Quantcast
Channel: Operations Manager - General forum
Viewing all 11941 articles
Browse latest View live

SCOM 2012 Event Log Alarming

$
0
0

I currently am using a Unit Monitor - Windows Events - Simple Event Detection - Windows Event Reset Monitor.

This monitor looks for event ID 3003 and looks for "Down" or "Up".  This will open or close an alert depending on its operational status.

The question/problem I am having is....the application i am monitoring always writes events under event ID 3003.  If I have multiple devices go down at the same time and then go down or come up in a different order, how can I get scom to differentiate between the events so its properly opening and closing the correct alerts?

Your help or ideas are greatly appreciated.

Thanks!


SCOM 2012 R2: Sporadic "MOM AD Admin Not Run" alerts, but ADI seems healthy (AD updating correctly)

$
0
0

Once every other day I get an alert in OpsMgr with the title "MOM AD Admin Not Run."  This is in the System Center Core Monitoring management pack and it's monitoring the event log for certain entries that indicate that AD Integration may not be healthy.  The rule alerts when it sees Event ID 11463 from the Health Service Modules source in the Operations Manager log.  The event occurs when, presumably, OpsMgr can't update the OperationsManager container in AD. 

Looking at the logs, I can see that this occurs once every other day or so (seems random, sometimes twice in one day), but then an hour later it is followed up with event ID 11468 which says that the management server has recovered from the previous ADI error.

I have, indeed, run momadadmin on the target domain and tested ADI and it appears to be working.  When I check the OperationsManager container I can see it is updating the groups and all the agents are seeing their AD assigned management servers when I look at it in Control Panel module on the hosts.

Is this is a false positive or a bug or do I have some sporadic AD issue?  There are no AD alerts at all in OpsMgr and otherwise AD seems to be working correctly as nobody has every had issues logging on or querying AD.

Detailed event log messages are below with server names and such sanitized from the output.

Log Name:      Operations Manager
Source:        Health Service Modules
Date:          9/9/2014 4:38:20 AM
Event ID:      11463
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SCOM1A.domain.com
Description:
OperationsManager container doesnt exist in domain domain.com or the Run As Account associated with the AD based agent assignment rule does not have access to the container. Please run MomADAdmin before configuring agent assignment rules and make sure the associated Run As Account is the member of the Operations Manager Administrator role. 

Workflow name: _DOMAIN_SCOM1A_domain.com 
Instance name: AD Assignment Resource Pool 
Instance ID: {529CF61E-A357-5AED-73CC-81D48E4327CA} 
Management group: OpsMgr-Main
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><System><Provider Name="Health Service Modules" /><EventID Qualifiers="49152">11463</EventID><Level>2</Level><Task>0</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2014-09-09T08:38:20.000000000Z" /><EventRecordID>352999</EventRecordID><Channel>Operations Manager</Channel><Computer>SCOM1A.domain.com</Computer><Security /></System><EventData><Data>OpsMgr-Main</Data><Data>_DOMAIN_SCOM1A_domain.com</Data><Data>AD Assignment Resource Pool</Data><Data>{529CF61E-A357-5AED-73CC-81D48E4327CA}</Data><Data>domain.com</Data></EventData></Event>
Log Name:      Operations Manager
Source:        Health Service Modules
Date:          9/9/2014 5:38:14 AM
Event ID:      11468
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      SCOM1A.domain.com
Description:
The agent assignment rule for domain domain.com and ManagementServer SCOM1A.domain.com has recovered from previous error condition. The SCPs and security groups were successfully created. 

Workflow name: _DOMAIN_SCOM1A_domain.com 
Instance name: AD Assignment Resource Pool 
Instance ID: {529CF61E-A357-5AED-73CC-81D48E4327CA} 
Management group: OpsMgr-Main
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><System><Provider Name="Health Service Modules" /><EventID Qualifiers="16384">11468</EventID><Level>4</Level><Task>0</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2014-09-09T09:38:14.000000000Z" /><EventRecordID>356241</EventRecordID><Channel>Operations Manager</Channel><Computer>SCOM1A.domain.com</Computer><Security /></System><EventData><Data>OpsMgr-Main</Data><Data>_DOMAIN_SCOM1A_domain.com</Data><Data>AD Assignment Resource Pool</Data><Data>{529CF61E-A357-5AED-73CC-81D48E4327CA}</Data><Data>domain.com</Data><Data>SCOM1A.domain.com</Data></EventData></Event>





Monitoring of links

$
0
0

Hello Everyone.

So, In SCOM is alerting that a filial is packet loss when i execute ping test but the internet is functionally normally.

Is Alerting because a rule in firewall server ? or a incorrect configuration in SCOM or SCCM? 


"OpsMgr Management Configuration" event ID 29181 on all SCOM 2012 R2 Management Servers

$
0
0

The details suggest the following... any suggestions?

OpsMgr Management Configuration Service failed to execute 'LocalHealthServiceDirtyNotification' engine work item due to the following exception

Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.DataAccessOperationTimeoutException: Exception of type 'Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.DataAccessOperationTimeoutException' was thrown.
   at Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.DataAccessOperation.ExecuteSynchronously(Int32 timeoutSeconds, WaitHandle stopWaitHandle)
   at Microsoft.EnterpriseManagement.ManagementConfiguration.SqlConfigurationStore.ConfigurationStore.ExecuteOperationSynchronously(IDataAccessConnectedOperation operation, String operationName)
   at Microsoft.EnterpriseManagement.ManagementConfiguration.SqlConfigurationStore.ConfigurationStore.IsAgentDirty(Guid agentId, LastAgentChangeCookie& lastAgentChangeCookie)
   at Microsoft.EnterpriseManagement.ManagementConfiguration.Engine.LocalDirtyNotificationWorkItem.ExecuteWorkItem()
   at Microsoft.EnterpriseManagement.ManagementConfiguration.Interop.ConfigServiceEngineWorkItem.Execute()

In addition I am also seeing Event ID 29120 with the following details...

OpsMgr Management Configuration Service failed to process configuration request (Xml configuration file or management pack request) due to the following exception

Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.DataAccessException: Data access operation failed
   at Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.DataAccessOperation.ExecuteSynchronously(Int32 timeoutSeconds, WaitHandle stopWaitHandle)
   at Microsoft.EnterpriseManagement.ManagementConfiguration.SqlConfigurationStore.ConfigurationStore.ExecuteOperationSynchronously(IDataAccessConnectedOperation operation, String operationName)
   at Microsoft.EnterpriseManagement.ManagementConfiguration.SqlConfigurationStore.ConfigurationStore.GetConfiguration(IDictionary`2 agentList, ConfigurationSignature configurationSignature)
   at Microsoft.EnterpriseManagement.ManagementConfiguration.Engine.AgentRequestProcessor.ProcessConfigurationRequest(ICollection`1 requestList, Int32& processedRequestsCount)
   at Microsoft.EnterpriseManagement.ManagementConfiguration.Engine.AgentRequestProcessor.Execute()
   at Microsoft.EnterpriseManagement.ManagementConfiguration.Engine.ThreadManager.ResponseThreadStart(Object state)
-----------------------------------
System.Data.SqlClient.SqlException (0x80131904): Timeout expired.  The timeout period elapsed prior to completion of the operation or the server is not responding.
   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning()
   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
   at System.Data.SqlClient.SqlDataReader.ReadInternal(Boolean setTimeout)
   at Microsoft.EnterpriseManagement.ManagementConfiguration.SqlConfigurationStore.AgentConfigGetOperation.ReadChildrenAgentInfo(IDataReader reader, AgentConfigurationBuilder builder)
   at Microsoft.EnterpriseManagement.ManagementConfiguration.SqlConfigurationStore.AgentConfigGetOperation.ReadData(SqlDataReader reader)
   at Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.ReaderSqlCommandOperation.SqlCommandCompleted(IAsyncResult asyncResult)

Provision for capacity alerts for Exchange 2010 servers on SCOM

$
0
0

Hi All,

This is one urgent requirement, please help. 

We have around 25 exchange servers in our environment, we need to configure alerts to limit the threshold to 80-90% of mailbox.

My requirement is to configure SCOM alerts for mailboxes hosted on databases servers. In our environment we have set that a database should contain 208 mailboxes. So we need to have alert when mailbox limits reaches to 80% or 90% (say 180 mailboxes in number).

Please let me know hw to configure this alert and thresholds in SCOM?

Best Regards,

Harsha L P

AD Integration: 1 Forest containing 2 Domains - Run Accounts/Profiles (SCOM 2012)

$
0
0

I know there are plenty of threads on AD integration & Run As accounts\Profiles, but none quite answering my scenario...so here goes.

1 Forest containing 2 domains -abc.com and def.com.
abc.com
contains SCOM 2012 infrastructure (Mgmt Servers (MS1, MS2), Ops DB, Reporting DWDB).

abc.com
1. Created SCOM Admins Global Security group

2. Created SCOM_MS_Action domain user account (used during SCOM setup & also Local Admin on all abc.com machines via Action Account AD group/GPO)

3. Ran MomADAdmin.exe DEV-OPSMGR12 "abc\SCOM Admins" abc\SCOM_MS_Action abc.com
(SCOM_MS_Actionadded to SCOM Admins group as a result)

4. Created Auto Agent Assignrule for abc.comagainst MS1 for "servers", Run As Profile left asdefault setting.

RESULT: All servers in abc.compopulated MS_PrimarySG_xxxgroup as expected.


def.com

5. Created SCOM Admins Global Security group

6. Created SCOM_AD_Assign domain user account 

7. Ran MomADAdmin.exe DEV-OPSMGR12 "def\SCOM Admins" def\SCOM_AD_Assign def.com
(SCOM_AD_Assign added toSCOM Admins group as a result)

8. Created Run As Account (Windows) "def\SCOM_AD_Assign"
Do I need to create this?

9. Set "def\SCOM_AD_Assign"Run As account to "More Secure"
Is"More Secure" correct, otherwise "Less Secure" causes errors on abc.com clients?

10. Created Run As Profile "def AD Agent Discovery" & assigned toDefault Management Pack
Do I need to create a new Run As Profile?
Was this the correct MP as when creating a new MP I got errors about it being unsealed when assigning to new Auto Agent Assign
rule? I was under the impression never to use the Default MP?

11. Associated "def\SCOM_AD_Assign" Run As account to "def AD Agent Discovery" Run As Profile, targetting "All Objects"
Is this correct?

12. Created Auto Agent Assignrule for def.comagainst MS1 for "servers", Run As Profile changed to "def AD Agent Discovery."

RESULT: def.com contains OperationsManagement\DEV-OPSMGR12container but no MS_PrimarySG_xxxgroup exists?

Do I need to add my Run As account to the "
Active Directory Based Agent Assignment Account" Run As Profile as well as/instead of creating a Run As Profile? - and if so, do I target All Objects, Class, Group, Object?

Thanks in advance - I find these Run As accounts very confusing when it comes to multiple domains!



SCOM 2012 SP1 availability report in MS Generic Report Libary shows inaccurate data

$
0
0

Hi,

in SCOM 2012 sp1, we have the generic availability report showing many of our web sites with no up time beyond a certain date.   The web sites are ok,  the web availability monitors are all healthy and the monitors test ok

None of these web availability tests are in Maintenance mode although what we are observing certainly makes us think that they are.

We also have a Web transaction login monitor for WEBSITE(A)  that does not show this same outage for a login test.

However WEBSITE(A)'s availability monitor shows the same downtime as the other web availability tests.

Any thoughts on where to look for this problem?  Im guessing its a problem placing the data in the Warehouse?


Thanks Lance

SCOM Recovery Task to recover AD Managment Alert is it possible

$
0
0

HI ALL,

I want to set some  recovery task for Active directory alerts if they occurred frequently. Any one can suggest what can be done for that? i have done self healing alerting for Services, process, IIS web site log, logical disk space and so on. But i am not getting how to setup recovery task for Active directory alert. if some one have explored this area please give some inputs how to proceed on this. Using Orchestrator anything can be done to automate the SCOM alert self healing for AD issues.


Omkar umarani SCOM STUDENT



How to Monitor Fortinet firewall

$
0
0

Hii,

we have to monitor Fortinet firewall via SCOM 2012 R2.

IS it possible? If yeas then how?

How people monitor networking devices and Forntinet via SCOM 2012 R2.

Earliest Response will be highly appreciated.


Regards, Syed Fahad Ali

Timeout when generating SLA Dashboard - EventID 26319 on RMS Emulator

$
0
0

Hi!

When I try to generate an SLA-dashboard, I get this error in the eventlog on my RMS Emulator:

----

EventID 26319

An exception was thrown while processing GetDataWarehouseStoredProcedureResult for session ID uuid:9c8133c7-e42b-47a2-a6e4-18ea7987ed39;id=3841.
 Exception message: The creator of this fault did not specify a Reason.
 Full Exception: System.ServiceModel.FaultException`1[Microsoft.EnterpriseManagement.Common.UnknownDatabaseException]: The creator of this fault did not specify a Reason. (Fault Detail is equal to Timeout expired.  The timeout period elapsed prior to completion of the operation or the server is not responding.).

---

Ultimately the SLA-dashboard shows no data, and I'm not able to use the dashboard.

One Management Server is Grey and it's not our RMS server.

$
0
0

Greetings -

One of our SCOM 2007 Servers is Grey and in the even log I see a bunch of 4508 errors.  This is our SCOM 2007 environement and it never get touched much as there is only exchange on it, and until they move to exchange 2013 they wont be moving to SCOM 2012.

So the RMS server is working fine, but the other server we had set up by definition is our WebConsole, Reporting, Collecting server.  It has been grey for a month or so as we have tried all the normal "Grey Agent" ways to get it back talking.

Cleared agent Cache and such.

What could this be, where could we look to see what is wrong? since we are getting alerts that is the main function of this scom enviroment as I dont think anyone uses reporting or the web console but still i am sure it impacts something we use as well.

SCOM 2007 R2 and patching

$
0
0

Hello,

For the second time after the monthly patching the RMS was not sending any email anymore after the server was patched.

I tried a restart of the service it did not do anything... no email processed...

I tried a reboot same issue ... no email processed...

I have to stop the "HealthService" service, rename the "\Program Files\System Center Operations Manager 2007\Health Service State" folder, start the "HealthService" service to make the email processing work again...

Any idea why this is happening?

Thanks,

Dom


System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

My Workspace

$
0
0

Hello,

I  have installed System Center Operation Manager 2012, I work in a big company and after I installed the management packages it discovered every servers and clients including those that belong to other benchs.

I wouldlike to know how can I customize My Workspace to monitor just servers that belong to the head office?

What is the criteria to view only servers and network devices of a certain bench?

Thank You

All Management Servers Resource Pool role keeps failing over between the 2 management servers

$
0
0

Every 10-15 minutes I keep getting these fail over events in the Ops manager logs on the management servers.

Using SCOM 2012 SP1 CU7

Event ID: 20021

The entity "All Management Servers Resource Pool" is now available through the system xxxxSCOM02.xxxxxx.com.au. 
 
 Entity Id: {4932D8F0-C8E2-2F4B-288E-3ED98A340B9F} 
 Management Group Name: DCVIC01 
 Management Group Id: {F70ED7BA-05E9-F630-8B74-87FDA2C61BA5}


AD Assignment Resource Pool also is failing over.

I have done the usual flush cache and restarted SCOM. I have also removed and re added SCOM02 back to the pool but it still keeps failing over. Every now and again ill get an alert for All Management Servers Resource Pool is unavailable then it clears itself. Is this normal behavior? How can i resolve this?


Cheers,

Martin

Blog:http://sustaslog.wordpress.com LinkedIn:  

Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Scom 2012 Rules

$
0
0

Hello community

I have Creat a Scom2012 Rules

I check the Event ID 4732

Parameter Name: EventID

Operator: Equals

Value:4732

Now I have 3 users that I wan't to check. with this rules. user1,user2,user,3

how can Isolve my problem. I think with a second rule.. but I try so diffrent settings.. So I need litle bit help

regards

rog


SCOM2012 Alert: SQL 2008 DB Average Wait Time & Recompilationis too high

$
0
0

WE have SCOM 2012sp1 CU3 updated.

I receive the below critical alerts from SQL servers continuously, please help me to resolve this issue.

SQL 2008 DB Average Wait Time is too high

   SQL DB 2008 SQL Recompilation is too high

Opsmgr Connector error - scom 2012 r2

$
0
0

hello,

I have an new installation of SCOM in my domain but I can't instal the agent to my servers, at momento that I start to instal trought the SCOM Console the server is still in the "pending management" showing and Reading the log event of the server that I'm trying to instal the agent I found the next error:

OpsMgr Connector, ID: 20057:

Failed to initialize security context for target MSOMHSvc/xxx.com The error returned is 0x80090303(The specified target is unknown or unreachable).  This error can apply to either the Kerberos or the SChannel package.

OpsMgr Connector, ID: 21001:

The OpsMgr Connector could not connect to MSOMHSvc/xxx.com because mutual authentication failed.  Verify the SPN is properly registered on the server and that, if the server is in a separate domain, there is a full-trust relationship between the two domains.

OpsMgr Connector, ID: 21016:

OpsMgr was unable to set up a communications channel to xxx.com and there are no failover hosts.  Communication will resume when xxx.com is available and communication from this computer is allowed.

I'm new in this organization and I think that the guy before me here did an installation of scom but not worked, I don't know if that is the problema, and old installation and registered on my AD.

please help me, I just tried everything that I found but nothing worked.

 


Office 365 Monitoring

$
0
0

Hi All,

MS released MP for Monitoring Office 365, In my environment office 365 is in Cloud , Can you please guide me how can i monitor office 365 with the help of MP

System Center 2012 Operations Manager - Which do I need Datacenter or Standard license

$
0
0

We are monitoring around 1,400 SQL, Sharepoint, and BizTalk servers with about 30% of them being VM.  All of our SCOM infrastructure servers will be VM (4 MS servers, 1 Reporting server, 1 Web server), with the exception of the DB servers being physical.

What I need to know is; do we need the Standard license or the Datacenter license?

Standard "permits management of up to two virtual OSEs."  What does this statement apply to: target servers with agents or servers in the management group?  Does this mean the standard license can be used for each target server that is physical or only has two or fewer VMs? 

Thanks

Credentials to management pack templates - Service monitoring

$
0
0

Hello,

I'm trying to see the list of services in a server to use the "management pack templates" in scom 2012 r2, but i'm getting the following error.


My action account don't have the necessary permitions to enter in the server. Where can i change the credentials to be used in this operation?

Thank you,

Rui

Viewing all 11941 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>