A Description of the Service Uptime Events That Are Logged by Microsoft Operations Manager (296542)

MORE INFORMATION

The MOM agent verifies and reports about any changes in the status of Microsoft Windows NT services. In the MOM Administrator Console, if you click Monitor, and then click All Other Events, you may observe that several 21224 and 21225 events are displayed. These events are "service uptime" events that are internally generated. They have an informational purpose only. These events have not originated in the Windows NT event logs of the monitored computer.

The 21224 events are generated by the MOM agent to indicate that the agent is functional; and the 21225 events are generated by the MOM agent to indicate that the specified Windows NT service is functional.

The service uptime events are used to populate 3 reports on service availability. These reports are located in the Operations report category in the Reporting tool.

The default configuration for service checking is to check for availability of services every 600 seconds, and to report on the service checks every 3600 seconds.

Even though these events are internally generated in MOM, they take considerable space in the event views in the MMC monitor, as well as the MOM database. If these events are excessive in size and cause problems when you work in the administrator console, you can reduce their frequency or disable them:

1. Click Configuration, and then click Global Settings.
2. In the right pane, double-click Agents to open the agents properties page.
3. Click the Service Availability tab, and then edit the properties for service checking to reduce the frequency of the reports to a more optimal level.

In MOM, several reports require these events to be logged. If the events are not logged, the reports do not function.