Event ID 25222 is logged when you use the Internet Information Server (IIS) Management Pack for MOM 2005 to monitor IIS

Events that resemble the following are logged in the Application event log on the computer that is running Microsoft Operations Manager (MOM) 2005:

Event Type: Error
Event Source: Microsoft Operations Manager
Event Category: MOM Agent
Event ID: 25222
Date: date
Time: time
User: NT AUTHORITY\SYSTEM
Computer: ServerName
Description: The Application Log Provider cannot monitor the directory because an unrecoverable error has occurred.
Source: Internet Information Server web server log Directory: C:\WINNT\System32\LogFiles\W3svc1

For more information, see Help and Support Center at http://support.microsoft.com.

You experience this problem if the following conditions are true:

• You use the Microsoft Internet Information Server (IIS) Management Pack for MOM 2005 to monitor a computer that is running IIS.
• One or more IIS log file folders are empty.
  
  Note By default, IIS stores log files in the %WINDIR%\System32\LogFiles folder.

This problem occurs because the IIS Application log file provider expects a log file to exist in the log file folder. IIS creates a folder in which to store the log files. Then, IIS creates an empty log file in the log file folder.

When you use the Internet Information Server (IIS) Management Pack for MOM 2005 to monitor a computer that is running IIS, a MOM rule monitors the IIS Application log file provider for errors. If no log file exists in a log file folder, the MOM agent reports that an error occurred in reading the log file.

To work around this problem, do not remove IIS log files from the IIS log file folder.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

To obtain the Internet Information Server (IIS) Management Pack for MOM 2005, visit the following Microsoft Web site: