Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
The RPC call failed in the Open function of the FileReplicaConn Object. The counter for this object will not be available. The FileReplicaConn object contains the performance counters of the connections over which files are being replicated by the File Replication Service.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What are the performance counters?
What is the role of File Replication Service?
From a Usenet post: "To work around this behavior, force the File Replication service to re-create the registry keys that point to the system monitor counters for the File Replication service:
1. Type the "net stop NTFRS" (without the quotation marks) command at a command prompt to stop the File Replication service.
2. Start Registry Editor, and then delete the following registry keys:
a. Delete the FileReplicaConn folder and all the subfolders, which are located under the HKLM\System\CurrentControlSet\Services key.
b. Delete the FileReplicaSet folder and all the subfolders, which are located under the HKLM\System\CurrentControlSet\Services key.
3. Restart the File Replication service to place the two keys back in the registry.
You may need to refresh Registry Editor to see the newly created registry keys. In addition, you can disable performance counters for a specific service with the Exctrlst.exe utility from the Windows 2000 Resource Kit. This utility disables the specific counter by adding a registry key similar to the example below. You can add these registry entries under the specific counter entry manually if Exctrlst.exe is not available or desirable.
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated