Hi Team,
In our web server, some of the site are down and Application Pools continually failing. If we start the Application Pools, again go down. While checking event viewer getting Event ID : 5011, 5009
and 5002, event log details as below.Please help me to resolve the issue. Thank you.
1. Event ID: 5011 :-
Log Name: System
Source: Microsoft-Windows-WAS
Date: 11/28/2015 7:53:14 AM
Event ID: 5011
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: System1
Description:
A process serving application pool 'www.site1.com' suffered a fatal communication error with the Windows Process Activation Service. The process id was '22244'. The data field contains the error number.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WAS" Guid="{524B5D04-133C-4A62-8362-64E8EDB9CE40}" EventSourceName="WAS" />
<EventID Qualifiers="32768">5011</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-11-28T12:53:14.000000000Z" />
<EventRecordID>508223</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>System1</Computer>
<Security />
</System>
<EventData>
<Data Name="AppPoolID">www.Site1.com</Data>
<Data Name="ProcessID">22244</Data>
<Binary>6D000780</Binary>
</EventData>
2. Event ID: 5009 :-
Log Name: System
Source: Microsoft-Windows-WAS
Date: 11/28/2015 7:53:40 AM
Event ID: 5009
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: System1
Description:
A process serving application pool 'www.site2.com' terminated unexpectedly. The process id was '25584'. The process exit code was '0x0'.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WAS" Guid="{524B5D04-133C-4A62-8362-64E8EDB9CE40}" EventSourceName="WAS" />
<EventID Qualifiers="32768">5009</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-11-28T12:53:40.000000000Z" />
<EventRecordID>508228</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>System1</Computer>
<Security />
</System>
<EventData>
<Data Name="AppPoolID">www.site2.com</Data>
<Data Name="ProcessID">25584</Data>
<Data Name="ExitCode">0</Data>
</EventData>
</Event>
3. Event ID: 5002 :-
Log Name: System
Source: Microsoft-Windows-WAS
Date: 11/28/2015 8:47:40 AM
Event ID: 5002
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: System1
Description:
Application pool 'www.site3.com' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WAS" Guid="{524B5D04-133C-4A62-8362-64E8EDB9CE40}" EventSourceName="WAS" />
<EventID Qualifiers="49152">5002</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-11-28T13:47:40.000000000Z" />
<EventRecordID>508428</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>System1</Computer>
<Security />
</System>
<EventData>
<Data Name="AppPoolID">www.site3.com</Data>
<Binary>
</Binary>
</EventData>
</Event>
