WinEventLog Probe Hang Issue in Windows Server 2008
fadhli 2700035C8J Visits (1941)
Tivoli Netcool Omnibus WinEventLog Probe was found to hang after running for around a week in customer production system. This issue was found happen in Operating System with East Asian language setting, for example Japanese language.
Omnibus Support team was able to recreate issue in lab to further investigate the issue. In recreation environment, the hang issue occurred sooner after 24-48 hours with MessageLevel set to ‘debug’ and event rate in target system increased to 200 events for every minute.
Omnibus Integrations L3 found the issue was caused by Microsoft
.Net API namely Text
Microsoft confirm defect in .NET Framework 2.0 or Microsoft .NET Framework 3.5 applications. The defect causes application crash after 2GB of data is written on an East Asian language version of 32-bit Windows.
A workaround of this issue is to run the probe in UTF-8 mode. Running the probe in UTF-8 mode requires additional configurations:
As a permanent solution, there are two options as suggested by Microsoft to address the issue: