IV51434: WINDOWS OS AGENT CRASHES WHILE PROCESSING EVENT IN EVENT LOG

IBM Tivoli Monitoring 6.2.3 Fix Pack 5 (6.2.3-TIV-ITM-FP0005)

APAR status

• Closed as program error.

Error description

• Environment: Tivoli Monitoring Windows OS agent 6.2.3 FP3
  Problem Description: The Windows OS agents fails in retrieving
  event information for event ID 6013 and crashes because it does
  not correctly handle such case.
  

Local fix

Problem summary

• The Monitoring Agent for Windows OS crashes after failing to
  retrieve XML data associated to event ID 6013 (system uptime)
  which the operating system logs once every day at 12:00PM. This
  only occurs when the following configuration setting has been
  set: NT_LOG_APPEND_XML_DATA=1
  

Problem conclusion

• Fixed the code in order to handle the
    longer XML data associated to event ID 6013.
  
  The fix for this APAR will be contained in the following
  maintenance packages:
  
  | FixPack | 6.2.3-TIV-ITM-FP0005
  | FixPack | 6.3.0-TIV-ITM-FP0003
  

Temporary fix

• Set NT_LOG_APPEND_XML_DATA=0 in the KNTENV file.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ITM AGENT WINDO

• Fixed component ID

  5724C040W

Applicable component levels

• R623 PSY

     UP

• R630 PSY

     UP

• R610 PSN

     UP

• R620 PSN

     UP

• R621 PSN

     UP

• R622 PSN

     UP