People

Community
Submit

Rank (0) Views 58 On Wed, May 16, 2012 11:49 AM, 14 hours ago By Steve G

0

0

Time must be set to UTC time. Everything I query is 4 hours behind. Is there a place to set that?

   Comments(0)

Rank (0) Views 64 On Wed, May 16, 2012 10:49 AM, 15 hours ago By Steve G

0

0

I just downloaded LogSmith and yes it's easier but querying the Security logs of a DC is painful!! But I guess that's true of any tool querying Sec logs. I tried saving a copy to my local machine and importing in the EVent Viewer but can't figure out how...

   Comments(0)

Rank (0) Views 71 On Wed, May 16, 2012 9:23 AM, 16 hours ago By Steve G

0

0

Downloaded LogParser and having some trouble getting the syntax correct. I'm running the query : C:\Program Files\Log Parser 2.2>LogParser.exe -i:EVT "SELECT Top1 Strings AS Parameters FROM E:\SecLogs.evt WHERE EventID=566" and all is does is show me the...

   Comments(0)

Rank (0) Views 60 On Tue, May 15, 2012 8:53 AM, 1 day 17 hours ago By Steve G

0

0

Here's the event we're looking for. I'd like to alert when all three strings are found (gPlink, ogranizationalUnit, Write Property). Event Type:Success Audit Event Source:Security Event Category:Directory Service Access Event ID:566 Date:4/12/2012 Time:12...

   Comments(0)

Rank (0) Views 506 On Mon, May 14, 2012 3:08 PM, 2 days ago By Steve G

0

0

I'd like to generate an alert when more than one string is found in the event description.  Basically trying to create an "and" query instead of an "or" query using RegEx and having no luck.  This is what I had - EventDescription matches regula...

   Comments(0)

Rank (26) Views 174 On Fri, May 04, 2012 2:42 PM, 12 days ago By Steve G

0

0

CORRECTION!! These numbers are from the same MS! Reporting on the Data Warehouse Performance Collection:Writer Average Batch Processing Time counter I'm seeing 101.6 for State and 22.31 for system.event.linkdata. Sorry for the confusion! Again - should I...

   Comments(0)

Rank (27) Views 147 On Fri, May 04, 2012 2:37 PM, 12 days ago By Steve G

0

0

OK - that's what I get for making assumptions. It is measured in ms - not seconds. Either way - there seems to be a big difference between ms's. Out of the four instances (alert, performance, state and system.event.linkdata) state and system.event.linkdat...

   Comments(0)

Rank (20) Views 428 On Fri, May 04, 2012 2:19 PM, 12 days ago By Steve G

0

0

We've been having some performance issues with our SCOM 2007 implemenatation and I've been focused on the Ops db but noticed something with the DW db.  I ran a report to show me the Data Warehouse Performance Collection:Writer Average Batch Processin...

   Comments(0)

Rank (17) Views 195 On Tue, Apr 24, 2012 1:23 PM, 22 days ago By Steve G

0

0

Well, doing more digging I answered my own question. My monitor was always a line behind because in the text file I was using for test I wasn't hitting enter after each line and the trigger for the monitor is a new line (0x0A0x0A hex sequence). I also wro...

   Comments(0)

Rank (25) Views 420 On Mon, Apr 23, 2012 2:55 PM, 23 days ago By Steve G

0

0

I'm setting up a Generic Text log rule in SCOM 2007 R2 with a simple expression to look for the string 'error' in the file.  I configured the alert to display the text found by using Params/Param[1] in the alert description.  I have a blank text...

   Comments(0)

Rank (27) Views 728 On Thu, Apr 12, 2012 8:23 AM, 34 days ago By Steve G

0

0

We have SCOM 2007 R2 CU5 monitoring 3500 servers in our environment.  Over time working with groups in the console has become extremely slow (we have about 730 groups)!  As long as several minutes to create or edit a group.  I'm guessing it...

   Comments(0)

Rank (25) Views 177 On Tue, Apr 03, 2012 3:30 PM, 43 days ago By Steve G

0

0

No good - doesn't return any data when I run the report.

   Comments(0)

Rank (23) Views 599 On Tue, Apr 03, 2012 2:59 PM, 43 days ago By Steve G

0

0

Is there a rule that collects availability data in SCOM?  My management is looking for availability reports but they would like to see the value as a whole.  In other words the existing availability reports show availability data per server when...

   Comments(0)

Rank (31) Views 617 On Mon, Apr 02, 2012 3:35 PM, 44 days ago By Steve G

0

0

We're having some perf issues with our OPS db and I found an article from Kevin Holman that included running the SQL command 'DBCC SHOWCONTIG WITH FAST'.  He recommends to pay close attention to Scan Density (above 80%) and Logical Scan Fragmentation...

   Comments(0)