| Event Id | 2778 |
| Event Source | Enterprise Vault |
| Description | The error c00e0056 occurred whilst calling the method CArchivingAgent |
| Event Information | According to Veritas Support: MSMQ reports "insufficient resources" when kernel memory reaches 80% utilization. The problem is that the kernel doesnt start cleaning up unused kernel memory until it reaches 90% utilization.At times, scheduled virus scans can leak memory in the PoolPagedMemory. Solution: Set the value of the DWORD registry value KernelMemThreshold to 95. This value is under the key: HKEY_LOCAL_MACHINE\Software\Microsoft\MSMQ\Parameters. This gives the kernel a chance to clean up unused memory before MSMQ reports "insufficient resources." Any leaks in the PoolPagedMemory can be solved by configuring all antiviruses to exclude the MSMQ storage directory. By default, this is in folder MSMQ\Storage, which is under the Windows System32 folder. Allowing antivirus software to scan the storage directory may result in message corruption. |
| Reference Links | "Insufficient Resources" in MSMQ and interference with antivirus software |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.