Event 4143 Enterprise Vault Services stop along with Application Event ID 1000 or 1002

book

Article ID: 100028097

calendar_today

Updated On:

Description

Error Message

Type : Warning
Event : 1000
Source : PerfDisk
Description:  Unable to open Disk performance object. The first four bytes (DWORD) of the Data section of the event viewer contains the status code.

Type : Warning
Event : 1002
Source : PerfDisk
Description: Unable to allocate a dynamic memory buffer.

Type : Error
Event : 4143
Source : Enterprise Vault
Category : Admin Service
Description:  Insufficient Diskspace is available on drives C:, Q:, H:, G: and F: for the Enterprise Vault to run
Enterprise Vault will now be shut down; to correct this problem, delete any unwanted files
and restart Enterprise Vault
V-437-4143

 

Cause

Enterprise Vault (EV) has a built in safety feature which will automatically shut down EV Services as the discs reach capacity. This allows a graceful shutdown to avoid data corruption and/or lost data. EV reports Error Event 4143 in this case.

This does not always indicate a full disc and may be proceeded by Event ID 1000 or 1002.  This is caused by a lack of ability to monitor the available disk space by use of the Microsoft performance counter.

Symptoms

  • Like 4143 error shown above, EV is reporting that all drives are low on space at the same time.
  • PerfDisk warning event 1000 or 1002 occur at the similar time.

 

Resolution

This is usually due to a corrupt Microsoft Performance Counter which needs to be rebuilt. Rebuild the Microsoft Performance Counters with the aid of Microsoft Support. See related articles and contact Microsoft Support to rebuild the problem counters:

http://technet.microsoft.com/en-us/library/cc775017(v=ws.10).aspx

Issue/Introduction

Enterprise Vault Services will stop following an Enterprise Vault Event ID of 4143 and an Application Event ID of 1000 or 1002 potentially due to a corrupt Microsoft Performance Counter.