Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
WMI ADAP was unable to process the <library name> performance library due to a time violation in the <function name> function
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What are the performance counters?
What is WMI?
What is WMI ADAP?
If this event is logged when the computer is restarted this may be a temporary error. For other instances, the performance counter registries might be corrupt. See MSW2KDB for more details.
If winmgmt /clearadap doesn't fix your problem, your performance counter registry entries may be corrupted. Every time you install an extensible performance counter, files like PerfStringBackup_nnn.ini are created in the %SystemRoot%\System32 folder, before the registry entries are updated. If you suspect that your performance counter registry entries are corrupt try the following:
1) Use Dir /ON %SystemRoot%\System32\PerfStringBackup*.ini to provide a chronological list of installed counters.
2) Look for a significant change in the size of these files. The file prior to the change is probably good. Restore the performance counter registry entries to this good state by opening a CMD prompt, switching to the %SystemRoot%\System32 folder, and typing lodctr /r:filename, where filename is the last good .ini file.
NOTE: This will remove any performance counters added after the PerfStringBackup_nnn.ini snapshot. You will need to reinstall the counters, or the programs that installed them. If you must reinstall the counter that caused the corruption, monitor the process.
Woodrow Wayne Collins
If this error appears at the same time as the system is rebooting, no action is necessary as it is to be expected.
Library: PerfDisk / Function: open
Performance counter registry might be corrupt. To restore the performance counter registry entries to the state described in a PerfStringBackup_xxx.ini file, run the following command
where filename is the name of the PerfStringBackup_xxx.ini file you want to restore. This is a bug in Windows 2000.
Library: PerfProc / Function: collect
This error is typically generated by a malfunctioning Windows Management Instrumentation (WMI) Performance Library dredger or the dredger getting false information (from malfunctioning performance counters). For more details check the links below.
|Private comment: Subscribers only. See example of private comment|
|Links: http://www.microsoft.com/technet/itcommunity/chats/trans/win2ksrv/w2wmi16.asp, MSW2KDB|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (1) - More links...|
Send comments or solutions
- Notify me when updated