Forum Discussion

rschiefer's avatar
rschiefer
8 years ago

svchost.exe_WinRM Error

We are seeing a sporadic (every couple days) error where the Window Remote Management service (svchost.exe_WinRM) dies along with several other services (DNS Client, Workstation, etc).  This causes our App Pool Memory Usage graph to stop logging data until we re-enable the WinRM service.  Here are the details from the error in the Event Viewer:

Quote

 

Faulting application name: svchost.exe_WinRM, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: wsmsvc.dll, version: 6.3.9600.16406, time stamp: 0x5244e817
Exception code: 0xc0000005
Fault offset: 0x0000000000120da9
Faulting process id: 0x7110
Faulting application start time: 0x01d327defa28711a
Faulting application path: C:\Windows\System32\svchost.exe
Faulting module path: c:\windows\system32\wsmsvc.dll
Report Id: 98541088-93ed-11e7-8a7d-005056b64f06

 

 

Seconds before this happens our LogicMonitor service account has Event Log entries for the registry and file system.  Has anyone else seen this error in conjunction with LogicMonitor?

windows
  • Matthew_Dunham's avatar
    Matthew_Dunham
    Former Employee
    8 years ago

    At this time none of LogicMonitor's "core" LogicModules employ WinRM services for device polling. Although it's possible that your account may have custom (PowerShell) datasources that might use WinRM, these are likely not supported by LogicMonitor

  • rschiefer's avatar
    rschiefer
    8 years ago

    We do have a custom PS datasource.  Does LogicMonitor keep any logs of the metric runs where I might find more info about the underlying error?