checked that the library itself is configured for logging data and alarms, as well as all the variables. Using the DSM, I can see all of the active alarms in the system across all libraries, and can receive all alarm change events programmatically.
For some reason, alarms for only one of the libraries are logging, and attempting to query the historical Alarms & Events through MAX throws an error roughly 14 out of 15 times (with no error code or indication of why it fails). I've also attempted to archive the Citadel database, with it failing with an unspecified error (presumably when archiving the alarms side of things, the data archive seemed to work).
Can anyone offer some insight on how to resolve the problem, preferably without data loss? Further, how can I prevent the issue in future?
Solved!
Go to Solution.

Thanks for your reply Joey.
Libraries are being deployed using the DSC Deploy Libraries VI. The libraries also have data and alarm logging enabled programmatically. At the moment they're both being logged to the same database.
I can't find the "Read Historical Trend.vi" through the DSC Examples. The article was written in 2005 and I'm using DSC 2012 SP1, so I don't know if things have changed since then. I can view the data through MAX without issue if that's any consolation.
The mdf file is about 60MB, with the entire Citadel database at around 6GB.
The Citadel service is definitely running. I've also attempted restarting it (and the PC itself) but the issue is still present.
It's entirely possible there was a power failure, as this has been during a period of plant commissioning. When I can query the alarms through MAX there's a lot of data up to a certain point (end July), then it's very sporadic after that with only certain variable's alarms being logged.
I attempted another database archive and this time it managed to get all the way through, though the archived database also has the same problems querying alarms and events. So at this point I suspect the mdf/mds files are corrupt in some way.
Using the DSM, I've tried manually pointing the libraries to log alarms to a newly created database but this doesn't seem to work. No alarms or events are logged to the new database, and checking the library properties shows that the alarm database which I configured the library to log to had reverted to the original database. Am I missing something obvious here? Do I need to pre-create some traces in the new database before alarms and events will get logged there?
Given I have managed to make a 'good' archive of the database, I'd like to try just deleting the alarms and events portion of the database and start clean. Is there a correct way to do this? I did find this article, but am unsure if this will work with a potentially corrupted database: http://digital.ni.com/public.nsf/allkb/9D3A81218264C68686256DE1005D794F If I stop all of the Citadel and SQLServer related services, can I simply delete the mdf/mds files?

Similar Messages

Query counter : event 3100 not logged in table RSDDSTAT_OLAP

Hi experts,
We have a customer scenario where in the table RSDDSTAT_OLAP table is not getting populated with the eventID '3100' when a query is executed. Due to this the query counter is not getting any value ( according to extractor logic RSTC_BIRS_OLAP_AGGREGATED_DATA)
The changes of the notes : 1250182 ,1505325, 1093755 are already present in the cutomer system.
Hence would like to know the cases in which OLAP read eventid 000003100 would not get recorded in the table RSDDSTAT_OLAP, on execution of the query .
Thanks in Advance,
Keerthi

Hi,
It's a good decision you made because you shouldn't create objects in the SYS schema. I see you're using the add_job_email_notification procedure, so I'm assuming you're on 11g onwards.
This procedure is meant to make the job easy for you. That is, you don't need to worry about setting up AQ, the procedure does it all for you. All you need to do is setup the mail server if not already done, and call this procedure to add the mail notification. That's it.
You can also specify a filter to the add_job_email_notification procedure, so maybe you could specify directly your CLIENT.LOAD_DATA job to this procedure.

Query ALARM not working

Hi everyone
I've created a query and set it as an alarm for specific users
it is active and it has not being poping up the message on the Messages7alert Overview form of their sessions
I was wondering if there is any limitation for the messages Service
or maybe my query is too long:
SELECT DISTINCT
       sc.DocDate,
       SC.Sol SC,
       sC.STATUS_SC,
       OC.OC,
       STATUS_OC,
       oc.canceled,
       (SELECT Y1.User_code
          FROM OUSR Y1
         WHERE Y1.INTERNAL_K = oc.Usersign)
          USUARIO
FROM    (SELECT T0.DocEntry,
                  T0.DOCSTATUS STATUS_OC,
                  T0.Canceled,
                  T0.Cardcode,
                  T0.[CardName],
                  T0.[DocNum] OC,
                  cast (T0.[U_NROEM1] AS VARCHAR (10)) SC,
                  T1.[ItemCode] Art,
                  t0.Usersign
             FROM    OPOR T0
                  INNER JOIN
                     POR1 T1
                  ON T0.DocEntry = T1.DocEntry
            WHERE substring (cast (T0.[DocNum] AS VARCHAR (10)), 5, 1) LIKE '2'
                              group by T0.DocEntry,
                  T0.DOCSTATUS ,
                  T0.Canceled,
                  T0.Cardcode,
                  T0.[CardName],
                  T0.[DocNum] ,
                  cast (T0.[U_NROEM1] AS VARCHAR (10)),
                  T1.[ItemCode],
                  t0.Usersign ) OC
       FULL OUTER JOIN
          (SELECT T0.DocEntry,
                  T0.DocDate,
                  T0.DOCSTATUS STATUS_SC,
                  T0.Cardcode,
                  T0.[CardName],
                  cast (T0.[DocNum] AS VARCHAR (10)) SC,
                  T0.[DocNum] Sol,
                  T1.LineNum,
                  t0.Usersign
             FROM    OPOR T0
                  INNER JOIN
                     POR1 T1
                  ON T0.DocEntry = T1.DocEntry
            WHERE substring (cast (T0.[DocNum] AS VARCHAR (10)), 5, 1) LIKE '1'
                         group by T0.DocEntry,
                  T0.DocDate,
                  T0.DOCSTATUS ,
                  T0.Cardcode,
                  T0.[CardName],
                  cast (T0.[DocNum] AS VARCHAR (10)) ,
                  T0.[DocNum],
                  T1.LineNum,
                  t0.Usersign) SC
       ON OC.SC = SC.SC
WHERE sC.STATUS_SC LIKE 'O' AND OC.STATUS_OC <> ''
hope you'll be able to help me
Best regads,

Hi,
You are right. There are many restrictions to alert query. Your query is way complicated than alert function can handle.
Thanks,
Gordon

CryptAcquireContext failing with ERROR_FILE_NOT_FOUND (2L) when user not logged on Windows 8.1

I am having a hard time migrating a C++ CryptoAPI-based application that currently runs on Windows Server 2008 to Windows 8.1. The scenario is:
This application is eventually triggered by WatchDog.exe, which in its turn is triggered when the computer is started by Windows' Task Scheduler.
Task Scheduler uses the following rules to start the WatchDog.exe:
A Administrator User Account;
Run Whether user is logged on or not;
UNCHECKED: Do not store password. The task will only have access to local resources;
Run with Highest Privileges;
Configure for Win 8.1;
Triggered at system startup.
The server sits there, nobody logged, until in a given scenario WatchDog.exe starts the application. Application log confirms that the owner of the process (GetUserName)
is the very same user Task Scheduler used to trigger WatchDog.exe.
It turns out that this application works fine in Windows Server 2008, but in windows 8.1 a call to CryptAcquireContext fails
with return code ERROR_FILE_NOT_FOUND (2L). The odd thing is that the application will NOT fail if, when started, the user is physically logged
on the machine, although it was not the user who started the application manually.
I took a look at the documentation and
found:
"The profile of the user is not loaded and cannot be found. This happens when the application impersonates a user, for example, the IUSR_ComputerName account."
I had never heard of impersonification, so I made a research and found the APIs LogonUser,ImpersonateLoggedOnUser and RevertToSelf.
I then updated the application in this way:
HANDLE hToken;
if (! LogonUser(L"admin", L".", L"XXXXXXXX", LOGON32_LOGON_BATCH, LOGON32_PROVIDER_DEFAULT, &hToken))
logger->log (_T("Error logging on."));
else
logger->log (PMLOG_LEVEL_TRACE, _T("Logged on."));
if (! ImpersonateLoggedOnUser(hToken))
logger->log (_T("Error impersonating."));
else
logger->log (_T("Impersonated."));
err = XXXXXXXXX(); // calls function which will execute CryptAcquireContext
if (! RevertToSelf())
logger->log (_T("Error reverting."));
else
logger->log (_T("Reverted."));
Excerpt with the call to CryptAcquireContext:
// Get the handle to the default provider.
if(! CryptAcquireContext(&hCryptProv, cryptContainerName, MS_ENHANCED_PROV, PROV_RSA_FULL, 0))
DWORD e = GetLastError();
_stprintf_s (logMsg, 1000, _T("Error %ld acquiring cryptographic provider."), e);
cRSALogger->log (logMsg);
return ERR_CCRYPT_NO_KEY_CONTAINER;
cRSALogger->log (_T("Cryptographic provider acquired."));
As the result, I got the log:
[2015/01/08 20:53:25-TRACE] Logged on.
[2015/01/08 20:53:25-TRACE] Impersonated.
[2015/01/08 20:53:26-ERROR] Error 2 acquiring cryptographic provider.
[2015/01/08 20:53:26-TRACE] Reverted.
That seems to show that impersonation is working properly, but still I get Error 2 (ERROR_FILE_NOT_FOUND) on CryptAcquireContext.
Summary:
On Windows Server 2008, the very same application runs properly even without the calls to LogonUser/Impersonate/Revert.
On Windows 8.1, the application, with or without the calls to LogonUser/Impersonate/Revert, will only work properly if the user is logged on (which
is not acceptable).
Any thoughts where I can run to in order to get this working on windows 8.1?
Thank in advance,
Dan

There are a couple of issues.
Based on the parameters being used in CryptAcquireContext(). A profile needs to be loaded and your app has to be running as the same user who created the keyset. (which is why it works when a user is logged on Windows 8.1) Also, impersonation
does not load your user profile, you need to call LoadUserProfile(). It seems like you should be using a machine keyset for your scenario if you want to do this when nobody is logged on.
Take a look at the following KB article for more information.
https://support.microsoft.com/kb/238187?wa=wsignin1.0
thanks
Frank K [MSFT]

Event 4740 Not Logged for a Single Account Lockout

Domain Functional Level: 2003
PDC Emulator: 2008 R2
Lockout Origin DC (also the RADIUS server): 2003 R2
For quite a while now I have been relying on Event 4740 on the PDC Emulator to track account lockouts. Usually when the RADIUS server causes an account lockout, the Caller Computer Name is blank in the Event 4740. This usually tells me that our
Cisco WLAN Controller caused the lockout.
Our Default Domain Policy is set to audit Account Logon Events for failure, Account Management for success/failure, and Logon Events for success/failure (plus numerous other things).
This time there is no Event 4740 for this account lockout and I can't figure out why. The events are there for other lockouts several minutes before or after this one. Windows just hates me so it decided to skip this one. The main reason
this is a problem is because I just set up Scheduled Task on the PDC Emulator, triggered by Event 4740, to run a PowerShell script that will provide the help desk with a report for each account lockout, even parsing the IIS logs on the Client Access Server
to identify which ActiveSync device caused it. Of course the week after I announce that, Windows decides not to log one.
Using LockoutStatus.exe I determined that the Origin DC for the lockout was the RADIUS server.
NetLogon debug logging is enabled on the RADIUS server, however I took a nap today after being let out of work early for the holiday so by the time I checked the netlogon.bak file it had already been overwritten with newer data.
There was, however, an Event 644 locked on the RADIUS server (pasted below with domain/computer/user details edited for privacy). I don't even know where to start as far as trying to prevent this from happening again. Anyone have any suggestions?
Within the next couple months I will spin up a 2012 RADIUS server and a separate 2008 R2 DC to replace the 2003 multipurpose server, but it's not high on my boss's priority list so it's a tough sell considering the WLAN is functional right now.
Event Type: Success Audit
Event Source: Security
Event Category: Account Management
Event ID: 644
Date: 12/31/2014
Time: 10:00:35 AM
User: NT AUTHORITY\SYSTEM
Computer: DomainControllerAndRadiusServer
Description:
User Account Locked Out:
Target Account Name:
LockedOutUser
Target Account ID:
DOMAIN\LockedOutUser
Caller Machine Name:
CISCO
Caller User Name:
DomainControllerAndRadiusServer$
Caller Domain:
DOMAIN
Caller Logon ID:
(0x0,0x3E7)
For quite a while now I have been relying on Event 4740 on the PDC Emulator to track account lockouts. Usually when the RADIUS server causes an account lockout, the Caller Computer Name is blank in the
Event 4740. This usually tells me that our Cisco WLAN Controller caused the lockout.
For quite a while now I have been relying on Event 4740 on the PDC Emulator to track account lockouts. Usually when the RADIUS server causes an account lockout, the Caller Computer Name is blank in the
Event 4740. This usually tells me that our Cisco WLAN Controller caused the lockout.
For quite a while now I have been relying on Event 4740 on the PDC Emulator to track account lockouts. Usually when the RADIUS server causes an account lockout, the Caller Computer Name is blank in the
Event 4740. This usually tells me that our Cisco WLAN Controller caused the lockout.

Hi,
I suggest you use Auditpol command to check the current auditing status on Domain Controller.
You can type this command below:
Auditpol /get /Category:Logon/Logoff
If the Account Lockout subcategory is set to no auditing, please use /set option to enable auditing:
Auditpol /set /Subcategory:”Account Lockout” /Success:enable /Failure:enable
More information for you:
Auditpol
http://technet.microsoft.com/en-us/library/cc731451.aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Alarms not appearing for events - Agent Not Responding

Hi
I'm hoping someone may be able to help with a frustrating issue.
I have a setup with SunMC 4.0 monitoring approx 15 SunMC agents. The problem is some of these agents are not displaying alarms for events that occur.
E.g. if I trigger an alarm on a host by say filling up a filesystem, on some hosts an alarm will appear in the Alarm tab as exepcted, but on other hosts no alarm appears and hence I cannot acknowledge the alarm.
After doing a bit of digging I have found the following:
1) When the event is triggered on the client the trap is sent to the server
2) The server then tries to communicate with the agent on the client and I see this error in the event.log
[012578fd 0086 ]info Jul 28 14:59:06 event eventmgr: sending snmp collection request to XXXX 1161 XXXX for startline 0...................................................................
[012578ff 0098 ]error Jul 28 14:59:06 event eventmgr: event collection failed for XXXX 1161 XXXX line 0 - error {} {Agent Not Responding}.................................................
3) If I snoop between the 2 servers I can see communication between the server and the client on port 1161 so dont believe it is a network issue
4) I have tried uninstalling and reinstalling the agent. This strangely cured it on one server with the problem, but on another server the problem persists even after reinstalling the agent multiple times
5) I have logged into the postgress database and can see that events are not being logged in the events table (hence not being displayed in the Sun MC console).
6) I have tried reseeding the agent and that makes no difference
7) I have ensured the agent is listening on one network interface by adding snmpBindAnyAddr = "0" to the agent section of the domain-config.x file
I am not sure where else to look for pointers as to what is going on. What beats me is that the servers which the agents are running on all have identical builds built from jumpstart and are on the same network, yet some work and some dont!
Any help from anyone greatly received...
thanks

Hi there,
I found a solution to get the alarmflow going again:
1. Delete the node from SunMC Java Console
2. Stop the agent
3. Remove all logfiles in /var/opt/SUNWsymon/log
4. Start the agent
5. Wait 2 minutes and add the node in SunMC Java Console
After these steps I can see alarms coming through and when adjusting thresholds I can trigger new alarms which show up on the Hostview Alarms tab.
Unfortunately, this only seems to be a temporary solution, at least for some nodes.
Anyway, I figured I'd share this info with everyone. Maybe it will help with your investigation and if someone finds a permanent solution please feel free to post it here ;-)
Best Regards,
Emerald

When changing database directory in lk6.5, no alarms are logged anymore.

When changing database directory in lk6.5, no alarms are logged anymore. Traces are running ok, only any query in MAX concerning alarms, will result in an empty response

Hi Ryan,
I tried many ways. First as you described. Second; delete all databases (with MAX) and start lookout, hoping lk would make al necessary settings.
I tried short path name, long path name. All the same results; database will be made (or manually with Max or automatically by lk), all traces works, only NOT the Alarm logging. (database isn't corrupted, while a query done in MAX don't result in an error, just empty result).
I the meantime I found something;
C:\Documents and Settings\my name\my documents\Databse --> traces works, alarms not
C:\Program Files\National Instruments\Lookout 6.5\Database --> all works
So it seams that specificly "my documents" does'nt work for alarms, just for traces (????)
I also found the following message when trying to export the alarms; "The given Citadel database is not currently configured to log alarms to a relational database." Does this ring a bell?

Where do we exactly use tag query & alarm query??

hi all,
     can anybody pls. clarify as to in what situations we actually use tag query, alarm query, & OLAP query & xml query???

Hi Sushma,
                OLAP query is used to use get the data from all the OLAP sources. But in xMII case it is preferably used to fetch data from SAP-BW. Using xml query we can get the data from xml files and also we can get the data from other query templates and business logi transactions. Using the following URL's
for query template : <b>http://<server name>/Lighthammer/Illuminator?QueryTemplate=<Query Template path>&Param.1=..</b>
for business logic transaction : <b>http://<server name>/Lighthammer/Runner?Transaction=<Transactin path>&InputParameter=<value>&OutputParameter=<OutputVariable defined in Transaction></b>.
                Where as Alram queries are used in the case process systems as expalined by Ravi.
                 For tag queries you can find other threads already available. I think you want exact difference between the purpose of tag query and alarm query usage.
                 The alarm queries are used to store the events and actions related to the process systems, where as the tag queries store the process values with respect to time.
Thanks,
Rajesh.
PS : Please award points if answer is useful.

Alarm not working correctly

I am having the same problem. I set my alarm for 6:30pm on 12-31-2010 and it failed to ring. I did not think much about this and I set another alarm for 1:15am on 01-01-2011 and it sounded. I set another alarm for 01-02-2011 at 5:15am and one for 5:25am and neither one of the alarms sounded and I was late for work. I also tried setting the recurring days and it worked but I never had to do this before this. I have relied on my phones alarms for almost 12 years and I hope that I do not have to revert back to an alarm clock. Help

Apple has told Engadget that it is aware of the iPhone alarm glitch. "We're aware of an issue related to non repeating alarms set for January 1 or 2. Customers can set recurring alarms for those dates and all alarms will work properly beginning January 3," the Apple spokesperson said.

Anyway to get alarms when log in if they came due when machine was off

I am new to ical. Decided to try it this time instead of shareware I have used previously. Big negative is that if an alarm is due when the machine is off, then it never runs.
Is there any way to make an alarm run if the machine was off when it was due --say on login.
My old shareware kept up the notices of an event or a to do item with an alarm on log in until it was marked completed. This was a useful, almost essential feature.
Is there any way to fix this using a script? I don't know how to do scripts yet but if this could be my fix, I would appreciate instructions.

Send a message to your cellphone.
First add your mobile phone and/or pager email addresses to your card in Address Book:
Open the Address Book application program.
Choose Show My Card from the Card menu.
Click Edit to edit your card.
Click the "+" button next to the email field to add an email address.
Choose Custom from the pop-up menu.
Type a label for the address such as "pager".
Click OK.
Enter the email address of your pager or mobile phone in the Email field.
Click Edit to save the changes.
To add an email alarm to an event:
Create or select the event in the iCal window.
Choose Get Info from the Edit menu.
Click the Alarm tab (bell icon) in the Event Info window.
Click "Send e-mail to me at" to enable that option.
Select your pager or mobile phone email address from the pop-up menu.
Set the alarm time using the time field and pop-up menu.
Close the Event Info window.
iMac,iBook Mac OS X (10.4.6)

Can not log into server computer with any accounts - "You are unable to login to the user account "abcdefg" at this time. Logging in to the account failed because an error occurred."

I have a Mac mini running the latest version of OS X and Server. Been running fine and flawlessly. However, I had a strange problem with the iCloud preferences panel crashing when I tried to access it, so I rebooted. Now I can not log into the system with any accounts. My master admin account (along with all the others) gives me the error:
You are unable to login to the user account "abcdefg" at this time. Logging in to the account failed because an error occurred."
I am able to see the server from other macs and I can log into it using the same account, but it only shows me a few of the shared folders I have access to but NOT to my main directories.
Rebooting into Command-R and doing a disk utility, I try and repair permission on that drive and get a bunch of errors like:
ACL found but not expected on Users
Repaired "Users"
ACL found but not expected on Users/.localized
Repaired "Users/.localized"
ACL found but not expected on Users/Shared
Repaired "Users/shared"
ACL found but not expected on Users/Shared/.localized
Repaired "Users/Shared/.localized"
Permissions repair complete.
But rebooting is no joy...same problem. Any idea what is going on or how to repair it? Should I do a time machine restore? Complete new OS X install? Any idea what is causing this or how to salvage it?

Got everything to re-install and it worked fine...for a few hours. Then I came in to find ALL of my network users deleted. Just GONE. Then found out the Open Directory was trashed and was unable to open, recover or restore from a backup. Looks like I may have a bad drive here.
I installed a new drive in the system, re-installed and so far (for a couple of hours anyway) the system seems to be working and stable.

Terminate:Activity failed; there is no back end error log. - Query Designer

Hello all,
Has anyone encountered this erro before while using query Designer. I am trying to drag an infoobject in the rows section and I get this STOP error in message section at the bottom.
Terminate: Activity failed; there is no back-end error log [A006(R9E)]
Diagnosis
An error occurred in the back end.
System Response
An error occurred in the back end for which there is no error message. You cannot continue to work.
Procedure
Exit the Query Designer and correct the error on the back end.
Then start the query designer again.
Procedure for System Administration
I dont get what is going wrong here,
Thanks,

hi,
There may be some problems with the connectivity in the box which you have logged in or in the excel properties itself. Try to login again and see if the problem is resolved else contact the BASIS or admin.
Thanks,
vrrp.

ISE 1.2 not logging failed authentications on guest portal (CWA)

Hi there
I think this is a bug but wanted to check, if someone knows a good reason why failed authentication attemps with non-existing user account are not logged on ISE 1.2 (CWA).
The different cases:
Case 1: existing user / wrong password -> logged
Case 2: no user / any password -> logged
Case 3: no user / no password -> logged
Case 4: non-existing user / any password -> not logged
In my opinion this is a critical case to be logged because this could be an indicator of a DoS attack or a password penetration test.
Thanks in advance and best regards
Dominic

Hi vatullu
thanks man, you helped me a lot.
Regards
Dominic

Alarm not going off in Lumia 520

Recently I updated my Lumia to WP8.1 and a couple of days later I find my alarms not going off at all, or they do so on random days.
It is really a big issue for me cuz I have to wake up early quite often and without an alarm its impossible.
Please do help or suggest an alternative
Solved!
Go to Solution.

If its the Built-in Alarm, I don't think there is any Volume setting for it .. Its independent of the Ringer+Notification as well as Media+Apps Volume. BTW, do you atleast see the Alarm screen displayed when the time is reached ? If yes, did you try selecting any other Tone ?
Try a Soft Reset : Press and hold Power + Volume(down) keys until the phone vibrates (about 8-10 seconds). Phone will reboot. Then check whether it gets resolved ...

Why does the alarm not work when the iphone 4 is turned off

why does the alarm not work when the iphone 4 for is turned off works fine when on most other phones work when off

The only phone I've ever had that would turn on and sound the alarm is a Blackberry. So, I'd hardly say "most phones" have this function.

Failed to query Alarms & Events, alarms not logging

Similar Messages

Maybe you are looking for