Welcome to Management Pack Wiki! Your documentation pro for SCOM Management Packs
0 comment(s) Post a comment

Failed To Write To The Audit Log Monitor

  • ID:  Microsoft.ActiveDirectoryFederationServices.10.0.FederationServerFailureWritingToAuditLogMonitor
  • Description:  Failed To Write To The Audit Log
  • Target:  Federation Server
  • Enabled:  Yes

Operational States

Name State Description
FirstEventRaised Error  
SecondEventRaised Success  

Alert Details

Monitor State Message Priority Severity Auto Resolution
FirstEventRaised (Error) Failed To Write To The Audit Log Medium Critical Yes

Run As Profiles

Name
Default

Monitor Knowledgebase

Summary

An attempt to write an audit to the Security log in Event Viewer failed.

If any AD FS audit has been logged successfully, the monitor will change to a Green state and the original critical alert will be resolved automatically.

Causes

The following are possible causes for this event:

  • The Security event log service is unavailable.

  • The Federation Service does not have correct permissions to write to the Security log.

Resolutions

The following are possible resolutions for this event:

  • Verify in the Services node of Server Manager that the following services are running:

  • Windows Error Reporting Service

  • Windows Event Collector

  • Windows Event Log

  • Ensure that the Federation Service has the correct permissions to write to the Security log. This includes verifying that the AD FS service account has write permissions to perform auditing. For more information, see "Configure auditing for AD FS" section in the AD FS troubleshooting guide.

External References
This monitor does not contain any external references.

See Also for Active Directory Federation Services Management Pack


Downloads for Active Directory Federation Services Management Pack

Post a comment