Select the product you need help with

How to configure event subscription to pull BMC SEL events into the event logs in Windows Server 2008

Article ID: 950257 - View products that this article applies to.

INTRODUCTION

This article describes how to configure event subscription to pull the base management controller (BMC) System Event Log (SEL) events into the event logs in Windows Server 2008.

Back to the top | Give Feedback

In Windows Server 2008, Hardware Management is built into the operating system. By default, Hardware Management event subscription is not configured to subscribe to BMC SEL events. Instead of using a third-party program to view SEL events, you can configure Hardware Management to subscribe to SEL events. You can then view BMC SEL events in Event Viewer. To subscribe to SEL events, follow these steps:

Start Notepad.

Copy the following XML code, and then paste it into Notepad.

<Subscription xmlns="http://schemas.microsoft.com/2006/03/windows/events/subscription">
	<Description>System Event Log event subscription</Description>
	<SubscriptionId>SELSubscription</SubscriptionId>
	<Uri>http://schemas.microsoft.com/wbem/wsman/1/logrecord/sel</Uri>
	<EventSources>
		<EventSource>
			<Address>localhost</Address>
		</EventSource>
	</EventSources>
	<LogFile>HardwareEvents</LogFile>
	<Delivery Mode="pull">
		<PushSettings>
			<Heartbeat Interval="10000" />
		</PushSettings>
	</Delivery>
</Subscription>

In Notepad, click Save as.
In the Save as type box, click All files in the File name box, type SELSubscription.xml, and then click Save.
Exit Notepad.
Use elevated user rights to open a command prompt.
At the command prompt, type the following commands, and then press ENTER after each command:
Wecutil qc
Winrm qc
Winrm set winrm/config/client @{TrustedHosts=”localhost”}
Wecutil cs path\SELSubscription.xml
Note path represents the directory path of the SELSubscription.xml file that you saved in step 4.

After you complete the subscription, events from the SEL logs should populate the event log in Windows. You can view the events in Event Viewer under the following node:

Applications and Services\Hardware events

How to determine whether a computer's BIOS supports BMC detection

For SEL events to be logged, the computer's BIOS must support using the Advanced Configuration and Power Interface (ACPI) for BMC detection. After you configure event subscription, you may see the following errors in the subscription status. These errors may occur if the computer does not have a BMC or if the BIOS does not support using ACPI for BMC detection.

[localhost] - Error - Last retry time: 5/22/2007 1:39:32 PM. Code (0x80041001):
<f:ProviderFault provider="SEL plugin for Windows Remote Management "
path="%systemroot%\system32\WsmSelPl.dll"
xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault"></f:ProviderFault> Next retry time: 5/22/2007 1:44:32 PM.

To view the subscription status, follow these steps:

Use elevated user rights to open a command prompt.
Type eventvwr, and then press ENTER.
In the navigation pane, click Subscription. The details pane displays the SELSubscription entry.
Right-click SELSubscription, and then click Runtime Status.

To verify that a computer's BIOS supports using ACPI for BMC detection, you can use the Windows Management Instrumentation (WMI) Tester tool. To do this, follow these steps:

Use elevated user rights to open a command prompt.
Type wbemtest.exe, and then press ENTER.
Click Connect.
To connect to the WMI namespace, type root\wmi in the uppermost box, and then click Connect.
Under IWbemServices, click Enum Instances.
In the Enter Superclass Name box, type Microsoft_IPMI, and then click OK.
In the Query Result dialog box, you should see an instance of a device ID that begins with the ACPI entry.

If there is no entry that begins with "ACPI," the BIOS does not support using ACPI for BMC detection. BIOS support for using ACPI for BMC detection is required for Intelligent Platform Management Interface (IPMI) drivers in Windows Server 2008 and in later versions of Windows Server. You must upgrade the BIOS if you want IPMI support.

Back to the top | Give Feedback

MORE INFORMATION

The IPMI server management system is defined by Intel together with a group of companies that includes Dell, Hewlett-Packard (HP), and NEC. IPMI provides server monitoring and management features.

In Windows Server 2003 R2, Hardware Management is an optional component. However, after it is installed, Hardware Management automatically configures event subscription to pull SEL into the Windows event logs. In Windows Server 2008, subscription does not occur automatically.

REFERENCES

For more information about the Event Collector service, visit the following Microsoft Web site:

http://technet2.microsoft.com/windowsserver/en/library/30757b93-7291-4254-b15e-f0aa5f45ac541033.mspx?mfr=true

(http://technet2.microsoft.com/windowsserver/en/library/30757b93-7291-4254-b15e-f0aa5f45ac541033.mspx?mfr=true)

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Back to the top | Give Feedback