WMI event查询导致的内存quota violation错误

来源：互联网发布：桌椅板凳淘宝编辑：程序博客网时间：2024/06/04 18:10

一个机器事件日志中不断出现 EventID 10，source是 Winmgmt的错误，错误内容：

Event filter with query "select * from __InstanceModificationEvent within 10 where TargetInstance isa 'Win32_Service'" could not be (re)activated in namespace "//./Root/CIMV2" because of error 0x8004106c. Events may not be delivered through this filter until the problem is corrected. For more information, see Help and Support Center .....

搜了一下 WMI 错误代码页，0x8004106c代表：WMI is taking up too much memory. This can be caused by low memory availability or excessive memory consumption by WMI. 也就是这个WMI查询消耗了太多的内存，继续搜，发现了hotfix KB828653。还有一个链接居然是内存ECC retest的问题

再检查event log，原来是机器上的SQL 实例启动，触发了一个 WMI notification event, 但是因为内存原因而查询失败。安装这个hotfix问题解决。