none
Message Queues Audit Information RRS feed

  • Question

  • Is there a generic way for MSMQ auditing (a tool from Microsoft or any registry configuration which helps writes or any group policy etc.) which provides the below information or lets one monitor the below information at least?

    a. When a message queue is created and by whom

    b. When a message queue is deleted and by whom

    The MSMQ End2End Event logging does not have this level of information and enabling the Journaling in the message queuing console does not provide this information either.

    I am sure that this information can be obtained programatically, but we do not want to disrupt the client's production environment running our application, wherein the problem happens (it has only happened twice) while writing to a message queue which was deleted suddenly.

    The MSMQ error is below - which seems to indicate that the message queue is no longer valid or has been deleted. Our Application does not delete these queues.

    MQ_ERROR_QUEUE_DELETED (0xC00E005A)
    Returned when the queue is deleted before the message could be read.
    The specified queue handle is no longer valid, and the queue must be closed.
    ----------------------------------------------------------------------------------------------
    Any suggestions/feedback/help with this query is much appreciated.

    Thank You.



    Paul

    Monday, May 27, 2019 9:03 AM