AnsweredAssumed Answered

WinRM - Invalid XML

Question asked by RSA Admin Employee on Jan 15, 2015
Latest reply on Jan 19, 2015 by RSA Admin

I'm getting the following error and only to one windows host.  This is one of three identical systems that "should" be identical.

Jan 14 20:12:06 server-salogvlc1 nw[1731]: [WindowsCollection] [failure] [serverctx3] [processing] [WorkUnit] [processing] Unable to pull events from Windows event source serverctx3: Fault Code : s:Sender Subcode : w:InternalError Reason : The WS-Management service cannot process the request because the XML is invalid.  Fault Detail : http://schemas.dmtf.org/wbem/wsman/1/wsman/faultDetail/InvalidWindows Event Forward Plugin failed to read events.

Jan 14 20:12:06 server-salogvlc1 nw[1731]: [WindowsCollection] [warning] [serverctx3] [processing] [WorkUnit] [processing] Unable to cancel existing subscription for Windows event source: Fault Code : s:Receiver Subcode : w:InternalError Reason : Element not found.  Fault Detail : The WS-Management service could not identify the subscription context ID in the SOAP packet that was received. The packet may have been invalid, or the operation may have timed out.

Jan 14 20:12:06 server-salogvlc1 nw[1731]: [WindowsCollection] [info] [serverctx3] [processing] [WorkUnit] [processing] Finished work

Jan 14 20:12:06 server-salogvlc1 nw[1731]: [WindowsCollection] [failure] [serverctx3] [processing] [WorkUnit] [processing failure] windows:WrkUnit[1] Processing failed.

Jan 14 20:12:07 server-salogvlc1 nw[1731]: [WindowsCollection] [info] Testing Windows Connection for serverctx3


If I remove the Event Source and re-add it, it starts working for a few tries, then fails.


Any ideas?

Outcomes