This topic contains 3 replies, has 3 voices, and was last updated by
November 14, 2013 at 12:21 pm #11494ParticipantPoints: 0Rank: Member
So I was looking at informational logs across our servers recently and noticed we're logging a bunch of PowerShell events every 15 minutes.
Usually get a bunch of id 600 like:
Provider "Alias" is Started.
HostName=OpsMgr PowerShell Host
For several providers, FileSystem, Environment, Alias, Registry, Variable, Certificate, WSMan.
Followed by Event 400 and 403.
Engine state is changed from None to Available.
Engine state is changed from Available to Stopped.
All within the span of a second or so. These repeat every 15 minutes exactly across hundreds of servers. All refer to OpsMgr PowerShell Host. We're not having any issues, and they're all informational, but I'm not really sure what's going on.
November 14, 2013 at 12:31 pm #11495MemberPoints: 0Rank: Member
My guess would be that you've got a PowerShell script running as a scheduled task every 15 minutes.
November 14, 2013 at 12:31 pm #11496KeymasterPoints: 1,704Rank: Community Hero
OpsMan has its own PowerShell host, which is what it uses to run PowerShell scripts. Each time it starts that host (to run a script), for some reason it's logging the fact that the various PSProviders are starting up. Totally normal, except it's a lot of noise. You can probably configure a lower level of logging someone in OpsMan.
You've likely got some shell action running in OpsMan every 15 minutes, which is what's doing it.
November 14, 2013 at 12:35 pm #11497ParticipantPoints: 0Rank: Member
That makes sense, I hadn't thought of the opsmanager agent running powershell tasks but makes perfect sense now that I do.
The topic ‘Repeated Powershell event 600s’ is closed to new replies.