• 0

svchost.exe_WinRM Error


We are seeing a sporadic (every couple days) error where the Window Remote Management service (svchost.exe_WinRM) dies along with several other services (DNS Client, Workstation, etc).  This causes our App Pool Memory Usage graph to stop logging data until we re-enable the WinRM service.  Here are the details from the error in the Event Viewer:



Faulting application name: svchost.exe_WinRM, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: wsmsvc.dll, version: 6.3.9600.16406, time stamp: 0x5244e817
Exception code: 0xc0000005
Fault offset: 0x0000000000120da9
Faulting process id: 0x7110
Faulting application start time: 0x01d327defa28711a
Faulting application path: C:\Windows\System32\svchost.exe
Faulting module path: c:\windows\system32\wsmsvc.dll
Report Id: 98541088-93ed-11e7-8a7d-005056b64f06



Seconds before this happens our LogicMonitor service account has Event Log entries for the registry and file system.  Has anyone else seen this error in conjunction with LogicMonitor?

Share this post

Link to post
Share on other sites

2 answers to this question

Recommended Posts

  • 0

At this time none of LogicMonitor's "core" LogicModules employ WinRM services for device polling. Although it's possible that your account may have custom (PowerShell) datasources that might use WinRM, these are likely not supported by LogicMonitor

Share this post

Link to post
Share on other sites
  • 0

We do have a custom PS datasource.  Does LogicMonitor keep any logs of the metric runs where I might find more info about the underlying error?

Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.