3.9 GenericEventLog

This Knowledge Script monitors the event log for generic error events created by SharePoint. The SharePoint administrator can configure the event types in the SharePoint Central Administration site.

This script raises events for the following error codes:

  • 42: Propagation failed to communicate with a query server.

  • 2438: Crawler cannot read from registry.

  • 2462: Failed to load word breaker.

  • 2483|2484: Failed to load protocol handler.

  • 3353: Backup failed due to insufficient permissions.

  • 4105|4106: Master merge error.

  • 4127: Failed to load index.

  • 4138: Index is corrupt.

  • 7035: Backup failed due to timer job failure.

  • 10038: Query server removed from rotation.

3.9.1 Resource Objects

SharePoint Server: Web Applications

3.9.2 Default Schedule

The default interval for this script is every 10 minutes.

3.9.3 Setting Parameter Values

Set the following parameters as needed:

Description

How to Set It

General Settings

Job failure event notification

Event severity when job fails

Set the event severity level, from 1 to 40, to indicate the importance of an event in which the GenericEventLog job fails. The default is 5.

Additional Settings

Event Details

Event detail format

Specify the format of the event details, either as an HTML table or as plain text. The default is HTML Table.

Monitor Generic Event Log

Event Notification

Raise event if SharePoint generates a generic error event?

Select Yes to raise an event if SharePoint generates a generic error event in the event log. The default is Yes.

Event severity when SharePoint generates an error event

Set the event severity level, from 1 to 40, to indicate the importance of an event in which SharePoint generates an error event. The default is 20.

Data Collection

Collect data for the generic error event?

Select Yes to collect data for charts and reports. The default is unselected.

Events in past N hours

Set this parameter to control event checking for the first interval (after which checking is incremental):

  • -1 lists all the existing entries

  • N lists events for the past n hours, such as 8 for the past 8 hours, or 50 for the past 50 hours

  • 0 lists only entries from this moment on, without listing any previous entries

The default is 0.

Maximum number of entries per event report

Specify the maximum number of entries, from 1 to 100, that you want to be recorded in each event's detail message.

If this script finds more entries from the log than it can put into one event message, it will return multiple events to report all the outstanding entries in the log. The default is 30 entries.

If this script encounters one or more very large events in the Windows Event log, this script may error out and generate the following event message: Out of string space. If this occurs, specify a smaller value for this parameter.