After moving a WCF service from one production server to another, where the configuration is very similar, custom event logging via Event Trace for Windows has stopped working, but just for one app.
The error is being thrown in the ctor of the EventProvider class and it is a Win32 "Not enough storage" error.
The WCF service is a 'concurrency mode multiple, instance context mode per call' thread per call configuration. At time of monitoring 60 threads belonged to the process. The EventProvider ctor is invoked per call. It is IIS/WAS hosted with AppFabric.
Another app on the same server is working OK.
I have no idea how to diagnose this. If anyone can even suggest a starting point I'd be grateful.