TIBCO LogLogic Lasso Enterprise fails to collect logs

TIBCO LogLogic Lasso Enterprise fails to collect logs

book

Article ID: KB0077485

calendar_today

Updated On:

Products Versions
TIBCO LogLogic Lasso Enterprise all versions

Description

TIBCO LogLogic Lasso Enterprise was installed and configured successfully and it fails to collect logs. In the Event Viewer Application journal you see the error: 

Event Type: Warning
Event Source: LogLogic Windows Event Collector
Event Category: None
Event ID: 2006
Date: 11/4/2009
Time: 7:42:46 PM
User: N/A
Computer: LL-LASSO
Description:
LogLogic Windows Event Log Provider encountered error while processing event logs.


The Lasso error is:
System.TypeInitializationException: The type initializer for 'LogLogic.WindowsEventLogProvider.WindowsEventLogProviderPerfmonCounter' threw an exception. ---> System.FormatException: Input string was not in a correct format.
at System.Number.StringToNumber(String str, NumberStyles options, NumberBuffer& number, NumberFormatInfo info, Boolean parseDecimal)
at System.Number.ParseInt32(String s, NumberStyles style, NumberFormatInfo info)
at System.Int32.Parse(String s, IFormatProvider provider)
at System.Diagnostics.PerformanceCounterLib.GetStringTable(Boolean isHelp)
at System.Diagnostics.PerformanceCounterLib.get_NameTable()
at System.Diagnostics.PerformanceCounterLib.get_CategoryTable()
at System.Diagnostics.PerformanceCounterLib.CategoryExists(String machine, String category)
at System.Diagnostics.PerformanceCounterCategory.Exists(String categoryName, String machineName)
at System.Diagnostics.PerformanceCounterCategory.Exists(String categoryName)
at LogLogic.WindowsEventLogProvider.WindowsEventLogProviderPerfmonCounter.CreatePerfmonCounters(Boolean deleteExisting)
at LogLogic.WindowsEventLogProvider.WindowsEventLogProviderPerfmonCounter..cctor()
--- End of inner exception stack trace ---
at LogLogic.WindowsEventLogProvider.WindowsEventLogReader.GetEventLogs(UInt32& eventLogCount)
at LogLogic.WindowsEventLogProvider.WindowsEventLogReader.ReadEventLogsInternal()
at LogLogic.WindowsEventLogProvider.WindowsEventLogReader._ReadEventLogs()
at LogLogic.WindowsEventLogProvider.WindowsEventLogReader.ReadEventLogs()
at LogLogic.Core.Command.Invoke()
at LogLogic.Core.AsyncTask.InvokeNextCommand()

This indicates that performance counters are corrupt on the Windows Server on which Lasso Enterprise is installed and, as a result, they must be rebuilt.

Issue/Introduction

This articles provides a solution for a specific situation when Windows Event Log collection fails with TIBCO LogLogic Lasso Enterprise.

Resolution

To rebuild performance counters follow the steps below:
1. Uninstall Lasso Enterprise

2. Delete the Lasso Enterprise Folder
3. Uninstall .Net Framework
4. Rebuild performance counters by executing:
C:> lodctr /R
5. Once performance monitors have been rebuilt, you will need to reinstall .Net Framework and Lasso Enterprise.

Additional Information

For additional details on rebuilding Performance Counters, please go to: http://support.microsoft.com/
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.