Azure Monitor Baseline Alerts
Download AlertsGlossaryGitHubGitHub IssuesToggle Dark/Light/Auto modeToggle Dark/Light/Auto modeToggle Dark/Light/Auto modeBack to homepage

PS2016

Alerts

Performance Counters

Alerts

DisplayNameTypeDescription
AlertRule-PS-2016-1LogEnsure the server is accessible.
AlertRule-PS-2016-2LogManually install the color profile.
AlertRule-PS-2016-3LogRetry printing or restart the print server.
AlertRule-PS-2016-4LogInstall the Printer Driver.
AlertRule-PS-2016-5LogRestart the print spooler fix sharing problems and check Group Policy.
AlertRule-PS-2016-6LogRestart the print spooler and unshare the printer.
AlertRule-PS-2016-7LogUpdate the printer driver.
AlertRule-PS-2016-8LogCheck Group Policy and network connectivity.
AlertRule-PS-2016-9LogTry again or install an updated printer driver.
AlertRule-PS-2016-10LogCheck network connectivity and Group Policy.
AlertRule-PS-2016-11LogCheck resource availability.

“Ensure the server is accessible.”

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (83) and EventLog == ‘Microsoft-Windows-PrintService/Admin’ and (Source == ‘Microsoft-Windows-PrintBRM’ or Source == ‘PrintBrm’)
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Admin!*[System[(EventID=83) and (Provider[@Name=‘Microsoft-Windows-PrintBRM’ or @Name=‘PrintBrm’])]]

Manually install the color profile

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (360) and EventLog == ‘Microsoft-Windows-PrintService/Admin’ and Source == ‘Microsoft-Windows-PrintService’
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Admin!*[System[(EventID=360) and (Provider[@Name=‘Microsoft-Windows-PrintService’])]]

Retry printing or restart the print server

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (701,702,703,704) and EventLog == ‘Microsoft-Windows-PrintService/Operational!*’ and Source == ‘Microsoft-Windows-PrintService’
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Operational!*[System[(EventID=701 or EventID=702 or EventID=703 or EventID=704) and (Provider[@Name=‘Microsoft-Windows-PrintService’])]]

Install the Printer Driver

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (364,365,367) and EventLog == ‘Microsoft-Windows-PrintService/Admin’ and Source == ‘Microsoft-Windows-PrintService’
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Admin!*[System[(EventID=364 or EventID=365 or EventID=367) and (Provider[@Name=‘Microsoft-Windows-PrintService’])]]

Restart the print spooler fix sharing problems and check Group Policy

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (315) and EventLog == ‘Microsoft-Windows-PrintService/Admin’ and Source == ‘Microsoft-Windows-PrintService’
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Admin!*[System[(EventID=315) and (Provider[@Name=‘Microsoft-Windows-PrintService’])]]

Restart the print spooler and unshare the printer

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (371) and EventLog == ‘Microsoft-Windows-PrintService/Admin’ and Source == ‘Microsoft-Windows-PrintService’
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Admin!*[System[(EventID=371) and (Provider[@Name=‘Microsoft-Windows-PrintService’])]]

Update the printer driver

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (356) and EventLog == ‘Microsoft-Windows-PrintService/Admin’ and Source == ‘Microsoft-Windows-PrintService’
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Admin!*[System[(EventID=356) and (Provider[@Name=‘Microsoft-Windows-PrintService’])]]

Check Group Policy and network connectivity

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (513,514) and EventLog == ‘Microsoft-Windows-PrintService/Admin’ and Source == ‘Microsoft-Windows-PrintService’
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Admin!*[System[(EventID=513 or EventID=514) and (Provider[@Name=‘Microsoft-Windows-PrintService’])]]

Try again or install an updated printer driver

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (600,601) and EventLog == ‘Microsoft-Windows-PrintService/Admin’ and Source == ‘Microsoft-Windows-PrintService’
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Admin!*[System[(EventID=600 or EventID=601) and (Provider[@Name=‘Microsoft-Windows-PrintService’])]]

Check network connectivity and Group Policy

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (515,516,517,518,519,520) and EventLog == ‘Microsoft-Windows-PrintService/Admin’ and Source == ‘Microsoft-Windows-PrintService’
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Admin!*[System[(EventID=515 or EventID=516 or EventID=517 or EventID=518 or EventID=519 or EventID=520) and (Provider[@Name=‘Microsoft-Windows-PrintService’])]]

Check resource availability

PropertyValue
Severity2
EnabledTrue
AutoMitigateTrue
EvaluationFrequencyPT15M
WindowSizePT15M
Typerows
QueryEvent | where EventID in (502,503,504,505,506,507,508,509,510,511,512) and EventLog == ‘Microsoft-Windows-PrintService/Admin’ and Source == ‘Microsoft-Windows-PrintService’
ThresholdN/A
xPathQueryMicrosoft-Windows-PrintService/Admin!*[System[(EventID=502 or EventID=503 or EventID=504 or EventID=505 or EventID=506 or EventID=507 or EventID=508 or EventID=509 or EventID=510 or EventID=511 or EventID=512) and (Provider[@Name=‘Microsoft-Windows-PrintService’])]]

Performance Counters

Performance Counter
\Print Queue(_Total)\Jobs
\Print Queue(_Total)\Jobs Spooling
\Print Queue(_Total)\Total Jobs Printed
\Print Queue(_Total)\Total Pages Printed