Welcome to Management Pack Wiki! Your documentation pro for SCOM Management Packs
0 comment(s) Post a comment

The Audit Log Event Source Could Not Be Registered Monitor

  • ID:  Microsoft.ActiveDirectoryFederationServices.10.0.FederationServerAuditLogEventSourceCouldNotBeRegisteredErrorMonitor
  • Description:  The Audit Log Event Source Could Not Be Registered
  • Target:  Federation Server
  • Enabled:  Yes

Operational States

Name State Description
FirstEventRaised Error  
SecondEventRaised Success  

Alert Details

Monitor State Message Priority Severity Auto Resolution
FirstEventRaised (Error) The Audit Log Event Source Could Not Be Registered Medium Critical Yes

Run As Profiles

Name
Default

Monitor Knowledgebase

Summary

This monitor indicates that the AD FS audit log event source could not be registered to the Windows Security Audit log in Event Viewer.

If any AD FS audit has been logged successfully, the monitor will change to a Green state and the original critical alert will be resolved automatically.

Causes

The Federation Service failed to initiate auditing with the Windows event log. The cause is probably something specific to the Windows error code and the exception data that was returned in the event.

Resolutions

To further diagnose the problem, review the error code and the exception text that is included in the event.

External References
This monitor does not contain any external references.

See Also for Active Directory Federation Services Management Pack


Downloads for Active Directory Federation Services Management Pack

Post a comment