WPM transactions are Unknown and System.UnauthorizedAccessException appears in Agent Service Log

12/23/2020 4:36 PM

12/23/2020 4:36 PM

Transactions are unknown and not playing on the Player location. A quick look at the AgentService.log will display more information.

Log location:
C:\ProgramData\SolarWinds\Logs\SEUM\AgentService.log

If the fatal message is received below, proceed with resolution. 

FATAL SolarWinds.SEUM.Agent.Service.AgentService - Unhandled exception caught.
System.UnauthorizedAccessException: Attempted to perform an unauthorized operation.
   at System.Security.AccessControl.Win32.SetSecurityInfo(ResourceType type, String name, SafeHandle handle, SecurityInfos securityInformation, SecurityIdentifier owner, SecurityIdentifier group, GenericAcl sacl, GenericAcl dacl)
   at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, SafeHandle handle, AccessControlSections includeSections, Object exceptionContext)
   at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, AccessControlSections includeSections, Object exceptionContext)
   at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, AccessControlSections includeSections)
   at System.Security.AccessControl.FileSystemSecurity.Persist(String fullPath)
   at System.IO.File.SetAccessControl(String path, FileSecurity fileSecurity)
   at System.IO.FileInfo.SetAccessControl(FileSecurity fileSecurity)
   at SolarWinds.SEUM.Agent.Helpers.CertificateHelper.AddAccessToCertificate(X509Certificate2 cert, String user)
   at SolarWinds.SEUM.Agent.WorkerProcessManagement.WorkerProcessWcfProxy.GrantUserAnAccessToPlayerCertificate()
   at SolarWinds.SEUM.Agent.WorkerProcessManagement.WorkerProcessWcfProxy..ctor(IWorkerProcessLauncher launcher)
   at SolarWinds.SEUM.Agent.WorkerProcessManagement.WorkerProcessFactory.CreateWorkerProcess(String username, String domainOrMachine, String password, Int32 sessionId, ProbeType probeType)
   at SolarWinds.SEUM.Agent.WorkerProcessManagement.WorkerProcessManager.AddWorkerProcess(String username, String domainOrMachine, String password, Boolean runInInteractiveSession, ProbeType probeType)
   at SolarWinds.SEUM.Agent.WorkerProcessManagement.WorkerProcessManager.FindWorkerProcess(Boolean requireInteractiveSession, ProbeType probeType)
   at SolarWinds.SEUM.Agent.Agent.RunRecording(Guid recordingGuid, String recordingXml, String parametersXml, IList`1 proxyTrustedHosts, Boolean requiresInteractiveSession, ProbeType probeType, Boolean waitForProcess)
   at SolarWinds.SEUM.Agent.Agent.RunRecording(Guid recordingGuid, String recordingXml, String parametersXml, IList`1 proxyTrustedHosts, Boolean requiresInteractiveSession, ProbeType probeType)
   at SolarWinds.SEUM.Agent.PlaybackDispatcher.ProcessQueue()
   at SolarWinds.SEUM.Agent.PlaybackDispatcher.RunInternal()
   at System.Threading.ThreadHelper.ThreadStart_Context(Object state)
   at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
   at System.Threading.ThreadHelper.ThreadStart()

 

Web Performance Monitor

SEUM Users (SEUM-User-#) need read permission to SolarWinds-SEUM_PlaybackAgent certificate.

Open mmc.exe to check the SolarWinds-SEUM_PlaybackAgent certificate.

1. Start > Run > mmc
2. Add snap-in > computer account 
3. View the Personal certificates
4. Right click the SolarWinds-SEUM_PlaybackAgent certificate and go to Tasks > Manage Private Keys > SEUM Users or domain accounts used for playback should be on the list. NOTE: you will likely need to add users 1 through 7. Simply having the administrators group added is not sufficient even if they're added to the local administrators group
5. Ensure the users have Read writes.
6. Apply changes, restart WPM Playback Service.

Please contact SolarWinds Support if this does not resolve your issue.