12114
EventSentry
Performance Monitoring
The EventSentry agent is experiencing an unusually high handle count (5001 handles) and/or high memory usage (48324564 bytes), which is most likely due to a known issue in Windows Server 2003 SP2 (http://support.microsoft.com/kb/938135). It is highly recommended that you navigate to http://support.microsoft.com/kb/938135 to download and install the hotfix to resolve this issue. It is not recommended that you continue to run the agent for an extended time period without installing the Microsoft hotfix.
Failure to install the hotfix may eventually result in system instability or a system crash. Installation of the hotfix will require a reboot.
Starting with version 2.93, the EventSentry agent now accesses performance data directly through the performance registry API. Most versions of Windows Server 2003 with SP2 exhibit a bug which results in a memory and/or handle leak when querying performance data through the registry API. Windows 2008 (R2) is not affected by this issue. To address the issue, Microsoft hotfix 938135 needs to be installed on all affected computers (see additional links).
It is not necessary to immediately install the patch, but if you receive this warning then you should schedule an installation of the hotfix in the near future, e.g. during the next scheduled maintenance window. If you cannot install the patch then you should either restart the EventSentry agent or disable performance monitoring on the host until the patch can be installed.
The EventSentry agent logs event 12114 when it detects that its own memory and/or handle usage is unusually high.