IZ67701: Spurious log message; srLogMon: An internal Windows error occure d extracting message ID

IBM Tivoli 4.0.0-TIV-SSM-FP0010
IBM Tivoli 4.0.0-TIV-SSM-FP0011
IBM Netcool System Service Monitor SSM 4.0 Fix Pack 12 README 4.0.0-TIV-SSM-FP0012
IBM Netcool System Service Monitor SSM 4.0 Fix Pack 13 README 4.0.0-TIV-SSM-FP0013
IBM Netcool System Service Monitor SSM 4.0 Fix Pack 14 README 4.0.0-TIV-SSM-FP0014
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 1 README 4.0.0.14-TIV-SSM-IF0001
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 2 README 4.0.0.14-TIV-SSM-IF0002
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 3 README 4.0.0.14-TIV-SSM-IF0003
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 4 README 4.0.0.14-TIV-SSM-IF0004
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 5 README 4.0.0.14-TIV-SSM-IF0005
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 6 README 4.0.0.14-TIV-SSM-IF0006
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 7 README 4.0.0.14-TIV-SSM-IF0007
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 8 README 4.0.0.14-TIV-SSM-IF0008
IBM Netcool System Service Monitor SSM 4.0 Interim Fix 1 README 4.0.0.15-TIV-SSM-IF0001

APAR status

• Closed as program error.

Error description

• SSM 4.0 FP 8 Windows 2003 32bits : error using srLogMon
  
  .
  Description:
  Customer has two hosts equipped with Windows 2003 Server SP2 (1
  with 32 bits,  with 64 bits edition).
  
  They have installed SSM 4.0 with FixPack 8.
  No error occurs when installing the agent.
  No error too when the agent starts.
  After a while, the console displays the error :
  srLogMon: An internal Windows error occured extracting message
  ID 552
  from C:\WINDOWS\System32\MsAuditE.dll
  srLogMon: An internal Windows error occured extracting message
  ID 552
  from C:\WINDOWS\System32\MsAuditE.dll
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users of srLogMon/LogMonX on Windows
  ****************************************************************
  PROBLEM DESCRIPTION:
  A spurious log message appears in ssmagent.log:
  srLogMon: An internal Windows error occured extracting message
  ID
  ****************************************************************
  RECOMMENDATION:
  Upgrade to Fix Pack 9 for SSM 4.0.
  ****************************************************************
  

Problem conclusion

• The log message itself was wrong. Windows event log monitoring
  is operating correctly. The log message has been removed.
  
  The fix for this APAR is contained in the following maintenance
  packages:
  | fix pack | 4.0.0-TIV-SSM-FP0009
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  NETCOOL SYS SVC

• Fixed component ID

  5724P4300

Applicable component levels

• R400 PSN

     UP