• 0
rschiefer

svchost.exe_WinRM Error

Question

We are seeing a sporadic (every couple days) error where the Window Remote Management service (svchost.exe_WinRM) dies along with several other services (DNS Client, Workstation, etc).  This causes our App Pool Memory Usage graph to stop logging data until we re-enable the WinRM service.  Here are the details from the error in the Event Viewer:

Quote

 

Faulting application name: svchost.exe_WinRM, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: wsmsvc.dll, version: 6.3.9600.16406, time stamp: 0x5244e817
Exception code: 0xc0000005
Fault offset: 0x0000000000120da9
Faulting process id: 0x7110
Faulting application start time: 0x01d327defa28711a
Faulting application path: C:\Windows\System32\svchost.exe
Faulting module path: c:\windows\system32\wsmsvc.dll
Report Id: 98541088-93ed-11e7-8a7d-005056b64f06

 

 

Seconds before this happens our LogicMonitor service account has Event Log entries for the registry and file system.  Has anyone else seen this error in conjunction with LogicMonitor?

Share this post


Link to post
Share on other sites

2 answers to this question

Recommended Posts

  • 0

At this time none of LogicMonitor's "core" LogicModules employ WinRM services for device polling. Although it's possible that your account may have custom (PowerShell) datasources that might use WinRM, these are likely not supported by LogicMonitor

Share this post


Link to post
Share on other sites
  • 0

We do have a custom PS datasource.  Does LogicMonitor keep any logs of the metric runs where I might find more info about the underlying error?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now