False Alert (?) from cleared app event log

  • Whether doing this local or remotely:

    1. Clear Application Event Log on SQL Server...

    2. SQLSERVERAGENT 311 : Info - Attempting to to re-open the local eventlog...

    3. SQLSERVERAGENT 318 : Err - Unable to read local eventlog (reason: The event log file has changed between read operations).

    4. SQLSERVERAGENT 312 : Warning - Successfully re-opened the local eventlog - NOTE: Some events may have been missed.

    Is this an accessibility problem? If so, why is the Agent having trouble with accessing the SQL server's event log durring regular clearing? How can I stop these 'false' alarms?

    CaperSailor

    Outside of a dog, a book is a man's best friend. Inside of a dog, it's too dark to read." Groucho Marx, 1890-1977


    CaperSailor

    Outside of a dog, a book is a man's best friend. Inside of a dog, it's too dark to read." Groucho Marx, 1890-1977

  • This was removed by the editor as SPAM

  • The SQL Server Agent will talk to the Application Event Log on the server. If you are in the process of clearing it, it won't be available for use by other applications. Once it's cleared, SQL Server Agent will be able to access it again. This explains what you are seeing. It's not really a false positive because during the time you are clearing, the Event Log truly is unavailable.

    K. Brian Kelley

    http://www.truthsolutions.com/

    Author: Start to Finish Guide to SQL Server Performance Monitoring

    http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1

    K. Brian Kelley
    @kbriankelley

  • Yes, I agree. I guess what I'm really asking is how to get the NT Messaging software to stop paging me on these errors. We tried to turn off this type of error in the registry under user SQLSERVERAGENT, but I imagine that its not that user that is actually sending the page, but some internal system user which is the owner of the message repository....??

    CaperSailor

    Outside of a dog, a book is a man's best friend. Inside of a dog, it's too dark to read." Groucho Marx, 1890-1977


    CaperSailor

    Outside of a dog, a book is a man's best friend. Inside of a dog, it's too dark to read." Groucho Marx, 1890-1977

  • Out of curiosity, are you doing anything special with / in the event log!

  • I'm sorry, I'm not sure what you mean "/" ?

    CaperSailor

    Outside of a dog, a book is a man's best friend. Inside of a dog, it's too dark to read." Groucho Marx, 1890-1977


    CaperSailor

    Outside of a dog, a book is a man's best friend. Inside of a dog, it's too dark to read." Groucho Marx, 1890-1977

  • The alert mechanism in the SQL Server Agent properties doesn't allow for a differentiation. That's probably how you're getting notified. You may check there to verify. Unfortunately, there aren't criteria to distinguish behavior, so it's an all or nothing notification system.

    K. Brian Kelley

    http://www.truthsolutions.com/

    Author: Start to Finish Guide to SQL Server Performance Monitoring

    http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1

    K. Brian Kelley
    @kbriankelley

Viewing 7 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply