Getting Data In

Wineventlog Application logs - SQL server Issue

anandhalagaras1
Contributor

For one of our SQL server running with UF version 9.1.1 I can see a lot of error reporting with event code=4506 with the below message.

When i check the application logs for every 60 minutes i can see around 744,252 events and the error message as below so kindly let me know how can i get them fixed.

11/17/2023 06:15:23 AM
LogName=Application
EventCode=4506
EventType=2
ComputerName=abc.def.xyz
SourceName=HealthService
Type=Error
RecordNumber=xxxxxxxxxx
Keywords=Classic
TaskCategory=None
OpCode=None
Message=Splunk could not get the description for this event. Either the component that raises this event is not installed on your local computer or the installation is corrupt.

FormatMessage error:

Got the following information from this event:

AB-Prod
Microsoft.SQLServer.Windows.CollectionRule.DatabaseReplica.FileBytesReceivedPerSecond
abc\ABC_PROD.WSS_Content_internal_portal_xxxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}

 

So how can we get them fixed. Kindly help on the same.

Labels (2)
0 Karma

hrawat
Splunk Employee
Splunk Employee
0 Karma

anandhalagaras1
Contributor

Can anyone help on my request.

0 Karma

anandhalagaras1
Contributor

Can anyone help on my request.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...