Windows XP Community - XPHeads



Large WMI notification query may cause a quota violation

microsoft.public.windowsxp.wmi


Reply
  #1 (permalink)  
Old 05-01-2008, 01:57 PM
Jake
 
Posts: n/a
Large WMI notification query may cause a quota violation
Hi,

I am querying the Security Event log for all events, and the event log is
128MB in size. I am writing every event to a text file as it is being read
from the Security event viewer. The process executes for a number of minutes
until the text file reaches about 51MB, then I get the following Windows
Script Host error on my Windows Server 2003 sp2 machine:

Line: 181
Char: 2
Error: 0x8004106C
Code: 8004106C
Source: (null)

I saw KB 828653 "Large WMI notification query may cause a quota violation",
but found that since I had sp2 installed the properties for the Esscli.dll
file on this server vs. that listed in the KB article 828653, the server
version is newer. The server version of Esscli.dll is: version 5.2.3790.3959
(Srv03_Sp2_rtm.070216-1710). I called Microsoft on this and they told me
that the hotfix didn't apply and that I'd have to pay $259 to get help with
this.

I can't justify that cost given the error is exactly what should have been
fixed and is known by Microsoft, so i'm left on my own. Can anyone please
help me??
The line (181) of code that is pointed to in the failure is the last line
(Next) below.
Code:
' Overwrite/create the Eventlog.txt
Set strFile = objFSO.CreateTextFile(strPath, True)
strFile.WriteLine(strLogName & "event log exported for " _
& objComputer & " on: " & Now()) & vbcrlf

'---------------------------------------------------------------------
' Connect to, and query WMI for Event Viewer
Set objWMI = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate,(Security)}!\ \" _
& strComputer & "\root\cimv2")
Set colLoggedEvents = objWMI.ExecQuery _
("Select * from Win32_NTLogEvent Where Logfile = " & strEventLog)

' --------------------------------------------------------------------
' Enumerate/filter event properties and write them to the Eventlog.txt
bOverNinetyDays = False
EventCount = 0
NewEventCount = 0
For Each objItem in colLoggedEvents
dtmTimeGenerated = dtmStringToDate(objItem.TimeGenerated)

If CompareDates(dtmNinetyDaysAgo, dtmTimeGenerated) < 0 Then
bOverNinetyDays = True
End If

If CompareDates(dtmYoungest, dtmTimeGenerated) > 0 Then
strFile.WriteLine("Type: " & objItem.Type)
strFile.WriteLine("Date/Time: " & dtmTimeGenerated)
strFile.WriteLine("Source: " & objItem.SourceName)
strFile.WriteLine("Event ID: " & objItem.EventCode)
strFile.WriteLine("Computer: " & objItem.ComputerName)
strFile.WriteLine("User: " & objItem.User)
strFile.WriteLine("Category: " & objItem.CategoryString)
strFile.WriteLine("Description: " & objItem.Message)
strFile.WriteLine (" ")
EventCount = EventCount + 1
End If

If EventCount >= EventLimit Then
Exit For
End If
Next

Can you please assist me with this issue?
Thanks,
Jake

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Sponsored Links
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 07:42 AM.








Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.1.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74