I have a number of Azure Web Sites running on single-instance, Standard S2 tiers (each site on it's own instance). The sites are in different regions and they run completely different and independent code. I have noticed that if I view the eventlog.xml file on any of my sites, I see a number of Role environment . FAILED TO INITIALIZE events showing up. Here is an extract from the file:
<Event>
<System>
<Provider Name="Windows Azure Runtime 2.5.0.0"/>
<EventID>1013</EventID>
<Level>0</Level>
<Task>0</Task>
<Keywords>Keywords</Keywords>
<TimeCreated SystemTime="2015-05-06T07:07:35Z"/>
<EventRecordID>976923406</EventRecordID>
<Channel>Application</Channel>
<Computer>RD000XXXXXE</Computer>
<Security/>
</System>
<EventData>
<Data>4008</Data>
<Data>w3wp</Data>
<Data>Role environment . INITIALIZING</Data>
</EventData>
</Event>
<Event>
<System>
<Provider Name="Windows Azure Runtime 2.5.0.0"/>
<EventID>1013</EventID>
<Level>0</Level>
<Task>0</Task>
<Keywords>Keywords</Keywords>
<TimeCreated SystemTime="2015-05-06T07:07:36Z"/>
<EventRecordID>976923937</EventRecordID>
<Channel>Application</Channel>
<Computer>RD000XXXXXE</Computer>
<Security/>
</System>
<EventData>
<Data>4008</Data>
<Data>w3wp</Data>
<Data>Role environment . INITIALED RETURNED. HResult=-2147024891</Data>
</EventData>
</Event>
<Event>
<System>
<Provider Name="Windows Azure Runtime 2.5.0.0"/>
<EventID>1015</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>Keywords</Keywords>
<TimeCreated SystemTime="2015-05-06T07:07:36Z"/>
<EventRecordID>976924062</EventRecordID>
<Channel>Application</Channel>
<Computer>RD000XXXXXE</Computer>
<Security/>
</System>
<EventData>
<Data>4008</Data>
<Data>w3wp</Data>
<Data>Role environment . FAILED TO INITIALIZE. hr: -2147024891</Data>
</EventData>
</Event>
I have also noticed that these events coincide with a brief outage of the site (just a minute or two). These events seem to be random. Sometimes there can be 20 events in an hour. Other times it can go for days without a single event.
I am trying to understand what is causing these events and how (or if) I can prevent them. I would prefer not to have my sites go down at all. I can probably mitigate the issue by having multiple instances for each site but even so, I would at least like to have a good answer as to what is going on here.
Note: these sites are deployed to Azure Websites, not Cloud Services (i.e. not Web or Worker Roles).
These events are written when you reference Azure Diagnostics in your web app. It is not recommended to use this in case of web app. It makes sense to use it in cloud services, but not in case of web apps.
This can affect the application sometimes.
Related
Migrated a Win 2008 R2 VM from on premise to Azure. (via Azure SiteRecovery tool)
Now the VM Win Event spam every few seconds a:
DCOM was unable to communicate with the computer YTO231080216052 using any of the configured protocols.
The string: YTO231080216052 I found in the registry under the Azure Agent (same as Hyper V integration services):
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters]
"HostName"="YTO231080216052"
"PhysicalHostName"="YTO231080216052"
"PhysicalHostNameFullyQualified"="YTO231080216052"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest]
"WireServerStatus"="Succeeded"
"GuestAgentVersion"="2.7.41491.1044"
"OsVersion"="Windows:Windows Server 2008 R2 Enterprise-Microsoft Windows NT 6.1.7601 Service Pack 1"
Full Event log XML
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 23/03/2022 11:06:04 AM
Event ID: 10009
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: myVM123
Description:
DCOM was unable to communicate with the computer YTO231080216052 using any of the configured protocols.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10009</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-03-23T17:06:04.000000000Z" />
<EventRecordID>82659</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>myVM123</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">YTO231080216052</Data>
<Binary>3C52656--removed--31363035327D3E</Binary>
</EventData>
</Event>
My Questions is how to solve this? Does the VM try to communicate (DCOM) with the host?
Notice in the device manger an unknown device:
VMBUS\{c376c1c3-d276-48d2-90a9-c04748072c60}
VMBUS\{c4e5e7d1-d748-4afc-979d-683167910a55}
MS claims "The unknown devices are harmless and can be safely ignored."
Does this related to the error message?
Been adding Win 10 PCs to domain since day one, never ran into this, so have some experience.
Fresh install of Win 10 (Feb 2020), started with a local user/admin. All good. Added first domain user. Log in as that new domain user, which is an admin. All fine. Click Settings (cog wheel) to change things as per normal under Settings > System and the Settings app blinks out.
Event log shows multiple errors, this one being key(?)
Log Name: Microsoft-Windows-AppModel-Runtime/Admin
Source: Microsoft-Windows-AppModel-Runtime
Date: 2/14/2020 3:12:38 PM
Event ID: 69
Task Category: None
Level: Error
Keywords: Process
User: SYSTEM
Computer: ****.domainnamehere.local
Description:
Failed with 0x490 modifying AppModel Runtime status for package windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy for user domainnamehere\UserNameHere (current status = 0x0, desired status = 0x20).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{f1ef270a-0d32-4352-ba52-dbab41e1d859}" />
<EventID>69</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000001</Keywords>
<TimeCreated SystemTime="2020-02-14T14:12:38.789060000Z" />
<EventRecordID>1343</EventRecordID>
<Correlation ActivityID="{23a0968a-e33b-0004-1ed4-a0233be3d501}" />
<Execution ProcessID="5720" ThreadID="1324" />
<Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
<Computer>computernamehere.domainnamehere.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ErrorCode">1168</Data>
<Data Name="PackageFullName">windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy</Data>
<Data Name="User">S-1-5-21-3229509536-3853329613-2519243864-1117</Data>
<Data Name="DesiredStatus">32</Data>
<Data Name="CurrentStatus">0</Data>
</EventData>
</Event>
And, yes, did do extensive searching via Google (now mostly results for ad-farms with little or no good info), and Duck Duck Go - likewise, nothing.
This is an iMac on BootCamp (as are ALL our desktops now and for years because we use them for different user tasks that can be Mac or Windows), and never had problems before.
Only difference is this machine uses an AMD video card, and all the others are NVIDIA.
Clicking Settings (cog wheel) for any other option works.
Win 10 1909 with all Feb 2020 updates.
I have several Azure (Classic) Cloud Service worker roles, with VM Size Extra small (1 core, 768 MB). I'm noticing frequent errors being logged (several times a day) to application insights. The errors seem to be from the Windows system itself whilst attempting to defrag drives. These errors don't seem to be of any consequence other than they're filling up logs unnecessarily. I'd like to get rid of them anyhow. Here's the raw XML for the errors logged...
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'>
<System>
<Provider Name='Microsoft-Windows-Defrag'/>
<EventID Qualifiers='32768'>257</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime='2019-03-29T04:23:21.000000000Z'/>
<EventRecordID>623</EventRecordID>
<Channel>Application</Channel>
<Computer>prod0</Computer>
<Security/>
</System>
<EventData>
<Data>(C:)</Data>
<Data>Neither Slab Consolidation nor Slab Analysis will run if slabs are less than 8 MB. (0x8900002D)</Data>
<Binary>2D0000896303000094010000AE0100002236B942D9B1BD381B0700000000000000000000</Binary>
</EventData>
</Event>
and...
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'>
<System>
<Provider Name='Microsoft-Windows-Defrag'/>
<EventID Qualifiers='32768'>257</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime='2019-03-29T04:23:20.000000000Z'/>
<EventRecordID>622</EventRecordID>
<Channel>Application</Channel>
<Computer>prod0</Computer>
<Security/>
</System>
<EventData>
<Data>SYSTEM</Data>
<Data>This operation is not supported on this filesystem. (0x89000020)</Data>
<Binary>00000000A40500005105000000000000629468641336AAB85B55B1B5B038000000000000</Binary>
</EventData>
</Event>
There's also another with the message...
The Collect Procedure for the "D:\Windows\System32\winspool.drv"
service in DLL "Spooler" generated an exception or returned an invalid
status. The performance data returned by the counter DLL will not be
returned in the Perf Data Block. The first four bytes (DWORD) of the
Data section contains the exception code or status code.
and operation_SyntheticSource: AzureDiag_WEL
Has anyone else encountered these errors and did you have a resolution for them?
In my Azure Web Site's Event Log I see same error every 1-5 minutes:
1 [varies]
5
50000780
What does this error message mean? Thank you in advance!
I found a similar issue, albeit for Sharepoint and Lightswitch. It looks like they had a similar error number show up in their event logs, breaking it down into the XML output:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="IIS Express" />
<EventID Qualifiers="32768">2284</EventID> <!-- Searched on this -->
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-09-14T03:48:18.000000000Z" />
<EventRecordID>8608</EventRecordID>
<Channel>Application</Channel>
<Computer>PSN-W12S-720</Computer>
<Security />
</System>
<EventData>
<Data>1</Data>
<Data>5</Data>
<Binary>50000780</Binary>
</EventData>
</Event>
Then I did a search on the EventID from above and found that there is an TechNet Article about Event ID 2284 which essentially states that FREB wasn't able to write to the logs.
FailedRequestTracing module failed to write buffered events to log
file for the request that matched failure definition. No logs will be
generated until this condition is corrected. The problem happened at
least %1 times in the last %2 minutes. The data is the error.
Do you happen to have Failed Request Tracing enabled for your site? If not you might want to, apparently it's trying to write something every 1-5 minutes.
I have terrible problem with WorkerRole instance on Windows Azure. I have a Windows Azure projct that contains WebRole and WorkerRole.
The problem is, the WorkerRole instance is Unhealthy. The Error on a server:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-02-18T21:29:18.000Z" />
<EventRecordID>864</EventRecordID>
<Channel>Application</Channel>
<Computer>RD00155D3A4A2E</Computer>
<Security />
</System>
<EventData>
<Data>WaHostBootstrapper.exe</Data>
<Data>6.0.6002.18488</Data>
<Data>505cf7da</Data>
<Data>ntdll.dll</Data>
<Data>6.0.6002.18520</Data>
<Data>4e811810</Data>
<Data>c0000374</Data>
<Data>00000000000acb47</Data>
<Data>ae8</Data>
<Data>01ce0e1ef01200d9</Data>
</EventData>
</Event>
Faulting application WaHostBootstrapper.exe
Can somebody help me ?
p.s Project works perfect on local machine.
If it works on your machine but failed on the cloud it might because you miss some assemblies or dependency component.
You can enable the IntelliTrace when deploying so that later you can download the debug file and this might includes the actual exception/error for your worker role. http://msdn.microsoft.com/en-us/library/windowsazure/ff683671.aspx