Windows Event forwarding - What is a "Valid destination log"

Hi all,
I'm currently setting up a centralization infrastructure for Windows events using the built-in event forwarding capabilities available in Windows Server 2008 R2.
One of my requirements is to be able to create several subscriptions on the collector machine and to store forwarded events in different log files. For that, I tested creating a custom log (called CustomLog). This log appears in the Event Viewer, under the
"Applications and Services Logs".
However, I am not able to redirect forwarded events to this CustomLog. CustomLog does not appear in the list of possible destination in the Event Viewer GUI to create a subscription.
To try what could be wrong, I left it with the default ForwardedEvents as destination and I tried to change it via Powershell. I ran the following command supposed to set the destination log as CustomLog:
wecutil ss "Collect from both sources" /lf:CustomLog
It ran without error. Though, no events were logged into CustomLog, and when I go back to the GUI to create/modify subscriptions and I try to open the subscription I set, I get a pop-up stating the following:
"The destination log defined in this subscription cannot be found in the list of valid destination logs on this computer. verify that this log exists on the computer and is valid as a destination for forwarded events. Note that classic logs, analytic
and debug logs and the Security log cannot be used as destination."
Does anybody know what a "valid destination log" is and how I could turn my CustomLog into such a valid destination?
Kind regards,
Mike
P.S. How can I verify my account in order to be able to post screenshots?

MikeSec, did you ever get an answer to this? I'm facing the same and wondered how to setup a custom log location for event forwarding also. Getting the same error as you "The destination log defined in this subscription cannot be found in the list of
valid destination logs on this computer. Verify that this log exists on the computer and is valid as a destination for forwarded events. Note that classic logs, analytic and debug logs and the Security log cannot be used as destinations."
Seems that there isn't a way to register new event-logs as valid destinations or channels for event-forwarding.

Similar Messages

Catching/Using Windows Events

Hi,
Is there a way to use/catch windows events? What I mean is for example; while the java application window/frame is not selected I press the number key "1" on my windows/linux. Can I make my program to catch this as a key event?
Thanks for all help.... Regards...

Hi,
Thanks for response. Then can you give me any example
of a hardway :)No.
Or at least a link that is about.
Regards...It will involve writing native (C/C++) code and then using Java's Native Interface (JNI) to "talk" to your natively written code which is responsible for catching the events from Windows.
Google for JNI.
Like I said: not easy. This is because Java is not designed to be bound to one OS. Perhaps you should write your application in C#.

Event Forwarding Subscription Parameters

Hello,
You provided a good installation guide to create a source initiated subscription here: http://msdn.microsoft.com/en-us/library/windows/desktop/bb870973%28v=vs.85%29.aspx
However, I'd like to know how it really works. Here are a few questions:
Are the logs pulled or pushed? Is this dependent on the Subscription weather it is Normal Mode or Minimize Bandwidth/Latency ? If so, how does the source computer know to push the logs or wait until pulled?
The XML file of a Subscription is very complex. Here is one from the msdn:
<Subscription xmlns="http://schemas.microsoft.com/2006/03/windows/events/subscription">
<SubscriptionId>SampleSISubscription</SubscriptionId>
<SubscriptionType>SourceInitiated</SubscriptionType>
<Description>Source Initiated Subscription Sample</Description>
<Enabled>true</Enabled>
<Uri>http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog</Uri>

<ConfigurationMode>Custom</ConfigurationMode>
<Delivery Mode="Push">
<Batching>
<MaxItems>1</MaxItems>
<MaxLatencyTime>1000</MaxLatencyTime>
</Batching>
<PushSettings>
<Heartbeat Interval="60000"/>
</PushSettings>
</Delivery>
<Expires>2018-01-01T00:00:00.000Z</Expires>
<Query>
<![CDATA[
<QueryList>
<Query Path="Application">
<Select>Event[System/EventID='999']</Select>
</Query>
</QueryList>
]]>
</Query>
<ReadExistingEvents>true</ReadExistingEvents>
<TransportName>http</TransportName>
<ContentFormat>RenderedText</ContentFormat>
<Locale Language="en-US"/>
<LogFile>ForwardedEvents</LogFile>
<AllowedSourceNonDomainComputers></AllowedSourceNonDomainComputers>
<AllowedSourceDomainComputers>O:NSG:NSD:(A;;GA;;;DC)(A;;GA;;;NS)</AllowedSourceDomainComputers>
</Subscription>
What is meant by HeartbeatInterval and Max Latency Time?
Next: When configuring the source computer i have to configure a Refresh time in the Policy key. (Computer Settings - Policies - Administrative Templates - Windows Components - Event Forwarding).
What is meant by that? when is this value being used for what?
If I do not specify this refresh param, what is the default value?
I really hope someone here can help me out of my confusion.
Every Advice is appreciated

Hi,
Thanks for your post.
>>What is meant by HeartbeatInterval and Max Latency Time?
Heartbeat Interval determines how often collector will check if source is still online,
MaxItems and MaxLatencyTime determine how source will batch items. In this example it will wait for 1 events or 1 seconds
<MaxItems>1</MaxItems>
<MaxLatencyTime>1000</MaxLatencyTime>
>>Next: When configuring the source computer i have to configure a Refresh time in the Policy key. (Computer Settings - Policies - Administrative Templates - Windows Components - Event Forwarding)
If you enable this policy setting, you can configure the Source Computer to contact a specific FQDN (Fully Qualified Domain Name) or IP Address and request subscription specifics.
If you disable or do not configure this policy setting, the Event Collector computer will not be specified.
>>when is this value being used for what? If I do not specify this refresh param, what is the default value?
In my view, it is connection refresh time, we must set this parameter, for example,
Use the following syntax when using the HTTPS protocol:
Server=https://<FQDN of the collector>:5986/wsman/SubscriptionManager/WEC,Refresh=<Refresh interval in seconds>,IssuerCA=<Thumb print of the client authentication certificate>
Meanwhile, i think you may ask in MSDN forums for technical support.
https://social.msdn.microsoft.com/Forums/en-US/home
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

JTree and real Components / event forwarding

Ok, so Ive seen some people forward events from JTree to node based Components.
I was just wondering, whether thats the right way to go.
Wouldn't it be better to write your own TreeLayoutManager, add the node based components with nodes as constraints to the the manager and add or remove them when the tree expands/collapses.
My only problem is, when to trigger the doLayout and how to get the proper node sizes. The only given value is the available width in the cellrenderer.
The cellrenderer would just return an empty, properly sized JLabel, and the "layoutmanager" would take care of the the real positioning.
That way I could have the painting speed benefits of a Jtree, combined with the flexibility of real components stored as nodes in it, right?
Well, I'm just looking for opinions on this.
Shoot :-D

Hi,
Thanks for your post.
>>What is meant by HeartbeatInterval and Max Latency Time?
Heartbeat Interval determines how often collector will check if source is still online,
MaxItems and MaxLatencyTime determine how source will batch items. In this example it will wait for 1 events or 1 seconds
<MaxItems>1</MaxItems>
<MaxLatencyTime>1000</MaxLatencyTime>
>>Next: When configuring the source computer i have to configure a Refresh time in the Policy key. (Computer Settings - Policies - Administrative Templates - Windows Components - Event Forwarding)
If you enable this policy setting, you can configure the Source Computer to contact a specific FQDN (Fully Qualified Domain Name) or IP Address and request subscription specifics.
If you disable or do not configure this policy setting, the Event Collector computer will not be specified.
>>when is this value being used for what? If I do not specify this refresh param, what is the default value?
In my view, it is connection refresh time, we must set this parameter, for example,
Use the following syntax when using the HTTPS protocol:
Server=https://<FQDN of the collector>:5986/wsman/SubscriptionManager/WEC,Refresh=<Refresh interval in seconds>,IssuerCA=<Thumb print of the client authentication certificate>
Meanwhile, i think you may ask in MSDN forums for technical support.
https://social.msdn.microsoft.com/Forums/en-US/home
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Windows Event Subscription - Fails To Activate Subscription

When I try to create a subscription on a GUI server I receive this error:
"The client could not start a valid listener to receive subscription events based on the specified input settings."
When I use WECUTIL on Server Core, I get the following error:
"The subscription is saved successfully, but it can't be activated at this time. Use retry-subscription command to retry the subscription. If subscription is running, you can also use get-subscriptionruntimestatus command to get extended error status.
Error = 0x3ae8. The subscription fails to activate."
I have 1 WinRM GPO configured for the domain:
Windows Components/Windows Remote Management (WinRM)/WinRM Services
This is the config file I am using to create the subscription:
<?xml version="1.0" encoding="UTF-8"?>
<Subscription xmlns="http://schemas.microsoft.com/2006/03/windows/events/subscription">
        <SubscriptionId>applocker exe and dll</SubscriptionId>
        <SubscriptionType>SourceInitiated</SubscriptionType>
        <Description></Description>
        <Enabled>true</Enabled>
        <Uri>http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog</Uri>
        <ConfigurationMode>Custom</ConfigurationMode>
        <Delivery Mode="Push">
                <Batching>
                        <MaxLatencyTime>30000</MaxLatencyTime>
                </Batching>
                <PushSettings>
                        <Heartbeat Interval="3600000"/>
                </PushSettings>
        </Delivery>
        <Query>
                <![CDATA[<QueryList><Query Id="0"><Select Path="Microsoft-Windows-AppLocker/EXE and DLL">*</Select></Query></QueryList>]]>
        </Query>
        <ReadExistingEvents>false</ReadExistingEvents>
        <TransportName>HTTP</TransportName>
        <ContentFormat>RenderedText</ContentFormat>
        <Locale Language="en-US"/>
        <LogFile>Microsoft-Windows-AppLocker/EXE and DLL</LogFile>
        <PublisherName></PublisherName>
        <AllowedSourceNonDomainComputers></AllowedSourceNonDomainComputers>
        <AllowedSourceDomainComputers>O:NSG:BAD:P(A;;GA;;;DC)S:</AllowedSourceDomainComputers>
</Subscription>
I also have a GPO set to identify the subscription manager:
Windows Components/Event Forwarding
Configure Target Subscription Manager set to enabled with the following entry:
server=<server FQDN>:5985
Output of C:\WINDOWS\system32>winrm get winrm/config/service
Service
    RootSDDL = O:NSG:BAD:P(A;;GA;;;BA)(A;;GR;;;IU)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;
;;WD)
    MaxConcurrentOperations = 4294967295
    MaxConcurrentOperationsPerUser = 1500
    EnumerationTimeoutms = 240000
    MaxConnections = 300
    MaxPacketRetrievalTimeSeconds = 120
    AllowUnencrypted = false
    Auth
        Basic = false
        Kerberos = true
        Negotiate = true
        Certificate = false
        CredSSP = false
        CbtHardeningLevel = Relaxed
    DefaultPorts
        HTTP = 5985
        HTTPS = 5986
    IPv4Filter = "*" [Source="GPO"]
    IPv6Filter = "*" [Source="GPO"]
    EnableCompatibilityHttpListener = false
    EnableCompatibilityHttpsListener = false
    CertificateThumbprint
    AllowRemoteAccess = true [Source="GPO"]
And output of C:\WINDOWS\system32>winrm e winrm/config/listener
Listener [Source="GPO"]
    Address = *
    Transport = HTTP
    Port = 5985
    Hostname
    Enabled = true
    URLPrefix = wsman
    CertificateThumbprint
    ListeningOn = null
Any ideas why this isn't working? I thought this was a pretty simple service to set up?

Hi Michael Haken,
Based on your description, please refer to the following thread and check if can help you.
Event
Log forwarding (source initiated) GPO configuration qstns
Regarding to error 0x3ae8, this error may be caused by the WinRM Firewall exception rule being disabled.
If anything I misunderstand or any update, please don’t hesitate to let me know.
Hope this helps.
Best regards,
Justin Gu

Can't find valid destination for OS!!

Oh dear oh dear. Our Power Mac has been dying a slow death but we didn't take the early signs to be things we should act upon and didn't know about software like Disk Warrior.
After having trouble booting up and having the computer crash, as well as not respond to fsck -fy and Disk Utility repairs, I tried re-installing the OS. I think I may have repartitioned the drive first as well.
On installing I think I accidentally used the wrong disk and it froze before the install was complete. It didn't recover from this so I restarted the machine and found that the hard drive had vanished and disk utility couldn't find it. I put the computer in a cupboard and said I'd go back to it.
Having purchased Disk Warrior this week I tried to revive the Power Mac using that. I ran DW twice. The first time was so quick i wondered it I'd completed the process. The second time took ages.
When not booting from a disk I get a Folder with a smiley face alternating with a folder and a question mark on a grey screen. I think its looking for a disk, hard drive or otherwise, I also get a image of a globe in a grey square, sometimes flashing.
Long before the problems that now make using it impossible, the monitor also developed a solid line of pixels from one side of the other - not dead pixels because they change colour depending on what's on the screen, but a definite line. I don't know if this is indicative of anything.
Anyway, I also ran a hardware test using DW and it said all was normal.
I then ran the hardware test disk that came with the computer and equally, all elements passed. Which was quite a surprise as it did some funny things during testing:
Towards the end of the memory test the screen became a complex mass of multicoloured lines forming grids and squares... the original screen flashed up showing memory passed the test and then I got green vertical lines on black, then orange vertical lines on black, followed by opaque, pale blue-purple, then salmon, then bright blue, then purple.
The original screen flashed up showing the mac had passed the modem test. Then the screen alternated between black and white which changed by the colour moving up the screen from the bottom. Then it was thick black lines on white followed by thick white lines on black. Then the Vid Ram test was complete.
After the hardware test passed I tried installing OS 9 as DW had said the hard drive had been rewritten and now appeared on the desktop.
The OS 9 disk notified me that a valid destination drive could not be found.
I tried DW again and DW couldn't find anything other than itself on the computer either.
Any ideas on where I can go from here?

Have you been hearing a clicking sound. If so, it's the hard drive failing.
First try something simple. Zap PRAM. See Mac PRAM, NVRAM, CUDA/PMU & Battery Tutorial
 Cheers, Tom

Error occurred while forwarding a message for distributed destination

Is there a change in the way that Uniform Distributed Destinations are handled in the cluster after weblogic9.2?
I am using oracle weblogic 10.3.0.1 in production mode. I have two managed servers, each managed server has a JMS Server.
I create a Uniform distributed Topic on the System module, and publish a message to it.
I can see the message in the topic on the first JMSServer but the following error happens and the message never makes it to the second JMSServer
<Sep 24, 2009 2:00:45 PM GMT+00:00> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING>
<Sep 24, 2009 2:00:45 PM GMT+00:00> <Notice> <Cluster> <BEA-000162> <Starting "async" replication service with remote cluster address "null">
<Sep 24, 2009 2:00:45 PM GMT+00:00> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on IP:PORT for protocols iiops, t3s, CLUSTER-BROADCAST-SECURE, ldaps, https.>
<Sep 24, 2009 2:00:45 PM GMT+00:00> <Notice> <WebLogicServer> <BEA-000330> <Started WebLogic Managed Server "ManSvr1" for domain "Domain" running in Production Mode>
<Sep 24, 2009 2:00:46 PM GMT+00:00> <Notice> <Cluster> <BEA-000102> <Joining cluster Clus on mip:mport>
<Sep 24, 2009 2:00:47 PM GMT+00:00> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
<Sep 24, 2009 2:00:47 PM GMT+00:00> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>
<Sep 24, 2009 2:09:52 PM GMT+00:00> <Warning> <JMS> <BEA-040498> <An error occurred while forwarding a message for distributed destination member JMSSystemResource!JMSServer2@example: weblogic.messaging.dispatcher.DispatcherException: java.rmi.RemoteException: Could not establish a connection with 8935413426058515615S:fqhn:[-1,-1,sslport,sslport,-1,-1,-1]:Domain:ManSvr2, java.rmi.ConnectException: No known valid port for: 'Default[t3]:t3(t3):fqhn:nonsslport:null:-1'; No available router to destination; nested exception is:
java.rmi.ConnectException: No known valid port for: 'Default[t3]:t3(t3):fqhn:nonsslport:null:-1'; No available router to destination; nested exception is:
java.rmi.ConnectException: Could not establish a connection with 8935413426058515615S:fqhn:[-1,-1,sslport,sslport,-1,-1,-1]:Domain:ManSvr2, java.rmi.ConnectException: No known valid port for: 'Default[t3]:t3(t3):fqhn:nonsslport:null:-1'; No available router to destination; nested exception is:

I specified the cluster address, but still get the following errors after a message is published to the topic. Are there other configuration items that can be checked?
<Sep 29, 2009 9:51:49 AM GMT+00:00> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<Sep 29, 2009 9:52:01 AM GMT+00:00> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration" is now listening on 10.241.134.92:7018
for protocols admin, CLUSTER-BROADCAST-SECURE, ldaps, https.>
<Sep 29, 2009 9:53:26 AM GMT+00:00> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on 10.241.134.92:7019 for
protocols iiops, t3s, CLUSTER-BROADCAST-SECURE, ldaps, https.>
<Sep 29, 2009 9:53:26 AM GMT+00:00> <Notice> <WebLogicServer> <BEA-000330> <Started WebLogic Managed Server "ClusManSv
r2" for domain "domain" running in Production Mode>
<Sep 29, 2009 9:53:26 AM GMT+00:00> <Notice> <Cluster> <BEA-000102> <Joining cluster Clus on 224.0.0.10:7390>
<Sep 29, 2009 9:53:27 AM GMT+00:00> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
<Sep 29, 2009 9:53:27 AM GMT+00:00> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>
<Sep 29, 2009 9:56:14 AM GMT+00:00> <Warning> <JMS> <BEA-040498> <An error occurred while forwarding a message for distributed destinati
on member SOAFJMSSystemResource!SOAFJMSServer1@EventingAdminTopic: weblogic.messaging.dispatcher.DispatcherException: java.rmi.RemoteExc
eption: Could not establish a connection with 5660061832836428941S:managedServer.net:[-1,-1,7017,7017,-1,-1,-1]:testnn
2092.net:domain:ClusManSvr1, java.rmi.ConnectException: No known valid port for: 'Def
ault[t3]:t3(t3):managedServer.net:7018:null:-1'; No available router to destination; nested exception is:
java.rmi.ConnectException: No known valid port for: 'Default[t3]:t3(t3):managedServer.net:7018:null:-1'; No ava
ilable router to destination; nested exception is:
java.rmi.ConnectException: Could not establish a connection with 5660061832836428941S:managedServer.net:[-1,-1,1
1217,7017,-1,-1,-1]:managedServer.net:domain:ClusManSvr1, java.rmi.ConnectException: No
known valid port for: 'Default[t3]:t3(t3):managedServer.net:7018:null:-1'; No available router to destination; nested
exception is:
java.rmi.ConnectException: No known valid port for: 'Default[t3]:t3(t3):managedServer.net:7018:null:-1'; No ava
ilable router to destination
weblogic.messaging.dispatcher.DispatcherException: java.rmi.RemoteException: Could not establish a connection with 5660061832836428941S:
managedServer.net:[-1,-1,7017,7017,-1,-1,-1]:managedServer.net:domain:
ClusManSvr1, java.rmi.ConnectException: No known valid port for: 'Default[t3]:t3(t3):managedServer.net:7018:null:-1'; N
o available router to destination; nested exception is:
java.rmi.ConnectException: No known valid port for: 'Default[t3]:t3(t3):managedServer.net:7018:null:-1'; No ava
ilable router to destination; nested exception is:
java.rmi.ConnectException: Could not establish a connection with 5660061832836428941S:managedServer.net:[-1,-1,1
1217,7017,-1,-1,-1]:managedServer.net:domain:ClusManSvr1, java.rmi.ConnectException: No
known valid port for: 'Default[t3]:t3(t3):managedServer.net:7018:null:-1'; No available router to destination; nested
exception is:
java.rmi.ConnectException: No known valid port for: 'Default[t3]:t3(t3):managedServer.net:7018:null:-1'; No ava
ilable router to destination
at weblogic.messaging.dispatcher.DispatcherWrapperState.dispatchAsync(DispatcherWrapperState.java:158)
at weblogic.jms.dispatcher.DispatcherAdapter.dispatchAsync(DispatcherAdapter.java:84)
at weblogic.jms.backend.BEForwardingConsumer$1.run(BEForwardingConsumer.java:503)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363)
at weblogic.jms.backend.BEForwardingConsumer.processMessages(BEForwardingConsumer.java:499)
Truncated. see log file for complete stacktrace
java.rmi.RemoteException: Could not establish a connection with 5660061832836428941S:managedServer.net:[-1,-1,7017,701
7,-1,-1,-1]:managedServer.net:domain:ClusManSvr1, java.rmi.ConnectException: No known v

Operations Manager Failed to Access the Windows Event Log and management server is showing warning state

Hi,
I am monitoring AD server from SCOM 2012 R2. My management server goes into waning state. When i run Health explorer then it come back in the healthy state but after some time it again goes into warning state. After seeing alert i found that a alert is coming
again and again i.e. Operations Manager Failed to Access the Windows Event Log.The description of alert is mention below
The Windows Event Log Provider is still unable to open the DhcpAdminEvents event log on computer 'nc2vws12ad5.corp.nathcorp.com'.
The Provider has been unable to open the DhcpAdminEvents event log for 64080 seconds.
Most recent error details: The RPC server is unavailable.
Please suggest me how to resolve this so that my management server will again come back in healthy state.
Thanks
Abhishek

Hi Abhishek,
As i mentioned earlier the Alert resolution says the same points.
Can you give details on the below ?
Is there really a log named "Dhcpadminevents" in the MS's Event viewer ?
Did you recently configure any new alert where you mentioned "Dhcpadminevents"
as a event log location ?
If yes then what is the target you selected for the rule / monitor there ?
Can you post the results for analysis ?
Gautam.75801

While Installation of 11g database creation time error ORA-28056: Writing audit records to Windows Event Log failed Error

Hi Friends,
OS = Windows XP 3
Database = Oracle 11g R2 32 bit
Processor= intel p4 2.86 Ghz
Ram = 2 gb
Virtual memory = 4gb
I was able to install the oracle 11g successfully, but during installation at the time of database creation I got the following error many times and I ignored it many times... but at 55% finally My installation was hanged nothing was happening after it.....
ORA-28056: Writing audit records to Windows Event Log failed Error and at 55% my Installation got hung,,,, I end the installation and tried to create the database afterward by DBCA but same thing happened....
Please some one help me out, as i need to install on the same machine .....
Thanks and Regards

AAP wrote:
Thanks Now I am able to Create a database , but with one error,
When I created a database using DBCA, at the last stage I got this error,
Database Configuration Assistant : Warning
Enterprise Manager Configuration Failed due to the Following error Listener is not up or database service is not registered with it. Start the listener & Registered database service & run EM Configuration Assistant again....
But when I checked the listener was up.....
Now what was the problem, I am able to connect and work through sqlplus,
But I didnt got the link of EM and when try to create a new connection in sql developer it is giving error ( Status : failure - Test Failed the Network Adapter could not establish the connection )
Thanks & Regards
Creation of the dbcontrol requires a connection via the listener. When configuring the dbcontrol as part of database creation, it appears that the dbcontrol creation step runs before the dynamic registration of the databsase with the listener is complete. Now that the database itself is completed and enough time (really, just a minute or two) has passed to allow the instance to register, use dbca or emca to create the dbcontrol.
Are you able to get a sqlplus connection via the listener (sqlplus scott/tiger@orcl)? That needs to be the first order of business.

How do I get a popup window to stay open with a validation failure?

Environment:
APEX 3.1.1.00.09 on AIX 5.3
Oracle 10.2.0.2 EE on AIX 5.3
Sample app on apex.oracle.com:
Workspace: galway
User: gwicke
Pass: gwicke
Steps:
1- run Page 3
2- select J & B Marketing from drop down
3- select only contract from drop down
4- click on Edit Existing Contract
5- click on Add New Builder
6- Enter the same builder from calling page: Builder Name: Alvarez Construction City: Baton Rouge State: LA
7- click Add Builder
The original version of this page would add the new builder to the database, pass the information back to the calling page and close the popup window. Cool.
I have added a validation on the popup page (Page 4) to check for an existing builder with the same name and city.
What I'd like to have happen is the popup window stay open so the user can see the error message with the instructions for them to click on the CANCEL button and then select the builder from the drop down list. When they click the CANCEL button I need to have the window close.
What is happening is the window is closing as soon as the Add Builder button is clicked.
This is because there is a region called 'scripts' that contains javascript to submit the page and close the window and the condition on the region is only that the Builder Name is not null. So, the good news is that I understand why the window is closing but I'm not sure the best way to keep it open when the error condition happens.
Thanks very much for your help. I'm sure you recall everything about this app you helped me with many months ago. NOT!! :-)
-gary

Gary, I think I've got it working the way you want.
1. I added a conditional branch to page 4 which fires on the not exists builder condition condition.
2. I disabled the reset page process. With that running, the conditional branch to page 4 woul always fire because the builder name and city were always cleared by the time the branch executed.
3. I noticed that the new builder did not show up in your select list until I refreshed page 2. I haven't had a chance to look at that. Maybe a branch back to page 2 from page 4 after successfully loading a new builder will take care of that.
Bob

Connection Timeout Expired in Windows Event Logs

I just recently installed SharePoint 2013 SP1 on a Windows Server 2008 R2 SP1 server and have been receiving this error message in the Windows Event logs:
Cannot connect to SQL Server. <database server name> not found. Additional error information from SQL Server is included below.
Connection Timeout Expired. The timeout period elapsed during the post-login phase. The connection could have timed out while waiting for server to complete the login process and respond; Or it could have timed out while attempting to create
multiple active connections. The duration spent while attempting to connect to this server was - [Pre-Login] initialization=12; handshake=6; [Login] initialization=0; authentication=0; [Post-Login] complete=14000;
I have never seen this error message before in my life on any prior installation of SharePoint that I have ever done. It is only occurring on this one particular installation of SharePoint. The environment is corporate built, so I have no idea
as to how to troubleshoot or determine the root cause of this error message.
I looked at the value of the database-connection-timeout in stsadm and it gets back a value of 15, however, I am unable to alter the database connection timeout using stsadm since I either get an "Object reference not sent to an instance of an object"
error message or "This operation can be performed only on a computer that is joined to a server farm by users who have permissions in SQL Server to read from the configuration database. To connect this server to the server farm, use the SharePoint
Products Configuration Wizard, located on the Start menu in Microsoft SharePoint 2010 Products."
Please advise.

What is specification of your SQL server? i think its more CPU, RAM, I/O issue with SQL server.
under which account you are running the stsadm command?
check this one
http://stackoverflow.com/questions/21230927/sql-azure-the-timeout-period-elapsed-during-the-post-login-phase
may be you fall in this bug
http://connect.microsoft.com/VisualStudio/feedback/details/821803/connection-timeout-expired-the-timeout-period-elapsed-during-the-post-login-phase
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

Report parameter startdate has a defaultvalue or a valid value that depends on the report parameter startdate forward dependencies are not valid

Hi,
Am trying to develop a report the parameter has an issue, it gives me an error.
There are 2 parameter (1st is Date range like start and end date and 2nd is Loan number)
When ever I select date range the Loan number parameter should go blank. If I input a loan number then date range should go blank.
What should I do. Please help
ERROR --report parameter startdate has a defaultvalue or a valid value that depends on the report parameter startdate forward dependencies are not valid

Hi Kay_MD,
If there are only two parameters, we can use first parameter charge the second one, but the second one cannot charge the first one in turn. Because parameter forward dependencies are not valid. To achieve your requirement, we can create another parameter
to control Date_range and Loan_number parameters. For more details, please see:
Add a parameter named ReportParameter1 with two available values: Date_range and Loan_number.
Use the following expression as the default value in Date_range parameter:
=iif(Parameters!ReportParameter.Value="Date_range",1,"") (1 means a useless value)
Use the following expression as the default value in Loan_number parameter:
=iif(Parameters!ReportParameter.Value="Loan_number",1,"") (1 means a useless value)
Please note that the Date_range and Loan_number parameters should enable Allow blank value (“”), and the blank values should also be contained in available values.
If there are any other questions, please feel free to let me know.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Windows event coming through via db- put() call (very puzzling)

We have this problem (https://bugzilla.osafoundation.org/show_bug.cgi?id=11202) where if we run a DEBUG build of chandler after running a RELEASE build on Windows (XP or 2000), running db 4.5.20 or 4.6.21, we're getting a windows event call while inside a db->put() call. This so happens in a somewhat critical section of code where windows events are definitely not expected.
In no place that we can find are there any calls that we expect to tickle the Windows event loop (no yielding or somesuch). An MSVC stacktrace that doesn't even show any 'db' API to be on the stack at all. Yet, stepping through the python code in the python debugger clearly gets us to this error when stepping over the self._db.put() call which is more or less just a db->put() call in C.
We think that we've ruled out threading weirdness, only one thread is involved here.
Our wx engineer seems to remember having seen something about this strange interaction between Berkeley DB and wxWidgets before. Does this ring a bell ? Do you have any clues about what could be going on here ?
Thanks
Andi..

Berkeley DB windows port utilizes Windows' CreateEvent function to implement the lock functionality, which is a fundamental functionality for databases.
You do not have to protect berkeley db access methods for synchronization explicitly, rather, you should set DB_THREAD flag in the DB_ENV->open and DB->open funciton if the env and db handles are to be accessed by multiple thread of the same process, this way, Berkeley db will handle the synchronization internally

Multiple SCOM Alerts for the same unique Windows Event

Multiple SCOM Alerts are being raised for a single Windows event.
For e.g., below is the event :
Date and Time: Description:
12/15/2014 5:15:36 PM Initiating move for database 'xxxdb02' (FromServer=xxxdagnode1.dt.inc, ToServer=, MoveComment=<Null>)
Log Name:
Microsoft-Exchange-HighAvailability/Operational
Source:
Microsoft-Exchange-HighAvailability
Event Number:
306
Level:
4
Logging Computer:
xxxdagnode1.dt.inc
User:
NT AUTHORITY\SYSTEM
Event Data:
< DataItem type =" System.XmlData " time =" 2014-12-15T17:15:37.9848250-05:00 " sourceHealthServiceId =" 261D34BA-3596-ABCF-3728-B5A0AC035D90 " >
< UserData >
< EventXML >
< UniqueId > 2014.12.15.05.15.35.285#9#xxxdagnode2#4d0ce477-5f5c-4304-8c59-292a4a8ca809 </ UniqueId >
< DatabaseName > xxxdb02 </ DatabaseName >
< DatabaseGuid > 4d0ce477-5f5c-4304-8b59-292a4a8ca809 </ DatabaseGuid >
< ActiveServer > XXXDAGNODE1.dt.inc </ ActiveServer >
< ActionCategory > Move </ ActionCategory >
< ActionInitiator > Automatic </ ActionInitiator >
< ActionReason > StoreStopped </ ActionReason >
< AmRole > PAM </ AmRole >
< PAMServer > xxxdagnode2.dt.inc </ PAMServer >
< MountFlags > None </ MountFlags >
< DismountFlags > SkipCacheFlush </ DismountFlags >
< MountdialOverride > None </ MountdialOverride >
< FromServer > xxxdagnode1.dt.inc </ FromServer >
< TargetServer />
< TryOtherHealthyServers > True </ TryOtherHealthyServers >
< SkipValidationChecks > None </ SkipValidationChecks >
< MoveComment > <Null> </ MoveComment >
</ EventXML >
</ UserData >
</ DataItem >
But three alerts were raised for this event.
I double checked with the Unique ID for the Windows Event.
Also the Duplicate alerts show the Same event in the 'Alert Context' field.
My environment:
3 SCOM 2012 R2 UR3 Management Servers.
1 SQL DB Server
Service Manager Connector is configured for Alert Sync. However this issue also affect the alerts that are not synced.
Anybody else faced this issue?

Hi,
It seems like that you are using rule to monitor this event, unlike monitors, rules can continue to send alerts as long as the condition that caused the alert persists or repeats. Depending on what the rule is checking for, a single issue could possibly
generate a huge number of alerts. To prevent the noise of too many alerts, alert suppression can be enabled for a rule.
More details, please check article below:
http://technet.microsoft.com/en-us/library/hh212847.aspx
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Thinking about using the Windows Event Logs as my main log store - looking for pros and cons

I have been writing some larger scripts that write to physical log files. Until today I have avoided trying to use the Windows Event logs, but, am beginning to rethink this and wondered if anyone has done this, and, what the strengths and weaknesses
of this logging approach has been. If I do it, I will probably write a function that accepts pipelined input and simply pass output to the log. I wanted to get a feel for what I would be getting into before I started writing things up since this
will probably take a little bit of work to get set up to run properly.

At my company we use the Windows event log for many of our batch process logging for several reasons:
Unlike logging to a central database, the Windows event log is always available. I've seen poorly thought out logging solution which log to a database and if the database happens to be unavailable the batch process would fail.
Monitoring tool such as SCOM already have Windows event log watchers so adding alerts to take action based on message written to the Windows event log is easy
Built-in support for writing Windows event log entries in the Powershell V2 write-eventlog cmdlet, a simple CLR can created in SQL Server or even command-line eventcreate.exe
Easy to create a custom event log so you don't have to use the default application log in Windows 2008 and higher.
Most shrink-wrap S/W already use the event log
Issues I've seen:
Windows 2008 with UAC on requires "registering" i.e. creating a new event log source with UAC. This can be done one time manually. Unfortunately there isn't a way to automate UAC--pure GUI. The Powershell command would be "New-EventLog -LogName Application
-Source mysource" if you're using the Application log and must be run as administrator.
Errant process writes many entries to the event log. Depending on the volume like for example writing stack dumps this can performance problems. I think I recall an issue an Windows 2003 or Windows 2008 with UAC off if you're creating a new
event log source each time (which you shouldn't) then these results in many registry entries which can cause problems.
I don't think the issues outweigh the benefits--just something to be aware of.

Windows Event forwarding - What is a "Valid destination log"

Similar Messages

Maybe you are looking for