"The Microsoft Exchange Diagnostics service terminated unexpectedly"

Hi all, this happens about twice per hour and started some days ago, no reconfigs etc that should make it do that as far as I can find. Have been running CU6 for some months without this happening until recently.

Also getting AppEventID 1007:

Failed to create or start performance logs with error: System.ArgumentException: Value does not fall within the expected range.

   at PlaLibrary.DataCollectorSetClass.start(Boolean Synchronous)

   at Microsoft.Exchange.Diagnostics.PerformanceLogger.PerformanceLogSet.StartLog(Boolean synchronous)

   at Microsoft.Exchange.Diagnostics.PerformanceLogger.PerformanceLogMonitor.CheckPerflogStatus(). Performance log: ExchangeDiagnosticsPerformanceLog.

Found this article http://blogs.technet.com/b/anya/archive/2014/11/25/microsoft-exchange-diagnostics-service-crashing-post-cu6-upgrade.aspx, but I do not actually understand what the "fix" really is here, many steps are made for Diagnostics buth which of those are necessary to take? And I'm not so into exporting/importing those XMLs.. I have only one E2013-server also.

Hope someone can clarify this. I was thinking of installing CU7 if that might fix it, but I'm not sure if I dare in danger of running into trouble with things not working as they should.

Thanks,

-Ray.



  • Edited by RayHell Friday, January 23, 2015 7:36 PM
January 23rd, 2015 10:30pm

Hi,

Based on the description of that article, the root issue was due to upgrade. While upgrading to Exchange 2013 CU6, the upgrade did some modifications in the registry hives the ExchangeDiagnosticsDailyPerformanceLog got missing from Task Scheduler, performance monitor and was also missing from the location C:\Windows\System32\Tasks\Microsoft\Windows\PLA

Afterwards he did many troubleshooting steps to this issue.

Actually we dont need to export/import templates key to XML file. We can just delete both ExchangeDiagnosticsDailyPerformanceLog and ExchangeDiagnosticsPerformanceLog entries from the above registry location and then reboot server. After rebooting server, the new default ExchangeDiagnosticsDailyPerformanceLog will be recreated automatically in the task scheduler and performance monitor.

Here are my suggested steps for ference:

  1. Ensure that the templates key are present under HKLM\Software\Microsoft\PLA\Templates
  2. Locate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PLA\ExchangeDiagnosticsDailyPerformanceLog and delete ExchangeDiagnosticsDailyPerformanceLog and ExchangeDiagnosticsPerformanceLog entries.
  3. Reboot server and go to registry to check if that two entries have been recreated.
  4. Check if default ExchangeDiagnosticsDailyPerformanceLog was recreated in task scheduler and performance monitor.

If this issue persists, please let me know.

Best Regards.

  • Marked as answer by RayHell Monday, January 26, 2015 11:40 AM
Free Windows Admin Tool Kit Click here and download it now
January 26th, 2015 7:15am

Hi All,

Follow below step to resolve the same.

It works for me.

Step -1
Kindly delete both keys from Registry ExchangeDiagnosticsDailyPerformanceLog & ExchangeDiagnosticsPerformanceLog .

Step -2
Ensure Template is available on below location
HKLM\Software\Microsoft\PLA\Templates

Step -3
Delete Counter from below path
Perfmon ->DataCollector->User Define -> Delete ExchangeDiagnosticsDailyPerformanceLog counter.

Step-4
Restart Server & Check.


February 3rd, 2015 6:34am

Hi All,

Follow below step to resolve the same.

It works for me.

Step -1
Kindly delete both keys from Registry ExchangeDiagnosticsDailyPerformanceLog & ExchangeDiagnosticsPerformanceLog .

Step -2
Ensure Template is available on below location
HKLM\Software\Microsoft\PLA\Templates

Step -3
Delete Counter from below path
Perfmon ->DataCollector->User Define -> Delete ExchangeDiagnosticsDailyPerformanceLog counter.

Step-4
Restart Server & Check.


  • Edited by Irfan Pathan Tuesday, February 03, 2015 11:30 AM
Free Windows Admin Tool Kit Click here and download it now
February 3rd, 2015 11:29am

Worked for me! Be sure to reboot the server immediately after you delete those keys. If not they will be recreated  before the boot and you'll have to start over again.
June 8th, 2015 12:40pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics