Forum Discussion

Haim Behar's avatar
Haim Behar
Copper Contributor
Feb 05, 2019

SAMR Queries from specific server (not computer)

Hi, One of my servers show in ATA multiple SAMR queries (see attached screen-shot). It's happening at the beginning of each our as can be seen (3:13pm, 2:13pm, etc.) Which process/network activ...
alerts
Bradley Griffin's avatar
Bradley Griffin
Copper Contributor
Feb 19, 2019

I ran into similar activity recently. The SAMR queries were only being seen on servers in Azure, so that was a bit of a clue. Using Message Analyzer and adding the Process Name column from Global Properties quickly found which process was performing that activity.

 

The culprit was WaAppAgent.exe which is the Azure VM agent.

  • Haim Behar's avatar
    Haim Behar
    Copper Contributor
    Feb 28, 2019

    Thank you,

    How did you manage to solve it & stop these queries ?

Resources