Hi Graham,
Below are the errors we find in SCOM or the events. Event ID triggered in the agent server is 21404. There are 4 or 5 instances daily. The agent us running in Server 2008 R2
Workflow 1
The process started at 10:47:48 AM was terminated due to a failure in collecting output due to error '0x80070057 : The parameter is incorrect.
', some data may have been lost.
Command executed: "C:\WINDOWS\system32\cscript.exe" /nologo "Microsoft.Windows.Server.CPUUtilization.Monitortype.vbs" 95 15 XYZ.ZZZ.COM 5.255346218744914
Working Directory: C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 72355\1141\
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.2008.R2.OperatingSystem.TotalCPUUtilization
Instance name: Microsoft Windows Server 2008 R2 Standard
Instance ID: {B4D9BDEA-D52F-0DA7-BED0-A9DC869EFB4A}
Management group: ABCDEFG
Workflow2
The process started at 10:42:53 PM was terminated due to a failure in collecting output due to error '0x80070057 : The parameter is incorrect.
', some data may have been lost.
Command executed: "C:\WINDOWS\system32\cscript.exe" /nologo "Microsoft.Windows.Server.FreeSpace.vbs" XXSSDD.ABCD.com false 2000 15 1000 10 10000 15 5000 10
Working Directory: C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 72355\73\
One or more workflows were affected by this.
Workflow name: Microsoft.Windows.Server.2008.LogicalDisk.FreeSpace
Instance name: C:
Instance ID: {AB9FD647-3937-5EEF-39F1-32806690D58B}
Management group: ABCDEFG