Alerting Engine Error - SQL Exception

Question

I see about 15-20 of these a day. Any ideas why?

Event Type:    Error
Event Source:    AlertingEngine
Event Category:    None
Event ID:    0
Date:        10/1/2008
Time:        3:56:37 PM
User:        N/A
Computer:    SERVER
Description:
2008-10-01 15:56:37,896 [MainTaskThread] ERROR All - Exception in MainTask Loop
System.Data.SqlClient.SqlException: Transaction (Process ID 55) was deadlocked on lock resources with another process and has been chosen as the deadlock victim. Rerun the transaction.
   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
   at System.Data.SqlClient.SqlDataReader.ConsumeMetaData()
   at System.Data.SqlClient.SqlDataReader.get_MetaData()
   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult result)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method)
   at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior, String method)
   at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior)
   at AlertingEngine.SWAlertingEngine.TaskManager()

For more information, see Help and Support Center at go.microsoft.com/.../events.asp.

bebad.us · Answer

Splunking server logs and discovered these events - are they relevant to what you have also observed ?
thanks,
frank

06/05/09 13:39:15      * Search SplunkBase
* Extract field
* Show source

Jun  5 13:39:15 auorion AlertingEngine: 0: 2009-06-05 13:39:11,014 [MainTaskThread] ERROR All - Error in TaskManager loop - EXCEPTION STACK: --> Thread was being aborted. : mscorlib : at System.Threading.Thread.SleepInternal(Int32 millisecondsTimeout) at AlertingEngine.SWAlertingEngine.TaskManager();;;

source=/var/log/net-mgmt/auorion.log      * Report on all sources
*                 Search for this source
*                     Tag source

|  host=auorion      * Report on all hosts
*                 Search for this host
*                     Tag host

|  sourcetype=syslog      * Report on all sourcetypes
*                 Search for this sourcetype
* Edit sourcetype alias

|  process=AlertingEngine      * Report on all process
*                 Filter on this process
*                     Tag process

06/05/09 13:36:34      * Search SplunkBase
* Extract field
* Show source

Jun  5 13:36:34 auorion AlertingEngine: 0: 2009-06-05 13:36:30,900 [MainTaskThread] INFO All - Alert Engine Starting. Running Version 9.1.0.0.

source=/var/log/net-mgmt/auorion.log      * Report on all sources
*                 Search for this source
*                     Tag source

|  host=auorion      * Report on all hosts
*                 Search for this host
*                     Tag host

|  sourcetype=syslog      * Report on all sourcetypes
*                 Search for this sourcetype
* Edit sourcetype alias

|  process=AlertingEngine      * Report on all process
*                 Filter on this process
*                     Tag process

06/05/09 13:36:24

* Search SplunkBase
* Extract field
* Show source

Jun  5 13:36:24 auorion AlertingEngine: 0: 2009-06-05 13:36:22,868 [MainTaskThread] ERROR All - Error in TaskManager loop - EXCEPTION STACK: --> Thread was being aborted. : AlertingEngine : at AlertingEngine.SWPerfMonCounters.RemoveCounters() at AlertingEngine.SWPerfMonCounters.Dispose(Boolean Disposing) at AlertingEngine.SWAlertingEngine.TaskManager();;;

source=/var/log/net-mgmt/auorion.log      * Report on all sources
*                 Search for this source
*                     Tag source

|  host=auorion      * Report on all hosts
*                 Search for this host
*                     Tag host

|  sourcetype=syslog      * Report on all sourcetypes
*                 Search for this sourcetype
* Edit sourcetype alias

|  process=AlertingEngine

Don331 · Answer

I'm seeing the exact same thing in ours too. I reported it in a slightly different way, but haven't heard a thing.

Don