Hi there,

I'm hoping someone can help figure this out.  Running Windows 8.1 Enterprise.  In the last few days, have noticed the ESENT event being logged every five minutes or so, and Windows makes a sound as if a USB device was disconnected.  It's always svchost instances raising the event, when looking at the Event Viewer.  The event IDs are 326, 327, 105, 102, 103.  The cycle appears to involve 1) starting a new instance, 2) attaching a database, 3) detaching a database, and then 4) stopping the instance.

Example event log detail for event ID 327:

svchost (9836) Instance: The database engine detached a database (1, C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb). (Time=0 seconds)
 
Internal Timing Sequence: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.015, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.
Revived Cache: 0 0

Looks to me like some Metro app is having difficulties.  Any ideas on how to fix are appreciated.

Thanks,
Adam

That's just the sound of the NSA logging on and off.  Don't worry about it.  ;-)

In all seriousness, it sounds like you're like me - I like to know why things happen too.

I see some of these Information events in the Application event "database engine starting", "database engine started a new instance", "database engine attached a database (same one you showed)", "detached a database", and "stopped the instance".  I'm not getting any sounds.

Last set of this sequence for me was just after 6am this morning, and before that at 2:30 am this morning.  Before that, yesterday morning just after midnight.

I'd love to know what these are from.  As a guess, given the large number of things in the Task Scheduler, I'd guess that they're from some scheduled maintenance task.  In your case, given the large numbers of them, perhaps something has gone wrong.

I do think that Microsoft not getting their online documentation up to date is a problem.  I followed the link at the bottom of one of the events to a page that in a fraction of a second redirected to a page that reads:

  Page Not Found   5765 out of 22584 rated this helpful - Rate this topic                         

  We're sorry, but the page you requested could not be found.  You can search on TechNet for more information

I'll be watching this thread for answers as well.

  

I have exactly the same problem. Whenever my Windows 8.1 machine is idle

"Windows Installer Module Worker" and
"System"

freeze up to 25% (1 of 4 cores)  and the log shows exactly the ESENT issues you mention.

To v-yozhu: "Marked as answer by v-yozhu"Microsoft contingent staff, Moderator

WHY do you consider this as an answer? Can you please clarify

1. WHAT EXACTLY causes the system to freeze the CPU and

2. what exactly is stored in C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb ?

• Edited by franky403 Thursday, May 29, 2014 2:41 PM

I have exactly the same problem. Whenever my Windows 8.1 machine is idle

"Windows Installer Module Worker" and
"System"

freeze up to 25% (1 of 4 cores)  and the log shows exactly the ESENT issues you mention.

To v-yozhu: "Marked as answer by v-yozhu"Microsoft contingent staff, Moderator

WHY do you consider this as an answer? Can you please clarify

1. WHAT EXACTLY causes the system to freeze the CPU and

2. what exactly is stored in C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb ?

• Edited by franky403 Thursday, May 29, 2014 2:41 PM

Why on earth does a moderator mark something as an answer here? Would MS please remove all those guys who do not understand anything from writing anything in the MS forums or even moderating them?

Noel Carboni finished his thoughts with "I'll be watching this thread for answers as well."

Please remove any privileges v-yhouzu has here in this forum, mark the answer as open and answer the question.

LOL, maybe I hit closer to the mark than we think with that NSA comment.  :)

I don't have any new information either, except these observations:

A block of 5 ESENT sourced Information events in my Application event log at 9:39:22 AM today.  I can't recall whether there might have been an extra sound I didn't expect at the time.

(Oldest to newest)

Log Name:      Application
Source:        ESENT
Date:          5/29/2014 9:39:22 AM
Event ID:      102
Task Category: General
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      NoelC4
Description:
svchost (23000) Instance: The database engine (6.03.9600.0000) is starting a new instance (0).

Log Name:      Application
Source:        ESENT
Date:          5/29/2014 9:39:22 AM
Event ID:      105
Task Category: General
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      NoelC4
Description:
svchost (23000) Instance: The database engine started a new instance (0). (Time=0 seconds)
 
Internal Timing Sequence: [1] 0.000, [2] 0.016, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000.

Log Name:      Application
Source:        ESENT
Date:          5/29/2014 9:39:22 AM
Event ID:      326
Task Category: General
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      NoelC4
Description:
svchost (23000) Instance: The database engine attached a database (1, C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb). (Time=0 seconds)
 
Internal Timing Sequence: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.
Saved Cache: 1 0

Log Name:      Application
Source:        ESENT
Date:          5/29/2014 9:44:22 AM
Event ID:      327
Task Category: General
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      NoelC4
Description:
svchost (23000) Instance: The database engine detached a database (1, C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb). (Time=0 seconds)
 
Internal Timing Sequence: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.016, [12] 0.000.
Revived Cache: 0 0

Log Name:      Application
Source:        ESENT
Date:          5/29/2014 9:44:22 AM
Event ID:      103
Task Category: General
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      NoelC4
Description:
svchost (23000) Instance: The database engine stopped the instance (0).
 
Dirty Shutdown: 0
 
Internal Timing Sequence: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000, [13] 0.000, [14] 0.000, [15] 0.000.
Event Xml:

All I can say is thank goodness Dirty Shutdown reads zero!  :)

 

By the way, they're happening for me every 2 days.

 

These ESENT events are still happening, and the missing online information is still a problem...

 

 

I also have this at least six times per day, on Win 8.1 Pro 64-bit.

MS - why aren't you answering?

    svchost (3216) Instance: The database engine stopped the instance (0).

    Dirty Shutdown: 0

     Internal Timing Sequence: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.015, [11] 0.000, [12] 0.000, [13] 0.000, [14] 0.000, [15] 0.000.

-

System

- Provider [ Name] ESENT

- EventID 103 [ Qualifiers] 0

Level 4

Task 1

Keywords 0x80000000000000

- TimeCreated [ SystemTime] 2014-12-31T02:23:51.000000000Z

EventRecordID 4239

Channel Application

Computer Opti7010Win8

Security

-

EventData

svchost

3216

Instance:

0

[1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.015, [11] 0.000, [12] 0.000, [13] 0.000, [14] 0.000, [15] 0.000.

0

 That's what I see.

I have the same error 103 plus stated above series of errors.  Provider Esent.   My computer constantly lauches disk cleanup in the middle of other applications.  Not much help here...........

same events, just woke me up at 3:30am...still no answer on what is causing this?

I am at a loss. Our servers ran perfectly until we moved to server 2012 R2. Now it has been a full time job just trying to keep up with all the mysterious events that fill up the event logs.  Someone from Microsoft needs to be addressing this.