Event ID 26017 from source "Health Service Modules" will be raised for Operations Manager 2007 SP1 agents, indicating "Event log Provider monitoring the Event Log is # minutes behind," and the number of minutes is in the hundreds of millions.

Problem:
When an Operations Manager 2007 SP1 agent is installed on a computer that is running Windows 7 or Windows Server 2008 R2, the following event may be logged in one or more event logs. Additionally, value for the number of minutes is very large.

Log Name: Operations Manager
Source: Health Service Modules
Event ID: 26017
Level: Warning
Description: The Windows Event Log Provider monitoring the %1 Event Log is %2 minutes behind in processing events. This can occur when the provider is restarted after it is offline for some time, or there are too many events to be handled by the workflow.

Impact:
None. These events are generated because of the delta between timestamps is calculated incorrectly. The event log processing is actually working correctly, and the events can be ignored.

Workaround:
No workaround is required. Ignore the events or upgrade to Operations Manager 2007 R2. This issue will be fixed in updates that will be available in the future for Operations Manager 2007 SP1

More Info:
http://support.microsoft.com/kb/974722

Comentarios