Event Log Exception when Aggregator runs

Oct 29, 2013 at 11:24 PM
I am getting the following Event Log message (Windows Application Log) whenever the Aggregator tries to execute:
I am at a loss about how to troubleshoot this further ... any ideas:


TF53010: The following error has occurred in a Team Foundation component or extension:
Date (UTC): 10/29/2013 8:59:20 PM
Machine: SER-1552-TLSR18
Application Domain: /LM/W3SVC/2/ROOT/tfs-1-130275539437129767
Assembly: Microsoft.TeamFoundation.Framework.Server, Version=11.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a; v4.0.30319
Service Host: a7d984e9-4728-4ef2-9d6f-c8ae0add489f (DefaultCollection)
Process Details:
Process Name: w3wp
Process Id: 4640
Thread Id: 6952
Account name: NT AUTHORITY\NETWORK SERVICE

Detailed Message: The subscriber TFSAggregator raised an exception while being notified of event Microsoft.TeamFoundation.WorkItemTracking.Server.WorkItemChangedEvent.
Exception Message: The source was not found, but some or all event logs could not be searched. To create the source, you need permission to read all event logs to make sure that the new source name is unique. Inaccessible logs: Security. (type SecurityException)
Exception Stack Trace: at System.Diagnostics.EventLog.FindSourceRegistration(String source, String machineName, Boolean readOnly, Boolean wantToCreate)
at System.Diagnostics.EventLog.SourceExists(String source, String machineName, Boolean wantToCreate)
at System.Diagnostics.EventLogInternal.VerifyAndCreateSource(String sourceName, String currentMachineName)
at System.Diagnostics.EventLogInternal.WriteEntry(String message, EventLogEntryType type, Int32 eventID, Int16 category, Byte[] rawData)
at System.Diagnostics.EventLog.WriteEntry(String source, String message, EventLogEntryType type, Int32 eventID, Int16 category, Byte[] rawData)
at System.Diagnostics.EventLog.WriteEntry(String source, String message, EventLogEntryType type)
at TFSAggregator.WorkItemChangedEventHandler.ProcessEvent(TeamFoundationRequestContext requestContext, NotificationType notificationType, Object notificationEventArgs, Int32& statusCode, String& statusMessage, ExceptionPropertyCollection& properties)
at Microsoft.TeamFoundation.Framework.Server.TeamFoundationEventService.SubscriptionList.Notify(TeamFoundationRequestContext requestContext, NotificationType notificationType, Object notificationEventArgs, String& statusMessage, ExceptionPropertyCollection& properties)
Jan 16, 2014 at 5:34 AM
Ensure that Network Service (others may be using a specific TFSService account) has full access to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog in the registry.

You'll also want to make sure that Network Service has access to the Team Projects so that it can update work items.
Sep 9, 2014 at 9:18 PM
Did the permissions on the registry key resolve this issue? I am getting the same error after making the permissions changes to the registry key.

Thank you in advance