WinSyslog Event ID 11004: SETP session restored#

Answer#

Forwarding can continue.

Event ID: 11004
Severity: Information
Component: SETP sender
Windows Event Log source: AdisconWinSyslog
Available since: 26.07
Message pattern: SETP sender session has been restored. Additional detail: {event_detail}

The destination or listener is unavailable, blocked, bound to another address or port, or configured for a different transport.
TLS certificates, peer authorization, protocol settings, or sender and receiver configuration do not match.

Record the endpoint, address family, port, transport, TLS mode, and complete runtime detail.
Verify DNS, route, listener ownership, firewall policy, and TCP or UDP reachability as applicable.
Send one unique test message and verify positive receipt and queue recovery.

Resolve a destination and test its TCP port — Verify DNS, selected address, routing, and TCP establishment.
Verify TLS certificates, private keys, and permitted peers — Check validity, trust chain, key pairing, protocol mode, and peer authorization.
Verify sender, receiver, and queued-message recovery — Prove end-to-end recovery and backlog drainage.
Collect an Event ID and neighboring product events — Preserve the complete event and the product events immediately before and after it.
Export configuration and collect a bounded debug log — Create a text configuration export and time-bounded debug capture, then disable debugging.

Repeat or monitor the affected operation and confirm that Event ID 11004 does not recur and that setp sender processing continues.

The complete Windows Application Event Log entry, including all event detail.
The product name, exact version, service account, and event timestamp with time zone.
A configuration export and debug log covering the same time window, with secrets removed.

This event normally records state rather than a failure. Escalate only when the state was unexpected or the associated operation does not recover.