svchost.exe_WinRM Error
We are seeing a sporadic (every couple days) error where the Window Remote Management service (svchost.exe_WinRM) dies along with several other services (DNS Client, Workstation, etc). This causes our App Pool Memory Usage graph to stop logging data until we re-enable the WinRM service. Here are the details from the error in the Event Viewer:
Quote
Faulting application name: svchost.exe_WinRM, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: wsmsvc.dll, version: 6.3.9600.16406, time stamp: 0x5244e817
Exception code: 0xc0000005
Fault offset: 0x0000000000120da9
Faulting process id: 0x7110
Faulting application start time: 0x01d327defa28711a
Faulting application path: C:\Windows\System32\svchost.exe
Faulting module path: c:\windows\system32\wsmsvc.dll
Report Id: 98541088-93ed-11e7-8a7d-005056b64f06
Seconds before this happens our LogicMonitor service account has Event Log entries for the registry and file system. Has anyone else seen this error in conjunction with LogicMonitor?
rschiefer
OP9 years agoWe do have a custom PS datasource. Does LogicMonitor keep any logs of the metric runs where I might find more info about the underlying error?
Matthew_Dunham
·9 years agoAt this time none of LogicMonitor's "core" LogicModules employ WinRM services for device polling. Although it's possible that your account may have custom (PowerShell) datasources that might use WinRM, these are likely not supported by LogicMonitor