The MOM agent may generate event ID 25257 in MOM 2005 (906858)

SYMPTOMS

This articles discusses two scenarios that may occur in Microsoft Operations Manager (MOM) 2005.

Scenario 1

The MOM service stops processing data. Additionally, the MOM 2005 Management Server or the MOM 2005 agent may log the following error messages to the MOM Operator console.

Error message 1

21421: The response has been running more than 300 seconds and exceeded the time allowed to run.

Error message 2

21423: The host process for script responses will be restarted to recover from responses that might have been engaged in an infinite loop or hanging.

Error message 3

21268: Agent incoming data queue submission has been blocked.

Error message 4

21269: The agent incoming queue now has sufficient space or is available to process new data (not relevant to outgoing queue). This problem occurs under heavy load conditions or when the network connection is unavailable.

Scenario 2

The MOM agent tries to parse an Microsoft Internet Information Services (IIS) log that contains characters from one or more of the following languages:

Japanese
Korean
Simplified Chinese
Traditional Chinese
Greek

In this scenario, an error that is similar to the following may appear in the MOM Operator console:

Event Type: Warning
Event Source: Microsoft Operations Manager
Event Category: MOM Agent
Event ID: 25257
Description:
The Application Log Provider has encountered an unrecoverable error.
Source: Internet Information web server log
Description: IIS Application Log - Web Server

This problem occurs when the following conditions are true:

The MOM 2005 agent is installed on a server that is running one of the previously mentioned language versions of Windows.
The server is running one of the previously mentioned language versions of IIS.
The IIS management pack is installed.

RESOLUTION

Hotfix information

A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Only apply it to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next MOM 2005 service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the hotfix. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

Prerequisites

No prerequisites are required.

Restart requirement

You do not have to restart the computer after you apply this software update. The MOM service will restart after you apply this hotfix.

Hotfix replacement information

This hotfix replaces hotfix 900333. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

900333 A MOM agent generates event 25257 on a server that is running a Korean language version of Windows or the MOM service stops processing data in MOM 2005

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.MOM 2005

File name	File version	File size	Date	Time	Platform
Mom2005-rtm-kb906858-x86-ia64-enu.msi	Not Applicable	4,090,368	15-Nov-2005	17:31	Not Applicable
Momactions.dll	5.0.2749.28	892,928	03-Nov-2005	17:17	x86
Momdbconnector.dll	5.0.2749.28	1,524,224	03-Nov-2005	17:17	x86
Momengine.dll	5.0.2749.28	1,624,064	03-Nov-2005	17:17	x86
Momengine.tlb	Not Applicable	1,784	13-Aug-2004	11:43	Not Applicable
Momforwardingconnector.dll	5.0.2749.28	355,840	03-Nov-2005	17:17	x86
Momhost.exe	5.0.2749.28	54,272	03-Nov-2005	17:17	x86

MOM 2005 with Service Pack 1

File name	File version	File size	Date	Time	Platform	SP requirement
Mom2005-sp1-kb906858-x86-ia64-enu.msi	Not Applicable	1,399,808	13-Dec-2005	14:49	Not Applicable	SP1
Momactions.dll	5.0.2911.1	900,336	02-Dec-2005	12:59	x86	SP1

MORE INFORMATION

Installation instructions

Run the MOM2005-RTM-KB906858-X86-ENU.MSI file on each computer that meets the following criteria:

Hosts a MOM 2005 Management Server
Hosts a manually installed MOM 2005 agent

Run the MOM2005-SP1-KB906858-X86-ENU.MSI file on each computer that meets the following criteria:

Hosts a MOM 2005 SP1 Management Server
Hosts a manually installed MOM 2005 SP1 agent

How to apply this hotfix to MOM 2005 servers

Copy the appropriate .msi file to a local folder or to a shared network folder. If you use a shared network folder, make sure that you can access the folder from the computers that require this hotfix.
Log on as an administrator to a MOM 2005 server that requires this hotfix. You can run the file at a command prompt or by using Windows Explorer.
Run the appropriate .msi file on each MOM 2005 server.
Repeat steps 2 and 3 on each MOM 2005 server that requires this hotfix.

How to apply this hotfix to MOM 2005 agents

Use the MOM 2005 Administrator console to apply this hotfix to MOM 2005 agents whose control level is set to Full. The MOM 2005 agents that can be automatically updated are listed in the following folder:
Microsoft Operations Manager (Server_Name)\Administration\Computers\Pending Actions
Manually apply this hotfix to every MOM 2005 agent whose control level is set to None. These agents are listed in the following folder:
Microsoft Operations Manager (Server_Name)\Administration\Computers\Agent-managed Computers
Apply the hotfix to MOM agent computers whose control level was set to Full after the hotfix was applied to the MOM server. You can manually apply the hotfix or set the MOM server to apply the hotfix. To set the MOM server to apply the hotfix, follow these steps:
1. In the MOM Administrator console, expand Administration, expand Computers, and then click Pending Actions.
2. Right-click the computer, and then click Approve Manual Agent Installation Now.
3. Click the Agent-managed Computers folder.
4. Right-click the MOM 2005 agent, and then click Update Agent Settings.

For more information about how to apply MOM 2005 agent updates, see the "Patches for MOM 2005" section of the Microsoft Operations Manager 2005 Operations Guide.

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates