Quantcast
Channel: Operations Manager - General forum
Viewing all 11941 articles
Browse latest View live

SCOM Regular Expressions

$
0
0

Need help on following using Regular expressions (Regex):

  • Scan the antivirus log file for the timestamp. Do date -1 or check if timestamp is old and generate an alert.
  • Build a logic to find % Memory utilization
  • Build a logic to find % Bandwidth utilization

Receive two notifications (Warning and Critical) from Alert raised by Monitor

$
0
0

Hello,

Here's a problem. I use Windows OS management packs (for windows server 2003-2008-2012) and I need to create notification two times:

1. When logical disk free space monitor is in Warning state (changes state from Health->Warning)

2. When monitor changes state from Warning->Critical.

Now I can only set to Alert to be raised 1 time (Warning or Critical, Critical only), so notification reacts only one time. I created two notification subscription, but alert is raised only one time, and then only severity changes, notifications can't react to this.

As far as i have read documentation, I will need to create custom monitor or rule for it, to create different alert.

I have tried to create Orchestrator Runbook with Get-Monitor element in it, but i cannot filter only 3 free space monitor that I need. It targets only Logical disk with some other monitors. SCOM Powershell Module also doesn't have needed tools to accomplish this task.

Anyone has any ideas? Thanks in advance. 

Need a Script to find out the Grayed out agents in SCOM 2012

$
0
0

Hi,

I am trying to create a Dashboard view to list the Grayed Out servers in my SCOM 2012 environment by using the script below but it does not work as expected.

Is there something wrong with this script or could you suggest me any other solution please?

#Get all agent objects which are not available (grey)
$agentclass = Get-SCOMClass -Name "Microsoft.SystemCenter.Agent"
$agentobjects = Get-SCOMMonitoringObject -Class:$agentclass | Where-Object {$_.IsAvailable -eq $false}

   foreach ($agent in $agentobjects)
  {
    $dataObject = $ScriptContext.CreateFromObject($agent, "Id=Id,State=HealthState,Display Name=DisplayName", $null)
    #Get the watcher state for the agent
    $watcher = Get-SCOMClass -name "Microsoft.SystemCenter.HealthServiceWatcher"| get-scomclassinstance |  Where-Object {$_.Displayname -eq $agent.DisplayName}
    $dataObject["Watcher State"] = $watcher.HealthState.toString()
    $ScriptContext.ReturnCollection.Add($dataObject)
  }

Thanks

Srini












   





Ping in Heartbeat

$
0
0

Hi,

I have a question regarding the SCOM (2012/2007) heartbeat mechanism.

From what I know, The SCOM Management Server gets "I'm alive" signal from the monitored agent.

If the MS didn't get the signal 4 times in a raw, it sends the "health service down" message and checks ping with the monitored agent. It will send a message accordingally(MSG if down, No MSG if up).

My question is: The one who sends the ping check - s the MS, right?

If so, I have another question regarding a specific architecture(I tried to upload a photo but couldn't because my account needs to be verified):

2 Management servers

3 GW(1-3) servers that communicates with MS1

X agents under GW1

What happens when?: Agent1(A1) health service is down and his manager is GW1. Who sends the ping to A1, GW1 or MS1?

The way I see it - the one who sends the ping to A1 is MS1. If so, can I change it so the one who sends the ping will be GW1?

Thanks,

Yakir.

Access to Web Console

$
0
0

Hello,

I have a lot of users able to access the SCOM 2007 R2 web console.

I created a new role under Profile Operator for two users and they are getting the message:

"You don't have permissions to view this directory or page"

it has all Tasks selected

../..


System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Subscription for one / more computer (all objects)

$
0
0

Hello,

I want to create a subscription for all Objects that are detected on a Computer.

Do you have any good idea except create a Static Group with all Objects that I searched for that computer Name?

Basically: for a Computers that is a Domain Controller, and DNS I need to create a subscription for all types of alerts: Windows, DC, Agent, DNS to be sent to a person.

Thank you for the feedback

SPN Registration clarification (in SCOM 2012 SP1 UR2)

$
0
0

Hi,

was looking some clarification of manual registration of SPN's - as is the requirement in my case were I am using a domain account for SDK and data access service.

I have read the Service Principle Names section of this Library document http://technet.microsoft.com/library/hh487288.aspx and have also referenced Kevins post here http://blogs.technet.com/b/kevinholman/archive/2011/08/08/opsmgr-2012-what-should-the-spn-s-look-like.aspx and also reviewed the product knowledge from the scom rule that checks Data Access Service SPN registration.  However I'm still a bit confused!!

I had the issue in my Preprod deployment which I resolved by manual registration which I completed as per following the product knowledge in the alert ie following this advice and syntax:

If the SPNs are not correctly registered, register them manually by running the following commands, using an account with domain administrator rights:

Setspn.exe -A MSOMSdkSvc/<MS NetBIOS Name> <MS NetBIOS Name>

Setspn.exe -A MSOMSdkSvc/<MS FQDN> <MS NetBIOS Name>

This I assume this is registering the SDK service for the computer account (where MS NetBIOS Name is mgmt Server netbios and MS FQDN is Mgmt Server FQDN).

However if I run Kevin's check,

C:\>setspn –L DOMAIN\sdkdomainuseraccount

I dont get any SDK SPN's for my account, the output is empty!

Can anyone advise if there should definately be output in the above command as per Kevins blog, or is the registration of machine account SPN's sufficient?  Adding to the confusion is on other references to SPN's, they state NOT to use the -A switch and instead use -S as that checks for duplicates (but the -A doesnt) - would be nice if the product knowledge could be updated to reflect the latest guidance!

Any advice much appreciated...

Alert subscription data source module was unable to find alerts that match the subscription because of database errors.

$
0
0

We have been seeing this error in the Operations Manager Event Log for quite a while.

Alert subscription data source module was unable to find alerts that match the subscription because of database errors.
 The following error(s) were encountered:
 Exception Message: ExecuteScalar requires an open and available Connection. The connection's current state is closed.
 

One or more workflows were affected by this.  

Workflow name: MMEA_1348391424 
Instance name: aaa.bbb.com
Instance ID: {88AED57C-5627-0C0B-E5C1-A9176A7E64CD} 
Management group: SCOMr2

I haven't been able to spot any network outage on the management servers, or the database servers to indicate a problem.  It usually happens at night, and when I look at the health explorer, the entity is healthy.

Please would someone help me in finding the root cause of this issue and what can be done to avoid it.

There were no backups running when this alert was generated.  As far as I'm aware, everything was idle.

I would appreciate any help.

Karan


SCOM -SCVMM Post Integration Warning Alerts

$
0
0

HI

Recently we integrated SCOM 2012 and VMM 2012 as per this blog-

http://blogs.technet.com/b/kevinholman/archive/2012/08/21/integrating-vmm-2012-and-opsmgr-2012.aspx#comments

It was a success! However, there are lot of warning alerts popping up from most of windows computers

Monitor - Run As Account Verification

Context:
Date and Time:2/19/2015 10:33:54 PM
Log Name:Operations Manager
Source:HealthService
Event Number:7015
Level:1
Logging Computer:gooroo1.opsmgr.com
User:N/A
Description:
The Health Service cannot verify
the future validity of the RunAs account OpsMgr\SCVMM_Int for
management group OM12. The error is Logon failure: the user has not
been granted the requested logon type at this computer.(1385L).

Event Data:

< DataItem
type="System.XmlData" time="2015-02-19T22:33:54.3992478-08:00"sourceHealthServiceId="A425A7F1-84CD-A2F8-B2F6-82FAEED9CF46">
< EventData
>
 <Data> OpsMgr</Data>
 <Data>SCVMM_Int</Data>
 <Data>Logon failure:
the user has not been granted the requested logon type at this computer.

</Data
>
 <Data>1385L
</Data
>
 <Data>OM12</Data>
 </EventData
>
 </DataItem
>

Run as account for VMM is OpsMgr\SCVMM_Int which is distributed for "Less Secure" (By default) and the corresponding profile is set to "all targeted objects" as per blog.

Does anyone know how to fix this?

regards

Guru


Gururaj Pai

Update Rollup 4 for Microsoft System Center 2012 R2 - Operations Manager Agent (KB2992020)

$
0
0

Where do you apply this agent update ?

Is this installed on your server... what are the steps in getting the agent out to the target client machine.


hyohoonk@hotmail.com

SCOM 2012 R2 Update Rollup 3 & 4

$
0
0

Hello,

Has anyone had any success downloading any SCOM 2012 R2 update rollups from the Microsoft Update Catalog site.  No matter what browser I use I'm unsuccessful.  Sometimes when I click on Add and then click on view basket I will get that page to open but then when I click download it just errors out with funky messages about "The website has encountered a problem"  {Error number: 8DDD0010} There is a problem with the page you are looking for and it cannot be displayed.  Can someone advise?  Or atleast point me in a direction of a location where I can do a manual download of all the files.  Any help would be appreciated.  Thx.

Rick,

MSExchange Monitoring OWAConnectivity External failure

$
0
0

Hello Sir,

Could some one help me on the below issue. As we are getting exchange alert from the SCOM Sever more frequently. No error id's in SCOM server as well as in exchange server. The OWA links are opening fine with out any issues for the external users, but still getting alert from SCOM.

In SCOM Server the "CLIENT ACEESS" has RED X.(ERROR)

Please assist us how to fix the below error.

Date and Time: 20/02/2015 15:02:32
Log Name: Script-generated data
Source: MSExchange Monitoring OWAConnectivity External
Event Number: 1001
Level: 1
Logging Computer: NGss.xxx.local
User: 
 Description:
One or more of the Outlook Web App connectivity tests failed. Detailed information: ------------------------------------- Target: NGss.xx.local|BGRP Error: The test received an unexpected response to an Outlook Web App request. URL:  https://owa.exx.xxx.com/owa// Details: [15:02:11.758] : The TrustAnySSLCertificate flag was specified, so any certificate will be trusted. [15:02:11.758] : Sending the HTTP GET logon request without credentials for authentication type verification. [15:02:32.758] : The test received an unexpected response to an Outlook Web App request. URL: / Authentication Method: Mailbox Server: sss.xxx.local Client Access Server Name: sss.xxx.local Scenario: Logon Scenario Description: Sign in to Outlook Web App and verify the response page. User Name: extest_730bfbcde7a04 Performance Counter Name: Logon Latency Result: Failure Site: BGRP Latency: -00:00:00.0010000 Secure Access: True ConnectionType: Plaintext Port: 0 Latency (ms): -1 Virtual Directory Name: owa (Default Web Site) URL:https://owa.exx.xxx.com/owa/ URL Type: External Error: The test received an unexpected response to an Outlook Web App request. URL:/ ------------------------------------- Diagnostic command: "Test-OwaConnectivity -TestType:External -MonitoringContext:$true -TrustAnySSLCertificate:$true -LightMode:$true"

Event Data:

Date and Time: 20/02/2015 15:02:32
Property Name Property Value
Message One or more of the Outlook Web App connectivity tests failed. Detailed information: ------------------------------------- Target: sss.xxx.local|BGRP Error: The test received an unexpected response to an Outlook Web App request. URL:https://owa.ss.xxx.com/owa/ Details: [15:02:11.758] : The TrustAnySSLCertificate flag was specified, so any certificate will be trusted. [15:02:11.758] : Sending the HTTP GET logon request without credentials for authentication type verification. [15:02:32.758] : The test received an unexpected response to an Outlook Web App request. URL:https://owa.ss.xxx.com/owa/ Authentication Method: Mailbox Server: sss.xxx.local Client Access Server Name: sss.xxx.local Scenario: Logon Scenario Description: Sign in to Outlook Web App and verify the response page. User Name: extest_730bfbcde7a04 Performance Counter Name: Logon Latency Result: Failure Site: BGRP Latency: -00:00:00.0010000 Secure Access: True ConnectionType: Plaintext Port: 0 Latency (ms): -1 Virtual Directory Name: owa (Default Web Site) URL:https://owa.ss.xxx.com/owa/ URL Type: External Error: The test received an unexpected response to an Outlook Web App request. URL:https://owa.ss.xxx.com/owa/ ------------------------------------- Diagnostic command: "Test-OwaConnectivity -TestType:External -MonitoringContext:$true -TrustAnySSLCertificate:$true -LightMode:$true"
EventNumber 1001
EventType 1
EventSource MSExchange Monitoring OWAConnectivity External
EventInstanceName 
LoggingComputer sss.xxx.local

Thanks in Advance

Regards,
Sanjeev Kumar N

Windows OS on W2k8r2 Domain controller Not monitored state

$
0
0

I've Installed Scom 2012 R2 and SQL 2012 on one box. Also installed Update Rollup 5 for Opsmgr. I imported the latest Windows Base OS MP 6.0.7296.0, and deployed my first agent on a W2k8R2 domain controller. The client is healthy, but the Windows Operating state is Not Monitored.

In the Windows Base OS MP, there isn't a Discover and Monitoring MP for W2K8R2, only for W2K8. But I suppose that this also discovers the R2 versions. I did not installed the Active directory MP yet.

I've search the net, Flushed the agent cache, put the agent in maintenance mode for a few minutes, repaired the agent. Didn't work.

I then installed a opsmgr agent on a W2K12R2 server, to check if it's a opsmgr or SQL issue. But everything is healthy on the W2k12R2 server.

Although I did not install the AD MP, do I have to configure a run as account?

Thanx



Identifying the Root Management Server in Operations Manager 2012

$
0
0

Hello,

I want to replace my primary management server.

Do i need to do the following steps if i have SCOM 2012??

https://technet.microsoft.com/en-us/library/cc540401.aspx?f=255&MSPPError=-2147217396

  1. Promote a management server to a root management server role
  2. Configure the reporting server with the name of the new root management server.
  3. Configure the Web console with the name of the new root management server.
  4. Set ENABLE_BROKER to 1 if needed

Thanks!




TechNet

Notifications for Server / hardware specific alerts

$
0
0

Hi

We are trying to find a way to create notifications for all servers hardware specific alerts to a specific team. These alerts should include memory, disk, cpu utilization or errors specific to server hardware / OS.

Hope someone can help us on this

Regards


Server Engineer


SCOM Regular Expressions

$
0
0

Need help on following using Regular expressions (Regex):

  • Scan the antivirus log file for the timestamp. Do date -1 or check if timestamp is old and generate an alert.
  • Build a logic to find % Memory utilization
  • Build a logic to find % Bandwidth utilization

SCOM Alert history comments not saving

$
0
0

We are using SCOM 2012 SP1 and our monitoring(L1) team is updating the alert history after acknowledging the alert through the web console. For some of the L1 team engineers, the comments updated in alert history did not show up after saving it. 

As a Work around, they have to log off and login into the Web console and update the comments to persist the comments in alert history.

Appreciate if anybody guide me in right direction to resolve this issue.

Thanks

Syed Musaib


Use Wildcard SSL Cert to Monitor Non-Domain COmputers

$
0
0

Hello,

  I was wondering if a Wildcard SSL Cert from GoDaddy or another Provider can be used to monitor Non-Domain Computer on SCOM 2012R2?

TIA,

Jim

Using web transaction monitor to record dynamic java sessions.

$
0
0

Hello,

The title may be a bit confusing please forgive me for that :)

I am recording a login-logout session for a business objects portal.

Post login, the web application (as most do) generates unique tokens for each login session and uses that token for subsequent links for that single session.

The problem: SCOM, records the links that were generated during the recording session. Which generates lets say tokenabcd. In subsequent iterations of the monitor, the web application will generate different tokens for each logon attempt but SCOM continues to use the links that were generated using the tokenabcd. This causes false alerts as the token being used by SCOM is not dynamic!

This is going to be a serious hurdle for us as we have several similar applications and I need to find a work around or solution to this.

Have anybody come across this till now? Any suggestions will be of great help..

Thank you for your time.

SNMP working Properly in SCOM 2012 R2 Server

$
0
0

Hi 

How can I know SNMP working Properly in SCOM 2012 R2 Server.

actually scom discovering and missing so i can't sure what's reason

Viewing all 11941 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>