it took me a while to find a solution on how to avaoid thousands of perflib-messages in the event-log. Here we go: HP Insight Agent v6.10 is realized and needed from now on. The part "OS Information" has to be disabled. if you are using netiq, NetIQ Agents v5.01 are needed In the past few month we encountered more and more Perflib errors in the event log of servers. Most of the servers are HP servers with installed HP Management Agents Version 5.30 or larger. We Studied the problem together with HP and Microsoft. The HP Management Agents Version 5.30 or newer installs a Performance Monitor Agent ("OS Information", since V6.40 called "Performance Monitor") in a default installation. This Agent polls multiple Performance Counters on a server. On earlier HP Management Agents this Performance Monitor Agent had to be installed manually, so this is why it is not running on older versions usually. Furthermore we found an error in the NetIQ AppManager Agents 4.0.2. (EventID 1019 Perflib). This error causes the system to deactivate the NetIQ Performance Counter (EventID 1017 Perflib). We also discovered many other Performance Counters that get disabled by the system (EventID 1017 Perflib). For now, we do not know the reason for this behavior. It is even impossible to reproduce in our test environment. However, the analysis of this topic is not finished yet. The HP Performance Monitor tried to poll these disabled Performance Counter. As this is impossible the EventID 1010 Perflib is being logged in the Eventlog. This is the reason, why these large number of Perflib errors occured on HP (Compaq) servers primarily. There are still some more Perflib errors (EventID 1008 Perflib, EventID 1015 Perflib, EventID 2003 Perflib, EventID 3006 LoadPerf) logged on some servers. The analysis on these errors has not gone that far, so we can not explain in detail what is going on there. The HP Management Agents seem not be involved into these errors. I hope this helps -----Original Message----- From: Devon Harding - GTHLA [mailto:DHarding@xxxxxxxxxxx] Sent: Tuesday, December 02, 2003 1:42 PM To: [ExchangeList] Subject: [exchangelist] Re: Error 1008 http://www.MSExchange.org/ Anyone? -----Original Message----- From: Devon Harding - GTHLA Sent: Tuesday, December 02, 2003 10:28 AM To: [ExchangeList] Subject: [exchangelist] Re: Error 1008 http://www.MSExchange.org/ I've tried this procedure, and nothing. I still get this error. Event Type: Error Event Source: Perflib Event Category: None Event ID: 1008 Date: 12/2/2003 Time: 10:27:19 AM User: N/A Computer: GTHLAMX2 Description: The Open Procedure for service "ESE" in DLL "C:\Program Files\Exchsrvr\bin\eseperf.dll" failed. Performance data for this service will not be available. The Status code returned is the first DWORD in the attached data. Data: 0000: 02 00 00 00 .... -Devon -----Original Message----- From: Neil Hobson [mailto:Neil.Hobson@xxxxxxxxxxxxxxxxx] Sent: Tuesday, December 02, 2003 6:01 AM To: [ExchangeList] Subject: [exchangelist] Re: Error 1008 http://www.MSExchange.org/ Try dropping to a cmd prompt, go to the system32 folder and execute the following two lines: Unlodctr c:\program files\exchsrvr\bin\eseperf.ini Lodctr c:\program files\exchsrvr\bin\eseperf.ini This assumes you've got Exchange installed in c:\program files of course. Neil -----Original Message----- From: Devon Harding - GTHLA [mailto:DHarding@xxxxxxxxxxx] Sent: 01 December 2003 16:08 To: [ExchangeList] Subject: [exchangelist] Re: Error 1008 http://www.MSExchange.org/ I rebooted ALL Exchange server and still getting the problem. What else could it be? -Devon -----Original Message----- From: PKarumbaiah@xxxxxxxxxxx [mailto:PKarumbaiah@xxxxxxxxxxx] Sent: Monday, December 01, 2003 9:38 AM To: [ExchangeList] Subject: [exchangelist] Re: Error 1008 http://www.MSExchange.org/ Reboot all servers that have the link monitors running against the Exchange Server computer. After the servers have been rebooted, the errors should stop appearing in the Event Viewer. Regards, Ponnappa "Devon Harding - GTHLA" To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx> <DHarding@gila cc: tla.com> Subject: [exchangelist] Error 1008 12/01/2003 09:05 PM Please respond to "[ExchangeList ]" http://www.MSExchange.org/ I can't seem to get rid of the event error on my Exchange 2000 cluster. It happens every 5 secs. Event Type: Error Event Source: Perflib Event Category: None Event ID: 1008 Date: 12/1/2003 Time: 10:25:49 AM User: N/A Computer: GTHLAMX2 Description: The Open Procedure for service "ESE" in DLL "C:\Program Files\Exchsrvr\bin\eseperf.dll" failed. Performance data for this service will not be available. The Status code returned is the first DWORD in the attached data. Data: 0000: 02 00 00 00 .... I've followed the instructions here, but it doesn't seem to work: http://support.microsoft.com/default.aspx?scid=kb;en-us;307613&Product=e xch2k http://support.microsoft.com/default.aspx?scid=kb;en-us;273177&Product=e xch2k _____________________ Devon Harding System Administrator Gilat Latin America 954-858-1600 dharding@xxxxxxxxxxx This e-mail is intended for the above named addressee(s), and may contain information which is confidential or privileged. If you are not the intended recipient, please inform us immediately: you should not copy or use this e-mail for any purpose nor disclose its contents to any person. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------