KB: Wildcard matching rule fails and Event ID 10303 is logged in Operations Manager 2012 and 2007

Published Feb 15 2019 11:20 PM 81 Views
First published on TECHNET on Oct 15, 2014

When using System Center 2012 Operations Manager (OpsMgr 2012) or System Center Operations Manager 2007 (OpsMgr 2007), a wildcard matching rule fails and the following event is logged in the event log:

Event Type:       Error
Event Source:     Health Service Modules
Event Category:   None
Event ID:         10303
Date:
User:             N/A
Computer:         Computername
Description:
The Microsoft Operations Manager Expression Filter Module failed to process a data item and dropped it.

Error: 0x80004005

One or more workflows were affected by this.

Workflow name:    MomUIGeneratedRulexxxxxxx
Instance name:    XXXX.Domain.com
Instance ID:      {xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
Management group: MG name

For details regarding the cause of this issue as well as the resolution, please see the following:

KB3004791 - Wildcard matching rule fails and Event ID 10303 is logged in Operations Manager 2012 and 2007 ( http://support.microsoft.com/kb/3004791 )

J.C. Hornbeck | Solution Asset PM | Microsoft GBS Management and Security Division

Get the latest System Center news on Facebook and Twitter :

System Center All Up: http://blogs.technet.com/b/systemcenter/
System Center – Configuration Manager Support Team blog: http://blogs.technet.com/configurationmgr/
System Center – Data Protection Manager Team blog: http://blogs.technet.com/dpm/
System Center – Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
System Center – Operations Manager Team blog: http://blogs.technet.com/momteam/
System Center – Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center – Virtual Machine Manager Team blog: http://blogs.technet.com/scvmm

Windows Intune: http://blogs.technet.com/b/windowsintune/
WSUS Support Team blog: http://blogs.technet.com/sus/
The RMS blog: http://blogs.technet.com/b/rms/

App-V Team blog: http://blogs.technet.com/appv/
MED-V Team blog: http://blogs.technet.com/medv/
Server App-V Team blog: http://blogs.technet.com/b/serverappv

The Forefront Endpoint Protection blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

%3CLINGO-SUB%20id%3D%22lingo-sub-349882%22%20slang%3D%22en-US%22%3EKB%3A%20Wildcard%20matching%20rule%20fails%20and%20Event%20ID%2010303%20is%20logged%20in%20Operations%20Manager%202012%20and%202007%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-349882%22%20slang%3D%22en-US%22%3E%0A%20%26lt%3Bmeta%20http-equiv%3D%22Content-Type%22%20content%3D%22text%2Fhtml%3B%20charset%3DUTF-8%22%20%2F%26gt%3B%3CSTRONG%3E%20First%20published%20on%20TECHNET%20on%20Oct%2015%2C%202014%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%3CP%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F81807i455AD48EEEA1CD59%22%20%2F%3E%20When%20using%20System%20Center%202012%20Operations%20Manager%20(OpsMgr%202012)%20or%20System%20Center%20Operations%20Manager%202007%20(OpsMgr%202007)%2C%20a%20wildcard%20matching%20rule%20fails%20and%20the%20following%20event%20is%20logged%20in%20the%20event%20log%3A%3C%2FP%3E%0A%20%20%3CP%3E%3CEM%3E%20Event%20Type%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Error%20%3CBR%20%2F%3E%20Event%20Source%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Health%20Service%20Modules%20%3CBR%20%2F%3E%20Event%20Category%3A%26nbsp%3B%26nbsp%3B%20None%20%3CBR%20%2F%3E%20Event%20ID%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%2010303%20%3CBR%20%2F%3E%20Date%3A%20%3CBR%20%2F%3E%20User%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20N%2FA%20%3CBR%20%2F%3E%20Computer%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Computername%20%3CBR%20%2F%3E%20Description%3A%20%3CBR%20%2F%3E%20The%20Microsoft%20Operations%20Manager%20Expression%20Filter%20Module%20failed%20to%20process%20a%20data%20item%20and%20dropped%20it.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20Error%3A%200x80004005%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20One%20or%20more%20workflows%20were%20affected%20by%20this.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20Workflow%20name%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%20MomUIGeneratedRulexxxxxxx%20%3CBR%20%2F%3E%20Instance%20name%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%20XXXX.Domain.com%20%3CBR%20%2F%3E%20Instance%20ID%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%7Bxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx%7D%20%3CBR%20%2F%3E%20Management%20group%3A%20MG%20name%20%3C%2FEM%3E%3C%2FP%3E%0A%20%20%3CP%3EFor%20details%20regarding%20the%20cause%20of%20this%20issue%20as%20well%20as%20the%20resolution%2C%20please%20see%20the%20following%3A%3C%2FP%3E%0A%20%20%3CP%3E%3CA%20href%3D%22http%3A%2F%2Fsupport.microsoft.com%2Fkb%2F3004791%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EKB3004791%20%3C%2FA%3E%20-%20Wildcard%20matching%20rule%20fails%20and%20Event%20ID%2010303%20is%20logged%20in%20Operations%20Manager%202012%20and%202007%20(%20%3CA%20href%3D%22http%3A%2F%2Fsupport.microsoft.com%2Fkb%2F3004791%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%20http%3A%2F%2Fsupport.microsoft.com%2Fkb%2F3004791%20%3C%2FA%3E%20)%3C%2FP%3E%0A%20%20%3CP%3E%3CB%3EJ.C.%20Hornbeck%20%3C%2FB%3E%20%3CSTRONG%3E%20%7C%20Solution%20Asset%20PM%20%7C%20Microsoft%20GBS%20Management%20and%20Security%20Division%3C%2FSTRONG%3E%3C%2FP%3E%0A%20%20%3CP%3E%3CB%3EGet%20the%20latest%20System%20Center%20news%20on%20%3C%2FB%3E%20%3CA%20href%3D%22https%3A%2F%2Fwww.facebook.com%2Fpages%2FMicrosoft-System-Center-Support%2F111513322193410%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20%3CB%3E%20Facebook%20%3C%2FB%3E%20%3C%2FA%3E%20%3CB%3E%20and%20%3C%2FB%3E%20%3CA%20href%3D%22https%3A%2F%2Ftwitter.com%2F%23!%2FMS_SystemCenter%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20%3CB%3E%20Twitter%20%3C%2FB%3E%20%3C%2FA%3E%20%3CB%3E%20%3A%3C%2FB%3E%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F81808i6AFA990C0D34744D%22%20%2F%3E%20%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F81809i42D9C16866264BE9%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3ESystem%20Center%20All%20Up%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fb%2Fsystemcenter%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fb%2Fsystemcenter%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20System%20Center%20%E2%80%93%20Configuration%20Manager%20Support%20Team%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fconfigurationmgr%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fconfigurationmgr%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20System%20Center%20%E2%80%93%20Data%20Protection%20Manager%20Team%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fdpm%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fdpm%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20System%20Center%20%E2%80%93%20Orchestrator%20Support%20Team%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fb%2Forchestrator%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fb%2Forchestrator%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20System%20Center%20%E2%80%93%20Operations%20Manager%20Team%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fmomteam%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fmomteam%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20System%20Center%20%E2%80%93%20Service%20Manager%20Team%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fb%2Fservicemanager%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fb%2Fservicemanager%20%3C%2FA%3E%20%3CBR%20%2F%3E%20System%20Center%20%E2%80%93%20Virtual%20Machine%20Manager%20Team%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fscvmm%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fscvmm%3C%2FA%3E%3C%2FP%3E%0A%20%20%3CP%3EWindows%20Intune%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fb%2Fwindowsintune%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fb%2Fwindowsintune%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20WSUS%20Support%20Team%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fsus%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fsus%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20The%20RMS%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fb%2Frms%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fb%2Frms%2F%3C%2FA%3E%3C%2FP%3EApp-V%20Team%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fappv%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fappv%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20MED-V%20Team%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fmedv%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fmedv%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20Server%20App-V%20Team%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fb%2Fserverappv%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fb%2Fserverappv%3C%2FA%3E%3CP%3EThe%20Forefront%20Endpoint%20Protection%20blog%20%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fb%2Fclientsecurity%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fb%2Fclientsecurity%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20The%20Forefront%20Identity%20Manager%20blog%20%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.msdn.com%2Fb%2Fms-identity-support%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.msdn.com%2Fb%2Fms-identity-support%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20The%20Forefront%20TMG%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fb%2Fisablog%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fb%2Fisablog%2F%20%3C%2FA%3E%20%3CBR%20%2F%3E%20The%20Forefront%20UAG%20blog%3A%20%3CA%20href%3D%22http%3A%2F%2Fblogs.technet.com%2Fb%2Fedgeaccessblog%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%20http%3A%2F%2Fblogs.technet.com%2Fb%2Fedgeaccessblog%2F%3C%2FA%3E%3C%2FP%3E%0A%20%0A%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-349882%22%20slang%3D%22en-US%22%3EFirst%20published%20on%20TECHNET%20on%20Oct%2015%2C%202014%20When%20using%20System%20Center%202012%20Operations%20Manager%20(OpsMgr%202012)%20or%20System%20Center%20Operations%20Manager%202007%20(OpsMgr%202007)%2C%20a%20wildcard%20matching%20rule%20fails%20and%20the%20following%20event%20is%20logged%20in%20the%20event%20log%3A%20Event%20Type%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20ErrorEvent%20Source%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Health%20Service%20ModulesEvent%20Category%3A%26nbsp%3B%26nbsp%3B%20NoneEvent%20ID%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%2010303Date%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20User%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20N%2FAComputer%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20ComputernameDescription%3AThe%20Microsoft%20Operations%20Manager%20Expression%20Filter%20Module%20failed%20to%20process%20a%20data%20item%20and%20dropped%20it.%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-349882%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESystem%20Center%20Operations%20Manager%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Version history
Last update:
‎Mar 11 2019 10:12 AM
Updated by: