none
Application Pools continually failing in IIS7 with Event ID : 5011, 5009 and 5002

    Question

  • Hi Team,

    In our web server, some of the site are down and Application Pools continually failing. If we start the Application Pools, again go down. While checking event viewer getting Event ID : 5011, 5009 and  5002, event log details as below.Please help me to resolve the issue. Thank you.

    1. Event ID:      5011  :-

    Log Name:      System

    Source:        Microsoft-Windows-WAS

    Date:          11/28/2015 7:53:14 AM

    Event ID:      5011

    Task Category: None

    Level:         Warning

    Keywords:      Classic

    User:          N/A

    Computer:      System1

    Description:

    A process serving application pool 'www.site1.com' suffered a fatal communication error with the Windows Process Activation Service. The process id was '22244'. The data field contains the error number.

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Microsoft-Windows-WAS" Guid="{524B5D04-133C-4A62-8362-64E8EDB9CE40}" EventSourceName="WAS" />

        <EventID Qualifiers="32768">5011</EventID>

        <Version>0</Version>

        <Level>3</Level>

        <Task>0</Task>

        <Opcode>0</Opcode>

        <Keywords>0x80000000000000</Keywords>

        <TimeCreated SystemTime="2015-11-28T12:53:14.000000000Z" />

        <EventRecordID>508223</EventRecordID>

        <Correlation />

        <Execution ProcessID="0" ThreadID="0" />

        <Channel>System</Channel>

        <Computer>System1</Computer>

        <Security />

      </System>

      <EventData>

        <Data Name="AppPoolID">www.Site1.com</Data>

        <Data Name="ProcessID">22244</Data>

        <Binary>6D000780</Binary>

      </EventData>

    </Event>

    2. Event ID:      5009  :-

    Log Name:      System

    Source:        Microsoft-Windows-WAS

    Date:          11/28/2015 7:53:40 AM

    Event ID:      5009

    Task Category: None

    Level:         Warning

    Keywords:      Classic

    User:          N/A

    Computer:      System1

    Description:

    A process serving application pool 'www.site2.com' terminated unexpectedly. The process id was '25584'. The process exit code was '0x0'.

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Microsoft-Windows-WAS" Guid="{524B5D04-133C-4A62-8362-64E8EDB9CE40}" EventSourceName="WAS" />

        <EventID Qualifiers="32768">5009</EventID>

        <Version>0</Version>

        <Level>3</Level>

        <Task>0</Task>

        <Opcode>0</Opcode>

        <Keywords>0x80000000000000</Keywords>

        <TimeCreated SystemTime="2015-11-28T12:53:40.000000000Z" />

        <EventRecordID>508228</EventRecordID>

        <Correlation />

        <Execution ProcessID="0" ThreadID="0" />

        <Channel>System</Channel>

        <Computer>System1</Computer>

        <Security />

      </System>

      <EventData>

        <Data Name="AppPoolID">www.site2.com</Data>

        <Data Name="ProcessID">25584</Data>

        <Data Name="ExitCode">0</Data>

      </EventData>

    </Event>

    3.  Event ID:      5002 :-

    Log Name:      System

    Source:        Microsoft-Windows-WAS

    Date:          11/28/2015 8:47:40 AM

    Event ID:      5002

    Task Category: None

    Level:         Error

    Keywords:      Classic

    User:          N/A

    Computer:      System1

    Description:

    Application pool 'www.site3.com' is being automatically disabled due to a series of failures in the process(es) serving that application pool.

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Microsoft-Windows-WAS" Guid="{524B5D04-133C-4A62-8362-64E8EDB9CE40}" EventSourceName="WAS" />

        <EventID Qualifiers="49152">5002</EventID>

        <Version>0</Version>

        <Level>2</Level>

        <Task>0</Task>

        <Opcode>0</Opcode>

        <Keywords>0x80000000000000</Keywords>

        <TimeCreated SystemTime="2015-11-28T13:47:40.000000000Z" />

        <EventRecordID>508428</EventRecordID>

        <Correlation />

        <Execution ProcessID="0" ThreadID="0" />

        <Channel>System</Channel>

        <Computer>System1</Computer>

        <Security />

      </System>

      <EventData>

        <Data Name="AppPoolID">www.site3.com</Data>

        <Binary>

        </Binary>

      </EventData>

    </Event>



    • Moved by Just KarlModerator Tuesday, December 08, 2015 2:57 PM Looking for the correct forum.
    Tuesday, December 08, 2015 9:54 AM

Answers

All replies

  • Hi,

    I am facing this issue after applying windows patches.

    Tuesday, December 08, 2015 10:00 AM
  • Hello,

    The 'Academic Initiatives - Technical Queries' forum is for posts Related to technical / coding / programming related issues as related to Microsoft's Academic Initiatives.

    As it's off-topic here, I am moving the question to the Where is the forum for... forum.

    Karl


    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book: Windows PowerShell 2.0 Bible
    My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

    Tuesday, December 08, 2015 2:56 PM
    Moderator
  • Hello,

    This should be asked in Microsoft's IIS forums:

    http://forums.iis.net/

    As Microsoft's IIS forums are on a different platform, we cannot move the question for you.

    Karl


    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book: Windows PowerShell 2.0 Bible
    My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

    Tuesday, December 08, 2015 2:57 PM
    Moderator
  • Hi Karl,

    Thank you for the information, I am doing the same :)

    -Elango


    Regards, Elango

    Wednesday, December 09, 2015 1:45 AM