WinSyslog Event ID 11155: Cross-volume archive copy succeeded but source cleanup failed#

Answer#

The product copied the rotated log to an archive on another volume, but could not delete the original source file. Both copies may remain.

Event ID: 11155
Severity: Warning
Component: Log rotation
Windows Event Log source: AdisconWinSyslog
Available since: 26.07
Message pattern: Cross-volume copy succeeded but source delete failed: {source_path}

Verify that the archive copy is complete before touching the source.
Test delete permission and inspect file locks on the source path.
After confirming the archive, remove the source through the organization’s approved retention procedure.

Diagnose log rotation and retention — Verify trigger, names, handles, destination access, and retention.
Collect an Event ID and neighboring product events — Preserve the complete event and the product events immediately before and after it.
Export configuration and collect a bounded debug log — Create a text configuration export and time-bounded debug capture, then disable debugging.

Confirm that only the intended archive remains and a later cross-volume rotation completes without Event ID 11155.

The complete Windows Application Event Log entry and neighboring product events from the same time window.
The exact product version, affected service or action name, and event timestamp with time zone.
The affected configuration object and a bounded debug log covering one controlled reproduction.
Remove passwords, tokens, license data, private keys, message payloads, personal data, and customer-identifying names, addresses, hostnames, domains, and network addresses before sharing evidence.

If the event continues after the detailed procedures, collect the listed evidence and contact Adiscon Support.