EventViewer filled with EventID 8000 warnings

Peter Tasić 0 Reputation points
2023-06-15T12:26:46.03+00:00

Hello,

recently a VM of mine (RRAS VM) has been spouting constant warnings in the eventviewer logs with the event ID 8000. There are no other errors or warnings present.

The warnings are all pretty much the same, the only variation is the response time value and Workflow ID (altho it is constantly a Microsoft.SystemsCenter.something value)

I cant make heads or tails out of this and googling yielded no results/fixes, can anyone point me in the correct direction please?

User's image

Microsoft System Center | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. XinGuo-MSFT 22,271 Reputation points
    2023-06-16T02:00:44.4366667+00:00

    Hi,

    8000 HealthService This event will specify if a workflow related to performance, event, or other data type collected is unable to forward to the service for ingestion to the workspace. Event ID 2136 from source HealthService is written together with this event and can indicate the agent is unable to communicate with the service. Possible reasons might be misconfiguration of the proxy and authentication settings, network outage, or the network firewall or proxy doesn't allow TCP traffic from the computer to the service.

    https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-windows-troubleshoot?tabs=UpdateMMA

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.