Scombag

  • That’s what it was, many thanks for the prompt feedback!

  • Hi I am running SCOM 2012 SP1 management group, i am a SCOM admin and have another user who is also a SCOM admin.
    We have a view setup in the console for all closed alerts.
    There is a particular closed alert that I can search for using the hostname and it returns ok. When he does the same nothing returns, but if he enters the name of the Alert it…[Read more]

  • @Soren Excellent thank you! now working a treat

    @Stanislav I apologise I can assure you I am not doing this on purpose, I have now realised how to use the forums and will post on there in the future.

  • Thanks for the prompt response
    I am getting the following error when running this query

    Msg 102, Level 15, State 1, Line 1
    Incorrect syntax near ‘100’.

    Oh and how would I do a group by on all the fields? Afraid I am not skilled in compiling sql queries.

  • Ok tried to post this under Operations Manager by selcting this category when publishing the post, it is still showing up under general so not sure what I am doing wrong!

    Apologies

  • Hi,

    Is anyone aware of a report or SQL query that I can run to get the history of a particular alert i.e. when it has fired and what computers it has fired on?

    • Ok tried to post this under Operations Manager by selcting this category when publishing the post, it is still showing up under general so not sure what I am doing wrong!

      Apologies

    • Your creating a blog post, this would be more suited for the forums ;)

      But regardless, here’s a quick and dirty Query for the datawarehouse:

      SELECTTOP…[Read more]

    • Oh and you might want to do a Group by on all the fields in the select otherwise you will see duplicates, guessing it’s due to multiple records for each alert to track state changes etc.

    • Thanks for the prompt response
      I am getting the following error when running this query

      Msg 102, Level 15, State 1, Line 1
      Incorrect syntax near ‘100’.

      Oh and how would I do a group by on all the fields? Afraid I am not skilled in compiling sql queries.

    • The Query is missing some Spaces after i posted it, perhaps this works:
      Top (100) will only select the first 100 records so remove this to get everything.
      As for modding the Query, if your not comfortable with SQL then run the Query, export to Excel and you can Work you magic there, there’s a “copy with headers” function in the result table in…[Read more]

    • and more Spaces missing in the 2nd line under FROM :)

    • SCOMbag you are always creating blogposts for questions. Please always use forums if you have questions.

    • @Soren Excellent thank you! now working a treat

      @Stanislav I apologise I can assure you I am not doing this on purpose, I have now realised how to use the forums and will post on there in the future.

  • Hi,

    At present I use the command channels in SCOM to output alert information to a text file, what I’ve noticed is that some MPs have monitors and rules that trigger alerts with the originating server hostname […]

  • Doh! Yes this was indeed a custom view that I had created in another management group a long time ago, hence the reason I thought it came out of the box. Thank you for the reminder gentlemen! I was able to manually add this view into the console.

  • Recently installed SCOM 2012 SP1 and noticed that the Closed Alerts view is missing from within the Monitoring node underneath the Active Alerts view, anyone seen this before?

    • I don’t think this is a built-in view. I’ve always had to create it myself.

    • I can’t recall ever seeing a “closed alerts” view…are you sure that’s not something you’ve manually created?

    • Doh! Yes this was indeed a custom view that I had created in another management group a long time ago, hence the reason I thought it came out of the box. Thank you for the reminder gentlemen! I was able to manually add this view into the console.

    • Why was this opened as a blog post instead of a forum request. In the future, please lot questions in the support forums to avoid confusing folks with posts like this in their rss. I am happy to assist you if you are confused in any way. Forums can be found at http://www.systemcentercentral.com/system-center-central-forums/

  • Just installed SCOM 2012 SP1 management group and noticed that the Closed Alerts view is missing from under the Active Alerts View in the Monitoring Node, anyone seen this before?

  • Hi,

    At present I use the command channels in SCOM to output alert information to a text file, what I’ve noticed is that some MPs have monitors and rules that trigger alerts with the originating server hostname […]

  • The rule script was listing the rules but not closing them, a colleague of mine took a look and amended the script as follows to get it working, he also added some additional code to output if no alerts are present

    #Operations Manager module import
    Import-Module OperationsManager
    write-host “Getting all alerts generated by Rules for the…[Read more]

  • Curt you are the man!, this is awesome, thanks for your rapid response. I am sure many people will find this very useful, myself included.

  • Is anyone aware of a script or utility to close all alerts that relate to a specific management pack for SCOM 2012?

    • interesting. I don’t know of anything, but I’m sure it can be scripted, so here goes.

      my first reaction is that for alerts generated by monitors, you’d probably want to reset the health of those monitors as well as –or instead of– closing the alerts.

      the alerts don’t tell you what management packs they are in, but they tell you the GUID of…[Read more]

    • that last line should be $unhealthyinstance.ResetMonitoringState($mpmonitor) (not ‘instanceS’)

    • Curt you are the man!, this is awesome, thanks for your rapid response. I am sure many people will find this very useful, myself included.

    • The rule script was listing the rules but not closing them, a colleague of mine took a look and amended the script as follows to get it working, he also added some additional code to output if no alerts are present

      #Operations Manager module import
      Import-Module OperationsManager
      write-host “Getting all alerts generated by Rules for the…[Read more]

    • ah.  “$rulealert.ResolutionState=255″ changes the resolutionstate column to ‘closed’ if I view the alert in powershell, but apparently doesn’t actually update the alert in scom. I found some other articles online that use this method, and I just needed to follow it up with $RuleAlert.Update(“”) to actually get it to update the alert in scom.

      if…[Read more]

  • Is there a way to determine who imported a Management Pack into the SCOM Console?

    I tried looking at Operations Manager event log but the logs have been cleared for the date that the MP was imported on.

  • I have had a request from our SQL dba’s to to target an override at a group of  sql user
    databases which are being mirrored or are part of the always on group for SQL
    2008 and SQL 2012. Is there a good way to do this rather than targetting them one by one. I cannot see a suitable class/object to target.

     

  • Hi Scott, appreciate your response. Don’t think targeting a group with a single server will work because it is my understanding that for SCOM 2007 R2 you need to target the override at the RMS and for SCOM 2012 you need to target the RMS emulator as this is where the correlation engine for the Exchange MP runs.

  • It seems you are restricted when applying overrides to Exchange 2010 servers with SCOM 2007 and SCOM 2012. Example:-You have multiple exchange servers in different sites but a single SCOM management group. You can’t target overrides at specific Exchange servers as you need to target the RMS because the correlation engine runs here meaning you have…[Read more]

  • I am aware that to create overrides for Exchange in SCOM 2012 you need to target the RMS against the monitor and rule that generated the alert for the override to apply. But what do you do if you want to target an override against an individual Exchange server?

    If I target the RMS surely it will affect the monitor against all of my Exchange estate?

  • Ok if I need to target the RMS Emulator then how do I override specific alerts for specific Exchange servers i.e. I have one CAS server that I need to override the severity on a specific alert but when I target the corresponding rule and monitor (HTTP Connectivity with Autodiscover) and target this server the override does not work. I know I need…[Read more]

  • Load More