asked on

SBS 2008 w/ SQL and lots of database related events

Hi
One of customer's servers is an SBS 2008 with another heavy SQL based application.
Recently the server is sluggish when it comes to deliver data from the SQL, and from viewing the event viewer there are LOTS of events like the attached ones.

Event no. 8, 1309 and 10009 are the most common (every 2 sec)

Any help will be welcome!
Thx

Log Name:      Application
Source:        ASP.NET 2.0.50727.0
Date:          18/01/2011 23:03:47
Event ID:      1309
Task Category: Web Event
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      SERVER.blabla.local
Description:
Event code: 3001 
Event message: The request has been aborted. 
Event time: 1/18/2011 11:03:47 PM 
Event time (UTC): 1/18/2011 9:03:47 PM 
Event ID: 821ee986b542415b9018616de23fde3b 
Event sequence: 1087 
Event occurrence: 250 
Event detail code: 0 
 
Application information: 
    Application domain: /LM/W3SVC/1372222313/ROOT/SimpleAuthWebService-1-129398424105209502 
    Trust level: Full 
    Application Virtual Path: /SimpleAuthWebService 
    Application Path: C:\Program Files\Update Services\WebServices\SimpleAuthWebService\ 
    Machine name: SERVER 
 
Process information: 
    Process ID: 7376 
    Process name: w3wp.exe 
    Account name: NT AUTHORITY\NETWORK SERVICE 
 
Exception information: 
    Exception type: HttpException 
    Exception message: Request timed out. 
 
Request information: 
    Request URL: http://SERVER:8530/SimpleAuthWebService/SimpleAuth.asmx 
    Request path: /SimpleAuthWebService/SimpleAuth.asmx 
    User host address: 192.168.0.102 
    User:  
    Is authenticated: False 
    Authentication Type:  
    Thread account name: NT AUTHORITY\NETWORK SERVICE 
 
Thread information: 
    Thread ID: 51 
    Thread account name: NT AUTHORITY\NETWORK SERVICE 
    Is impersonating: False 
    Stack trace: 
 
 
Custom event details: 

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ASP.NET 2.0.50727.0" />
    <EventID Qualifiers="32768">1309</EventID>
    <Level>3</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-01-18T21:03:47.000Z" />
    <EventRecordID>571879</EventRecordID>
    <Channel>Application</Channel>
    <Computer>SERVER.blabla.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>3001</Data>
    <Data>The request has been aborted.</Data>
    <Data>1/18/2011 11:03:47 PM</Data>
    <Data>1/18/2011 9:03:47 PM</Data>
    <Data>821ee986b542415b9018616de23fde3b</Data>
    <Data>1087</Data>
    <Data>250</Data>
    <Data>0</Data>
    <Data>/LM/W3SVC/1372222313/ROOT/SimpleAuthWebService-1-129398424105209502</Data>
    <Data>Full</Data>
    <Data>/SimpleAuthWebService</Data>
    <Data>C:\Program Files\Update Services\WebServices\SimpleAuthWebService\</Data>
    <Data>SERVER</Data>
    <Data>
    </Data>
    <Data>7376</Data>
    <Data>w3wp.exe</Data>
    <Data>NT AUTHORITY\NETWORK SERVICE</Data>
    <Data>HttpException</Data>
    <Data>Request timed out.</Data>
    <Data>http://SERVER:8530/SimpleAuthWebService/SimpleAuth.asmx</Data>
    <Data>/SimpleAuthWebService/SimpleAuth.asmx</Data>
    <Data>192.168.0.102</Data>
    <Data>
    </Data>
    <Data>False</Data>
    <Data>
    </Data>
    <Data>NT AUTHORITY\NETWORK SERVICE</Data>
    <Data>51</Data>
    <Data>NT AUTHORITY\NETWORK SERVICE</Data>
    <Data>False</Data>
    <Data>
    </Data>
  </EventData>
</Event>

Open in new window

Log Name:      Application
Source:        SQLBrowser
Date:          18/01/2011 23:05:43
Event ID:      8
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SERVER.blabla.local
Description:
The SQLBrowser service was unable to process a client request.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="SQLBrowser" />
    <EventID Qualifiers="49230">8</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-01-18T21:05:43.000Z" />
    <EventRecordID>571920</EventRecordID>
    <Channel>Application</Channel>
    <Computer>SERVER.blabla.local</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

Open in new window

Log Name:      Application
Source:        Windows SharePoint Services 3
Date:          18/01/2011 23:05:42
Event ID:      5586
Task Category: Database
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SERVER.blabla.local
Description:
Unknown SQL Exception 2 occured. Additional error information from SQL Server is included below.

A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: Named Pipes Provider, error: 40 - Could not open a connection to SQL Server)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows SharePoint Services 3" />
    <EventID Qualifiers="0">5586</EventID>
    <Level>2</Level>
    <Task>484</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-01-18T21:05:42.000Z" />
    <EventRecordID>571919</EventRecordID>
    <Channel>Application</Channel>
    <Computer>SERVER.blabla.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>2</Data>
    <Data>A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: Named Pipes Provider, error: 40 - Could not open a connection to SQL Server)</Data>
  </EventData>
</Event>

Open in new window

Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Date:          18/01/2011 10:11:51
Event ID:      10009
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SERVER.blabla.local
Description:
DCOM was unable to communicate with the computer blabla-Lap.blabla.local using any of the configured protocols.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10009</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-01-18T08:11:51.000Z" />
    <EventRecordID>314834</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>SERVER.formaica.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">blabla-Lap.blabla.local</Data>
    <Binary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inary>
  </EventData>
</Event>

Open in new window

lcohan

Were there any patches applied recently? If yes maybe check permissions on your MSSQL\DATA local folders for NETWORK SERVICE account.

http://technet.microsoft.com/en-us/library/dd560621(WS.10).aspx

ASKER CERTIFIED SOLUTION

Raja Jegan R

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

IT_Group1

ASKER

Guys many thx for the answers.
It's important to know 2 additional facts:
- This server has suffered from a disruptive shutdown last week - and all the problems has started there (09.01.11).
- Since the disruptive shutdown, the server just freezes from time to time - and there's nothing you can do - but hard power off by using the power button (Yeah yeah i know... disaster).

Do you see a correlation between those logs to the server freezes?

Thx

Raja Jegan R

Since there was a disruptive Shutdown, either SQL Server or SBS server might have been corrupt..
Check for any error events immediately after the shutdown on 09.01.11 so that it might contain some additional information which can help resolve this issue..

lcohan

And please check SQL logs as well - you can run following in SQL to read the current logs or check in SSMS under "Management" section:

EXEC master.dbo.xp_readerrorlog 0, 1, NULL, NULL, NULL, NULL, N'desc'